Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xpV1HRYMIsiztgkgS9RtYP5utB0.roa
File: xpV1HRYMIsiztgkgS9RtYP5utB0.roa (raw, json)
Hash identifier: kHDdDBUG7Ctdg+0rbIEZ2zvQbfHJLXzC5jPYueRFNBg=
Subject key identifier: C6:95:75:1D:16:0C:22:C8:B3:B6:09:20:4B:D4:6D:60:FE:6E:B4:1D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855D25E2448584132C0BFC6CFDD43D3C81
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xpV1HRYMIsiztgkgS9RtYP5utB0.roa
Signing time: Thu 29 Dec 2022 09:10:41 +0000
ROA not before: Thu 29 Dec 2022 09:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5d:25:e2:44:85:84:13:2c:0b:fc:6c:fd:d4:3d:3c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 29 09:10:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c695751d160c22c8b3b609204bd46d60fe6eb41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:23:6d:6f:2d:f6:92:0f:3e:d9:cb:15:39:d8:
31:b7:95:4c:a2:42:d5:56:12:1a:86:4d:9e:a1:6d:
3d:f9:0b:0f:fd:00:ad:a4:94:42:f9:93:10:c6:06:
47:6a:4f:c7:98:fa:ef:e9:a2:b2:06:1e:f8:95:c0:
77:26:2c:b4:35:27:c7:a4:58:0c:fe:3b:c4:32:88:
4a:21:2d:3c:e9:ed:5c:fd:93:11:fc:d3:1b:05:7f:
91:d5:3c:87:8b:d8:34:57:5b:86:d0:a2:0e:dc:d1:
2d:24:34:92:8c:8d:1f:09:ed:5a:e7:e0:85:4f:1f:
04:c3:74:f4:fe:cf:f4:d6:24:f0:85:cd:01:4b:29:
40:2b:ed:54:93:bd:16:f9:2c:44:8f:37:f8:9f:e3:
1c:d2:cd:3c:3d:93:75:7c:41:dd:50:66:c6:82:6d:
fd:d7:88:33:f7:af:e5:73:76:a1:2f:77:26:78:e3:
25:77:55:3c:eb:9c:aa:8a:cf:f1:8d:56:b3:58:98:
8c:59:07:3a:34:9f:a5:8f:74:6d:60:85:58:8a:35:
d7:6f:b5:b5:bf:6c:29:41:79:d9:84:8f:b1:7c:29:
1d:20:1e:c2:a8:aa:42:bf:14:ce:1e:47:e4:95:be:
d3:ce:74:c2:6a:f6:98:25:2b:3b:fa:d5:ff:85:9c:
81:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:95:75:1D:16:0C:22:C8:B3:B6:09:20:4B:D4:6D:60:FE:6E:B4:1D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xpV1HRYMIsiztgkgS9RtYP5utB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:a2:44:58:1f:54:ba:95:4a:85:39:b8:83:96:36:9a:6c:f2:
fa:17:b3:83:d2:e6:30:0f:f8:fa:b1:ec:fe:40:3a:ad:1d:21:
4f:ae:04:f8:80:18:49:d2:bb:c5:2c:92:39:28:98:5d:fc:75:
10:61:9d:d7:44:6a:b2:e0:5a:e4:7b:ae:7f:3e:ed:94:8b:a3:
c4:98:de:b2:f0:d1:6d:a6:f1:b4:dd:02:a2:f2:d7:9c:a7:a3:
e3:a6:35:b3:3f:b4:81:83:43:ef:87:54:6c:f5:75:95:70:72:
9a:0f:dc:c1:c0:d6:34:7a:f5:ca:fe:eb:be:3b:c6:dc:3d:86:
e4:e7:de:69:66:92:ef:44:34:ef:5c:68:93:4d:12:99:53:aa:
14:97:e7:f9:4f:f1:2a:b6:c1:08:02:21:c7:00:2f:17:04:d4:
db:a9:f8:55:db:59:bc:e4:be:f9:62:33:73:1c:96:bb:53:d1:
de:05:83:4c:17:f1:f6:e2:d8:7a:44:6e:58:f0:22:c9:2b:da:
8f:a7:9c:0e:fb:30:78:87:55:81:fd:21:e8:e7:a3:d9:3e:6c:
f3:0b:d8:47:b9:7c:b7:5d:55:b8:36:0b:01:69:36:51:d3:0c:
e1:84:75:62:aa:f5:3e:c6:97:82:7d:63:50:f6:50:e9:57:35:
70:cf:ad:a1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVdJeJEhYQTLAv8bP3UPTyBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjI5MDkxMDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjk1NzUxZDE2MGMyMmM4YjNiNjA5MjA0YmQ0NmQ2MGZlNmViNDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyNtby32kg8+2csVOdgxt5VMokLV
VhIahk2eoW09+QsP/QCtpJRC+ZMQxgZHak/HmPrv6aKyBh74lcB3Jiy0NSfHpFgM
/jvEMohKIS086e1c/ZMR/NMbBX+R1TyHi9g0V1uG0KIO3NEtJDSSjI0fCe1a5+CF
Tx8Ew3T0/s/01iTwhc0BSylAK+1Uk70W+SxEjzf4n+Mc0s08PZN1fEHdUGbGgm39
14gz96/lc3ahL3cmeOMld1U865yqis/xjVazWJiMWQc6NJ+lj3RtYIVYijXXb7W1
v2wpQXnZhI+xfCkdIB7CqKpCvxTOHkfklb7TznTCavaYJSs7+tX/hZyBAQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMaVdR0WDCLIs7YJIEvUbWD+brQdMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveHBWMUhSWU1Jc2l6dGdrZ1M5UnRZUDV1dEIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADSiRFgfVLqVSoU5uIOW
Npps8voXs4PS5jAP+Pqx7P5AOq0dIU+uBPiAGEnSu8UskjkomF38dRBhnddEarLg
WuR7rn8+7ZSLo8SY3rLw0W2m8bTdAqLy15yno+OmNbM/tIGDQ++HVGz1dZVwcpoP
3MHA1jR69cr+6747xtw9huTn3mlmku9ENO9caJNNEplTqhSX5/lP8Sq2wQgCIccA
LxcE1Nup+FXbWbzkvvliM3MclrtT0d4Fg0wX8fbi2HpEbljwIskr2o+nnA77MHiH
VYH9Iejno9k+bPML2Ee5fLddVbg2CwFpNlHTDOGEdWKq9T7Gl4J9Y1D2UOlXNXDP
raE=
-----END CERTIFICATE-----
Generated at Thu May 1 20:23:12 2025 by rpki-client