Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xWTn9Hr_KgX84cOo3a3hQEeDBb4.roa
File: xWTn9Hr_KgX84cOo3a3hQEeDBb4.roa (raw, json)
Hash identifier: xYL9LwjeMSSLYf/uwBLuau/a7G3adEACwlkbdlvgCio=
Subject key identifier: C5:64:E7:F4:7A:FF:2A:05:FC:E1:C3:A8:DD:AD:E1:40:47:83:05:BE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184A27B8B82EC938F8C1B86B48C3870C8A6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xWTn9Hr_KgX84cOo3a3hQEeDBb4.roa
Signing time: Wed 23 Nov 2022 03:15:16 +0000
ROA not before: Wed 23 Nov 2022 03:15:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a2:7b:8b:82:ec:93:8f:8c:1b:86:b4:8c:38:70:c8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 23 03:15:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c564e7f47aff2a05fce1c3a8ddade140478305be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:96:ca:06:c0:98:c5:dd:bf:1f:70:28:c9:22:
90:72:c7:44:e2:56:de:64:c1:63:e2:40:98:09:38:
55:45:43:3d:89:e9:8a:85:cd:aa:ef:1c:fb:f5:7d:
a1:85:2d:d9:6e:fb:2d:ce:ec:e5:da:9d:3e:bc:ef:
c8:96:2d:76:1c:95:ea:c6:d6:eb:35:be:ec:e5:f4:
b2:dc:54:f2:5a:08:55:4a:bc:01:48:6d:c0:98:ac:
73:cd:7d:b5:09:c2:12:a7:64:4a:d4:95:7a:41:d5:
91:e0:eb:c1:cf:db:93:51:c3:60:10:46:e5:7a:18:
bd:b0:a2:0c:8a:7b:96:b0:c0:07:3e:79:b2:63:7d:
45:cd:52:d8:90:a3:8c:1c:20:24:2d:7e:87:8d:c6:
64:39:6b:fa:ae:60:e3:3e:2c:cb:af:00:6f:8a:fd:
f9:91:4e:93:b6:1f:74:cf:73:4c:73:dc:7f:0e:c4:
2c:89:25:32:bf:71:5c:f7:ed:9c:1b:a9:e8:f7:e8:
30:13:cc:c7:a6:40:09:ec:c9:2c:0c:50:5b:26:d8:
e3:c2:4d:05:37:6d:9c:46:fe:7b:0d:e9:44:9c:45:
80:f8:4e:89:d0:f2:75:bf:17:d6:b2:59:8c:4f:ec:
85:e0:79:97:18:1b:11:82:f2:21:b6:13:27:64:78:
93:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:64:E7:F4:7A:FF:2A:05:FC:E1:C3:A8:DD:AD:E1:40:47:83:05:BE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xWTn9Hr_KgX84cOo3a3hQEeDBb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:f4:a6:03:29:bd:5e:8f:ab:45:cd:a6:00:31:22:53:33:10:
8c:54:4f:59:1a:b5:ff:67:02:cf:31:78:47:05:4f:3a:a8:d2:
85:65:f8:d9:0f:ad:e3:20:3d:b2:20:5b:f5:e4:e5:2d:39:a7:
51:6d:be:88:de:a3:70:b6:85:7c:69:2d:55:e1:be:18:1a:d1:
aa:ad:74:e3:df:60:3d:2b:6b:38:10:6a:3b:f9:11:15:08:29:
3f:28:d5:0a:ba:18:01:b6:2f:ad:15:90:19:a8:78:38:6c:a6:
b2:6d:eb:75:c6:28:95:51:9d:e4:db:ef:b9:71:13:2d:61:62:
73:6b:3c:80:91:38:92:01:ff:87:f4:78:5f:52:9c:05:e9:a9:
d8:ca:07:49:30:44:9e:2f:87:1c:57:9c:96:bc:08:ab:70:e0:
0d:6e:92:8a:9a:c5:93:db:1e:8b:53:2b:ce:48:15:89:7a:a7:
12:78:81:df:bd:df:fb:2b:97:49:27:31:2f:9d:87:b8:bb:00:
d8:27:6e:0e:d7:c3:ac:02:03:04:eb:f9:7d:fd:c6:7c:60:29:
c5:12:3c:fe:e1:32:d3:e3:74:4c:e3:99:3c:7a:93:70:c5:cf:
a0:e6:96:ba:2a:05:99:55:dd:2d:74:c9:8a:92:80:14:ae:40:
8c:90:10:23
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYSie4uC7JOPjBuGtIw4cMimMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTIzMDMxNTE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTY0ZTdmNDdhZmYyYTA1ZmNlMWMzYThkZGFkZTE0MDQ3ODMwNWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJbKBsCYxd2/H3AoySKQcsdE4lbe
ZMFj4kCYCThVRUM9iemKhc2q7xz79X2hhS3Zbvstzuzl2p0+vO/Ili12HJXqxtbr
Nb7s5fSy3FTyWghVSrwBSG3AmKxzzX21CcISp2RK1JV6QdWR4OvBz9uTUcNgEEbl
ehi9sKIMinuWsMAHPnmyY31FzVLYkKOMHCAkLX6HjcZkOWv6rmDjPizLrwBviv35
kU6Tth90z3NMc9x/DsQsiSUyv3Fc9+2cG6no9+gwE8zHpkAJ7MksDFBbJtjjwk0F
N22cRv57DelEnEWA+E6J0PJ1vxfWslmMT+yF4HmXGBsRgvIhthMnZHiT2QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMVk5/R6/yoF/OHDqN2t4UBHgwW+MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveFdUbjlIcl9LZ1g4NGNPbzNhM2hRRWVEQmI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAD30pgMpvV6Pq0XNpgAx
IlMzEIxUT1katf9nAs8xeEcFTzqo0oVl+NkPreMgPbIgW/Xk5S05p1Ftvojeo3C2
hXxpLVXhvhga0aqtdOPfYD0razgQajv5ERUIKT8o1Qq6GAG2L60VkBmoeDhsprJt
63XGKJVRneTb77lxEy1hYnNrPICROJIB/4f0eF9SnAXpqdjKB0kwRJ4vhxxXnJa8
CKtw4A1ukoqaxZPbHotTK85IFYl6pxJ4gd+93/srl0knMS+dh7i7ANgnbg7Xw6wC
AwTr+X39xnxgKcUSPP7hMtPjdEzjmTx6k3DFz6DmlroqBZlV3S10yYqSgBSuQIyQ
ECM=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:20:15 2025 by rpki-client