Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xxAuSISBxq9fZZ9jGPcbVd6TOV4.roa
File: xxAuSISBxq9fZZ9jGPcbVd6TOV4.roa (raw, json)
Hash identifier: 0F1M0RipZ3Vtqh8D8vhuCg5UboOvtxgzt0IeA7/4D40=
Subject key identifier: C7:10:2E:48:84:81:C6:AF:5F:65:9F:63:18:F7:1B:55:DE:93:39:5E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186037114119382DDAB1F140D59AFB94D32
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xxAuSISBxq9fZZ9jGPcbVd6TOV4.roa
Signing time: Mon 30 Jan 2023 16:09:47 +0000
ROA not before: Mon 30 Jan 2023 16:09:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:03:71:14:11:93:82:dd:ab:1f:14:0d:59:af:b9:4d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 30 16:09:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7102e488481c6af5f659f6318f71b55de93395e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4e:c0:c7:0c:f5:ea:b7:d5:9f:ba:b3:45:89:
f1:51:4a:8e:10:d1:35:1c:2c:7f:25:b7:26:83:2c:
7c:14:bf:b6:5a:04:24:4e:ff:7b:29:7d:34:1d:68:
3e:5a:bb:d6:2e:c6:60:54:25:c0:11:5e:f2:cd:eb:
de:87:9d:38:e6:7e:da:01:fc:f7:0f:09:66:22:21:
76:30:e7:56:67:fb:78:ac:bc:ff:79:98:52:40:74:
da:9f:6c:10:a6:05:d3:4e:7f:38:1f:7e:5f:04:8e:
38:25:fb:8a:de:a1:16:e2:d2:df:92:b9:d1:81:2a:
72:56:c7:9d:27:aa:c4:cc:e1:ab:e4:93:b6:56:11:
c7:9e:45:a5:b2:9f:cf:fc:56:32:7e:51:d5:64:a7:
c7:4a:dc:df:f7:7b:84:1b:9e:6f:ff:3a:f2:ba:47:
cd:0c:9d:3d:5a:7f:22:78:e4:58:b5:00:2f:ec:06:
e0:9a:50:80:a0:81:74:88:2e:2f:b2:9a:7d:7b:f5:
8e:39:56:95:9b:d8:e9:72:44:42:9d:29:ee:0d:d7:
53:13:b4:db:4f:b8:33:1e:6a:82:f7:63:6a:44:fd:
17:12:21:d9:71:db:7b:8e:45:43:60:0b:fb:60:ca:
bb:69:3f:45:b1:fc:fb:16:e2:d7:63:86:ef:75:9b:
ac:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:10:2E:48:84:81:C6:AF:5F:65:9F:63:18:F7:1B:55:DE:93:39:5E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xxAuSISBxq9fZZ9jGPcbVd6TOV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:17:9e:6f:47:29:97:bc:6e:b3:5f:6e:f0:5d:23:98:05:4d:
d2:a2:24:f7:1f:13:8e:b5:23:c7:d2:bd:11:06:29:7a:65:5d:
7b:20:0d:5c:dc:b1:42:15:de:94:0c:38:73:91:ce:96:7e:eb:
99:88:01:6c:dd:68:72:62:ef:36:9a:39:93:86:99:5a:0e:11:
ba:9a:c1:65:fb:ab:b7:20:91:ee:b1:c1:60:84:89:31:5f:76:
9f:a8:aa:07:d6:8b:11:fa:68:9a:14:8f:2a:e1:3c:4b:21:3e:
8d:06:64:a6:b5:16:6e:88:c7:0f:d5:5d:23:20:85:c6:ca:fc:
13:7e:01:10:e0:aa:80:98:06:37:18:6a:5d:a6:ea:62:c2:6b:
bd:3e:76:5c:48:e8:1d:53:f8:7e:88:b7:d6:77:42:b9:71:6e:
ff:26:f7:f9:b4:82:5d:51:7e:0a:1e:05:22:8a:c9:0b:93:66:
56:7c:0d:c9:b8:42:9e:38:42:13:3b:f1:45:ad:4f:97:2f:11:
ee:b0:5b:04:04:a7:33:5e:73:c3:4f:d2:4a:85:28:c1:ff:8a:
2b:f9:bb:96:0a:9f:e3:1c:53:66:2e:96:e8:c1:1b:51:bd:c4:
3e:ac:14:18:90:8a:7c:4e:12:ca:6d:b9:d1:6a:3d:7c:80:0b:
63:08:40:f9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYYDcRQRk4Ldqx8UDVmvuU0yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTMwMTYwOTQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzEwMmU0ODg0ODFjNmFmNWY2NTlmNjMxOGY3MWI1NWRlOTMzOTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgk7Axwz16rfVn7qzRYnxUUqOENE1
HCx/Jbcmgyx8FL+2WgQkTv97KX00HWg+WrvWLsZgVCXAEV7yzeveh5045n7aAfz3
DwlmIiF2MOdWZ/t4rLz/eZhSQHTan2wQpgXTTn84H35fBI44JfuK3qEW4tLfkrnR
gSpyVsedJ6rEzOGr5JO2VhHHnkWlsp/P/FYyflHVZKfHStzf93uEG55v/zryukfN
DJ09Wn8ieORYtQAv7AbgmlCAoIF0iC4vspp9e/WOOVaVm9jpckRCnSnuDddTE7Tb
T7gzHmqC92NqRP0XEiHZcdt7jkVDYAv7YMq7aT9Fsfz7FuLXY4bvdZussQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMcQLkiEgcavX2WfYxj3G1XekzleMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveHhBdVNJU0J4cTlmWlo5akdQY2JWZDZUT1Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIEXnm9HKZe8brNfbvBd
I5gFTdKiJPcfE461I8fSvREGKXplXXsgDVzcsUIV3pQMOHORzpZ+65mIAWzdaHJi
7zaaOZOGmVoOEbqawWX7q7cgke6xwWCEiTFfdp+oqgfWixH6aJoUjyrhPEshPo0G
ZKa1Fm6Ixw/VXSMghcbK/BN+ARDgqoCYBjcYal2m6mLCa70+dlxI6B1T+H6It9Z3
Qrlxbv8m9/m0gl1RfgoeBSKKyQuTZlZ8Dcm4Qp44QhM78UWtT5cvEe6wWwQEpzNe
c8NP0kqFKMH/iiv5u5YKn+McU2YulujBG1G9xD6sFBiQinxOEsptudFqPXyAC2MI
QPk=
-----END CERTIFICATE-----
Generated at Fri May 2 15:38:34 2025 by rpki-client