Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xCIsO3fHs5m3isAHCBafKpS5wl0.roa
File: xCIsO3fHs5m3isAHCBafKpS5wl0.roa (raw, json)
Hash identifier: dY7Ka6J2+hfT80tl5AExh3sY/Mbyq7gi7ne7RHOZ7Ik=
Subject key identifier: C4:22:2C:3B:77:C7:B3:99:B7:8A:C0:07:08:16:9F:2A:94:B9:C2:5D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2A0278A15D0F118A467C1E80BC4C1978
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xCIsO3fHs5m3isAHCBafKpS5wl0.roa
Signing time: Fri 25 Aug 2023 00:05:19 +0000
ROA not before: Fri 25 Aug 2023 00:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:2a01:97ac/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2a:02:78:a1:5d:0f:11:8a:46:7c:1e:80:bc:4c:19:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 00:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4222c3b77c7b399b78ac00708169f2a94b9c25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:16:91:4c:0f:d2:c3:ab:99:f3:8f:39:fc:77:
5f:27:93:73:ac:f4:c8:0d:5d:c4:e5:3a:6c:e0:48:
45:70:11:3f:d1:35:89:39:14:75:e3:16:df:d3:04:
a0:0d:3c:35:63:30:8a:67:16:db:37:fd:4b:fe:2e:
75:93:9a:5a:58:7e:d4:0c:24:c1:87:24:49:26:2d:
f5:b8:d2:07:c0:e2:22:90:85:dc:44:3e:5c:0f:1d:
ba:9e:95:5a:8f:27:41:8e:b3:21:07:57:4f:d9:a9:
36:a2:1b:53:4c:33:0c:0f:f0:6c:7e:f9:c9:69:97:
91:db:f1:de:e3:ea:d4:ea:fa:8c:82:ab:f6:8d:1e:
db:70:b1:e3:2d:79:cc:c3:2d:71:59:5d:ac:28:2e:
29:57:08:56:4b:0f:14:af:00:d7:99:0a:cd:7a:fd:
23:17:74:0d:49:c3:dd:9f:2e:c4:2a:d4:75:45:87:
72:48:53:d3:25:75:ec:26:53:4d:81:b2:95:ba:bc:
60:f3:ad:95:73:9c:3e:ac:2e:52:57:d5:10:34:71:
8f:56:4c:f6:0a:77:4b:18:b2:83:ae:ed:d6:03:ea:
af:b8:84:b0:6c:47:f2:ab:98:66:d3:69:51:74:31:
6c:88:cf:fc:55:2d:51:7e:88:ba:9c:08:7d:56:05:
e8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:22:2C:3B:77:C7:B3:99:B7:8A:C0:07:08:16:9F:2A:94:B9:C2:5D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xCIsO3fHs5m3isAHCBafKpS5wl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b2:00:5a:5f:ab:47:4c:d0:f1:f2:a9:c4:79:58:9b:4a:04:6a:
17:48:7e:bd:ed:bc:b3:8f:95:aa:67:ae:f8:08:fd:86:f1:dc:
5c:19:c5:a4:c2:13:56:c4:e6:9c:86:66:68:36:02:48:93:77:
3b:88:9b:4b:b6:cb:96:a5:9a:14:81:dd:9c:49:66:37:9a:c9:
05:82:f4:82:8e:d7:ef:49:5b:8e:f5:af:ce:99:4f:a2:c7:4d:
c9:5f:47:e7:ee:f8:df:8b:72:0f:42:7b:df:c0:ca:f4:91:b3:
a3:10:34:8b:30:e1:2b:bb:83:67:03:2f:a5:32:69:47:96:47:
7c:86:80:1d:38:40:23:c9:b2:de:d4:13:31:0d:04:4e:88:61:
b4:5a:c7:c7:a4:84:71:0c:1a:4d:05:46:3b:7a:0b:16:25:1a:
b1:d2:ef:76:b2:cc:fd:cd:53:19:43:df:6f:a6:d4:e1:16:ca:
65:b0:b3:b0:41:16:66:8e:84:c8:b1:d6:42:f2:ee:8e:c3:37:
29:7b:ba:36:a6:82:24:e5:91:80:6c:f1:3b:07:26:ef:94:27:
b8:33:de:87:15:c4:e2:e3:de:b4:72:81:7a:0d:ab:6a:fd:13:
b7:87:aa:3a:f9:b9:af:90:c8:b3:77:f6:cb:97:79:8f:69:ec:
ea:5d:2a:f1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoqAnihXQ8RikZ8HoC8TBl4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODI1MDAwNTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDIyMmMzYjc3YzdiMzk5Yjc4YWMwMDcwODE2OWYyYTk0YjljMjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRaRTA/Sw6uZ8485/HdfJ5NzrPTI
DV3E5Tps4EhFcBE/0TWJORR14xbf0wSgDTw1YzCKZxbbN/1L/i51k5paWH7UDCTB
hyRJJi31uNIHwOIikIXcRD5cDx26npVajydBjrMhB1dP2ak2ohtTTDMMD/BsfvnJ
aZeR2/He4+rU6vqMgqv2jR7bcLHjLXnMwy1xWV2sKC4pVwhWSw8UrwDXmQrNev0j
F3QNScPdny7EKtR1RYdySFPTJXXsJlNNgbKVurxg862Vc5w+rC5SV9UQNHGPVkz2
CndLGLKDru3WA+qvuISwbEfyq5hm02lRdDFsiM/8VS1Rfoi6nAh9VgXokQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMQiLDt3x7OZt4rABwgWnyqUucJdMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveENJc08zZkhzNW0zaXNBSENCYWZLcFM1d2wwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALIAWl+rR0zQ8fKpxHlY
m0oEahdIfr3tvLOPlapnrvgI/Ybx3FwZxaTCE1bE5pyGZmg2AkiTdzuIm0u2y5al
mhSB3ZxJZjeayQWC9IKO1+9JW471r86ZT6LHTclfR+fu+N+Lcg9Ce9/AyvSRs6MQ
NIsw4Su7g2cDL6UyaUeWR3yGgB04QCPJst7UEzENBE6IYbRax8ekhHEMGk0FRjt6
CxYlGrHS73ayzP3NUxlD32+m1OEWymWws7BBFmaOhMix1kLy7o7DNyl7ujamgiTl
kYBs8TsHJu+UJ7gz3ocVxOLj3rRygXoNq2r9E7eHqjr5ua+QyLN39suXeY9p7Opd
KvE=
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:54:43 2025 by rpki-client