Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xI2VR5zzCNlfKE6RcCOR-zHB_O4.roa
File: xI2VR5zzCNlfKE6RcCOR-zHB_O4.roa (raw, json)
Hash identifier: fu5N33bHU83nd+czqnvmLDT2A5imGRNernAiu89xmjs=
Subject key identifier: C4:8D:95:47:9C:F3:08:D9:5F:28:4E:91:70:23:91:FB:31:C1:FC:EE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185150DA8940BF3F353AF556B062ABD9416
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xI2VR5zzCNlfKE6RcCOR-zHB_O4.roa
Signing time: Thu 15 Dec 2022 09:11:34 +0000
ROA not before: Thu 15 Dec 2022 09:11:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:15:0d:a8:94:0b:f3:f3:53:af:55:6b:06:2a:bd:94:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 15 09:11:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c48d95479cf308d95f284e91702391fb31c1fcee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0f:5c:5f:75:60:0b:3b:bf:90:a5:d4:1a:b0:
36:68:9d:7e:b4:86:43:d7:d0:05:95:bb:74:e1:a6:
ba:8c:6b:a5:1c:44:69:21:93:00:a3:ce:2b:b5:af:
3d:f8:2d:c1:4f:72:e6:f5:f6:dd:26:33:98:8f:57:
e9:ea:c5:62:81:e5:37:c3:c9:e8:bd:50:c1:7c:ae:
18:9a:cc:b3:3d:8b:06:e2:f2:7b:e1:18:4a:46:79:
65:ac:c8:94:88:8a:be:cf:18:ff:93:99:da:7a:71:
2e:bc:86:5d:d5:e6:aa:de:dd:46:c2:93:29:22:0d:
c2:b3:59:cd:dd:50:73:f5:36:e4:fe:96:65:ed:25:
fb:7b:f4:f9:09:95:4e:e6:94:5e:cd:2f:22:83:da:
80:6d:51:74:82:6f:24:da:82:8e:d4:a0:a9:da:7c:
8f:8a:7f:e5:da:fd:45:4b:dc:18:bb:c7:61:e9:4d:
3e:3b:78:08:0c:0f:e3:7f:25:f0:df:28:bf:f1:f5:
a3:00:6f:8f:1b:5b:d2:2d:8d:17:80:c1:3e:aa:c1:
77:b8:ac:57:bb:f2:2e:fc:ed:00:85:3e:2a:db:e9:
55:63:4f:dc:d8:ad:45:1a:07:da:f0:6f:f5:cc:d7:
90:eb:0c:6d:3c:83:bb:be:c6:29:87:e9:3a:85:7e:
38:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8D:95:47:9C:F3:08:D9:5F:28:4E:91:70:23:91:FB:31:C1:FC:EE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xI2VR5zzCNlfKE6RcCOR-zHB_O4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:94:17:c9:2f:46:5b:e0:b2:ba:a1:ad:6d:58:91:dc:43:42:
73:f5:3b:ec:49:6e:52:1a:ca:46:91:74:18:84:14:98:f7:42:
53:81:de:09:38:6f:f0:c3:fd:66:b3:0d:6d:1e:27:aa:fb:04:
65:44:0d:6c:41:76:b3:31:b9:1e:5f:6a:1e:f3:a7:20:46:ff:
13:a1:e6:ca:4c:c0:53:a4:c0:47:76:e5:a9:a1:9d:2d:b5:86:
83:ca:08:ec:92:7f:e9:d4:c3:ca:fc:25:41:49:0a:61:39:e1:
67:eb:7d:a5:90:0e:a7:ed:34:cc:5b:6c:17:ba:eb:2d:f9:48:
3b:c7:b1:10:a6:69:85:40:c3:76:12:ac:7c:fc:12:ec:f5:ed:
e7:a1:71:97:eb:de:ce:87:6e:d3:92:8e:63:f0:7d:4e:63:83:
b9:45:32:50:9a:6c:0f:76:fa:a4:47:d8:7c:77:5f:e6:5e:4c:
06:c0:ea:51:7b:9e:f4:8b:36:9c:2d:3a:00:99:4c:29:ac:28:
a7:83:5d:79:62:ec:7f:fe:80:0a:3b:01:0e:b0:a2:40:08:33:
e5:f7:d7:f9:07:38:8a:bb:80:33:73:49:ea:b3:47:ef:99:52:
2b:97:3c:9b:a7:e9:aa:1c:a1:e2:44:a1:a6:85:52:60:12:eb:
fe:15:31:67
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUVDaiUC/PzU69VawYqvZQWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjE1MDkxMTM0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDhkOTU0NzljZjMwOGQ5NWYyODRlOTE3MDIzOTFmYjMxYzFmY2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA9cX3VgCzu/kKXUGrA2aJ1+tIZD
19AFlbt04aa6jGulHERpIZMAo84rta89+C3BT3Lm9fbdJjOYj1fp6sVigeU3w8no
vVDBfK4YmsyzPYsG4vJ74RhKRnllrMiUiIq+zxj/k5naenEuvIZd1eaq3t1GwpMp
Ig3Cs1nN3VBz9Tbk/pZl7SX7e/T5CZVO5pRezS8ig9qAbVF0gm8k2oKO1KCp2nyP
in/l2v1FS9wYu8dh6U0+O3gIDA/jfyXw3yi/8fWjAG+PG1vSLY0XgME+qsF3uKxX
u/Iu/O0AhT4q2+lVY0/c2K1FGgfa8G/1zNeQ6wxtPIO7vsYph+k6hX44OQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMSNlUec8wjZXyhOkXAjkfsxwfzuMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveEkyVlI1enpDTmxmS0U2UmNDT1ItekhCX080LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEiUF8kvRlvgsrqhrW1Y
kdxDQnP1O+xJblIaykaRdBiEFJj3QlOB3gk4b/DD/WazDW0eJ6r7BGVEDWxBdrMx
uR5fah7zpyBG/xOh5spMwFOkwEd25amhnS21hoPKCOySf+nUw8r8JUFJCmE54Wfr
faWQDqftNMxbbBe66y35SDvHsRCmaYVAw3YSrHz8Euz17eehcZfr3s6HbtOSjmPw
fU5jg7lFMlCabA92+qRH2Hx3X+ZeTAbA6lF7nvSLNpwtOgCZTCmsKKeDXXli7H/+
gAo7AQ6wokAIM+X31/kHOIq7gDNzSeqzR++ZUiuXPJun6aocoeJEoaaFUmAS6/4V
MWc=
-----END CERTIFICATE-----
Generated at Fri May 2 05:17:34 2025 by rpki-client