Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xbnR74Hwi5OlBK-gFkVGxeOMqOs.roa
File: xbnR74Hwi5OlBK-gFkVGxeOMqOs.roa (raw, json)
Hash identifier: Niz4HE7KS/TRGmwBfUjaTNSua5TIwIT0KnbPkoUpmX0=
Subject key identifier: C5:B9:D1:EF:81:F0:8B:93:A5:04:AF:A0:16:45:46:C5:E3:8C:A8:EB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018576090A302286AE1CD57ED036181BC8BE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xbnR74Hwi5OlBK-gFkVGxeOMqOs.roa
Signing time: Tue 03 Jan 2023 05:09:41 +0000
ROA not before: Tue 03 Jan 2023 05:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:76:09:0a:30:22:86:ae:1c:d5:7e:d0:36:18:1b:c8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 3 05:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5b9d1ef81f08b93a504afa0164546c5e38ca8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d9:7c:ea:be:11:c3:21:23:bd:c3:29:58:9a:
5c:17:09:5a:92:b6:bb:af:43:9f:12:a5:57:3c:dc:
9f:e5:ee:33:7f:81:64:82:7c:be:f0:0d:74:a0:ff:
cc:13:ee:b5:c0:86:da:11:93:17:72:1b:45:c7:7a:
0c:0c:fa:50:68:6a:4c:41:62:5d:03:bc:7d:3a:b8:
1c:f3:1b:8e:cc:f0:41:fb:83:f3:4d:43:46:98:19:
46:0b:34:22:59:66:c8:fe:78:2d:f3:cf:f8:48:60:
94:c7:bd:b1:33:bc:8e:08:42:c1:e8:50:df:f9:fe:
1b:d8:17:d7:b1:0c:a7:a9:c2:3b:d0:b1:07:01:7e:
31:10:c8:0a:df:a2:56:d2:6f:71:f7:b1:cd:0a:a2:
db:41:c7:fa:56:01:ab:f3:b4:c1:8f:92:c3:82:a5:
09:e7:3f:70:01:df:0e:9b:44:21:fd:3a:cc:c3:16:
02:14:bf:75:2b:0b:cf:16:dd:82:2c:c6:22:13:8e:
8b:39:cd:ef:6d:7a:67:12:41:36:0f:cb:c0:22:90:
4c:79:3d:23:bc:53:7c:03:88:ea:2b:cd:1d:d0:86:
3c:77:53:47:65:ce:b7:d5:73:8c:95:69:5f:4a:0f:
d2:19:7f:40:3e:f9:ef:0d:31:01:ec:6a:37:ff:f4:
93:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B9:D1:EF:81:F0:8B:93:A5:04:AF:A0:16:45:46:C5:E3:8C:A8:EB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xbnR74Hwi5OlBK-gFkVGxeOMqOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:cb:36:24:98:e9:1e:25:de:52:71:0c:e9:8f:60:4a:49:8f:
19:03:5e:f1:16:55:5d:03:be:a5:a6:08:c7:f9:b1:d0:58:3b:
d5:3a:02:25:98:c9:94:ef:d4:3f:74:96:6d:ec:06:ac:76:10:
65:36:5c:10:22:9b:0a:41:65:13:55:0c:29:8b:b3:d7:d6:8b:
99:fc:c9:89:97:a7:c5:f4:43:ee:9f:9e:0c:11:d4:aa:4d:dc:
3c:e3:bb:bd:05:bd:93:c0:45:d0:37:9c:7a:f3:0d:62:6b:14:
95:e5:af:2f:35:ae:c1:bd:6e:5b:60:a0:51:99:79:51:42:90:
13:d9:f3:64:fd:98:11:30:b1:ad:4c:7d:b2:6b:6f:f3:28:3d:
ff:37:6e:49:1d:a0:bd:64:7c:a7:fc:2b:6a:90:6f:81:41:df:
3c:69:c1:e5:4d:0c:0f:11:d9:49:73:f5:07:52:71:90:e9:b8:
00:dc:81:08:6b:b2:cc:02:6c:b3:73:4d:97:07:f5:99:af:1d:
7f:65:c0:a0:ef:c2:2b:37:f8:09:51:c6:16:f4:37:7d:81:f8:
d1:05:38:76:41:b5:0c:18:50:d6:5d:d0:f5:f7:62:69:b3:0c:
20:5b:b3:94:a7:e3:be:81:e4:fe:d9:c1:40:7a:11:b1:90:3e:
70:ab:d0:67
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYV2CQowIoauHNV+0DYYG8i+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTAzMDUwOTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWI5ZDFlZjgxZjA4YjkzYTUwNGFmYTAxNjQ1NDZjNWUzOGNhOGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9l86r4RwyEjvcMpWJpcFwlakra7
r0OfEqVXPNyf5e4zf4Fkgny+8A10oP/ME+61wIbaEZMXchtFx3oMDPpQaGpMQWJd
A7x9Orgc8xuOzPBB+4PzTUNGmBlGCzQiWWbI/ngt88/4SGCUx72xM7yOCELB6FDf
+f4b2BfXsQynqcI70LEHAX4xEMgK36JW0m9x97HNCqLbQcf6VgGr87TBj5LDgqUJ
5z9wAd8Om0Qh/TrMwxYCFL91KwvPFt2CLMYiE46LOc3vbXpnEkE2D8vAIpBMeT0j
vFN8A4jqK80d0IY8d1NHZc631XOMlWlfSg/SGX9APvnvDTEB7Go3//STGQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMW50e+B8IuTpQSvoBZFRsXjjKjrMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveGJuUjc0SHdpNU9sQkstZ0ZrVkd4ZU9NcU9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAErLNiSY6R4l3lJxDOmP
YEpJjxkDXvEWVV0DvqWmCMf5sdBYO9U6AiWYyZTv1D90lm3sBqx2EGU2XBAimwpB
ZRNVDCmLs9fWi5n8yYmXp8X0Q+6fngwR1KpN3Dzju70FvZPARdA3nHrzDWJrFJXl
ry81rsG9bltgoFGZeVFCkBPZ82T9mBEwsa1MfbJrb/MoPf83bkkdoL1kfKf8K2qQ
b4FB3zxpweVNDA8R2Ulz9QdScZDpuADcgQhrsswCbLNzTZcH9ZmvHX9lwKDvwis3
+AlRxhb0N32B+NEFOHZBtQwYUNZd0PX3YmmzDCBbs5Sn476B5P7ZwUB6EbGQPnCr
0Gc=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:26:46 2025 by rpki-client