Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xyNCAlk-ZsRfZxlC34D_pi-gTWQ.roa
File: xyNCAlk-ZsRfZxlC34D_pi-gTWQ.roa (raw, json)
Hash identifier: JVS6VAyTNBbDlA+1OSYbyTqYTTz3/IeQXRsaaktEnFA=
Subject key identifier: C7:23:42:02:59:3E:66:C4:5F:67:19:42:DF:80:FF:A6:2F:A0:4D:64
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185E86CF7E2CE5D51B1F25F749C2E504778
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xyNCAlk-ZsRfZxlC34D_pi-gTWQ.roa
Signing time: Wed 25 Jan 2023 10:15:33 +0000
ROA not before: Wed 25 Jan 2023 10:15:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:6c:f7:e2:ce:5d:51:b1:f2:5f:74:9c:2e:50:47:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 25 10:15:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7234202593e66c45f671942df80ffa62fa04d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:6e:b1:4d:40:eb:94:98:25:96:56:6c:30:
85:22:9e:14:ab:a2:4e:83:4a:98:59:4f:7c:f9:7d:
34:9b:f9:f0:c0:97:22:00:a2:a0:b1:35:56:ac:34:
70:23:e0:6a:68:6a:f7:64:e6:3a:1f:40:18:12:89:
92:01:cb:9c:df:90:45:b5:26:aa:76:6b:ea:1c:5a:
87:56:8c:d2:5b:95:dc:db:72:7d:d7:1c:b5:e2:fa:
1d:67:b8:e3:37:31:e0:8a:16:ad:c5:27:fd:92:85:
8d:dc:f4:8e:21:bd:d4:a0:c8:77:e9:e2:70:f1:b8:
4b:cb:21:20:9a:d9:f3:d2:31:63:6b:da:6e:28:7f:
96:a1:71:7e:cd:4d:00:64:33:ed:1d:46:46:cd:22:
38:e2:31:e0:ee:c3:f0:7a:d0:6f:9a:a8:94:b4:92:
02:c4:ec:60:53:c8:86:3c:2d:f1:d7:9b:53:ea:4e:
54:9f:14:98:59:9c:57:fb:f8:ee:f4:c8:e6:90:b3:
91:d6:55:7c:22:98:e9:9c:ed:ea:20:7d:b8:8b:50:
57:72:3c:fa:2f:54:d9:1e:0a:bf:0e:b8:34:93:f7:
90:83:64:1b:0a:89:2d:5e:29:93:14:87:ec:2b:ea:
e0:de:30:ca:f3:8f:e1:32:90:4a:fe:8d:55:5c:18:
c8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:23:42:02:59:3E:66:C4:5F:67:19:42:DF:80:FF:A6:2F:A0:4D:64
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xyNCAlk-ZsRfZxlC34D_pi-gTWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:39:87:b5:63:15:e2:8a:f8:a8:82:4f:d1:b7:f9:52:b8:3c:
7c:25:0f:02:5e:84:d4:c4:c0:2c:2b:5f:18:39:29:92:7b:5f:
bc:30:02:95:5c:24:f3:2b:87:5e:f5:2c:3a:4c:0d:42:a1:07:
44:53:dd:d7:1f:21:da:fe:85:e9:11:21:5b:25:38:c7:a1:af:
c5:ff:a4:90:b8:14:06:a4:bb:7a:d8:88:56:aa:31:5d:34:2c:
f4:70:01:16:ae:00:27:39:a5:6a:d3:82:22:61:2c:63:f3:62:
1b:c8:e8:fb:19:16:39:72:b1:99:3a:bc:e1:d0:ee:65:ef:40:
ea:a4:4d:48:6c:16:50:32:ff:07:f1:67:2c:e0:d4:df:a8:92:
40:c5:4f:39:8d:7f:91:2b:73:0b:6a:2f:45:34:86:54:64:d1:
03:29:b3:3b:e8:36:47:d6:32:65:1a:40:94:dd:55:3c:45:f6:
6f:94:9f:03:2f:95:de:44:3a:bd:a8:8d:93:ae:53:34:d8:0f:
24:fb:f6:89:43:31:1a:8f:42:de:59:95:3e:21:15:fb:9e:1b:
b3:0b:18:9b:a6:1a:02:9a:80:40:aa:b5:b8:83:f4:85:17:c3:
7a:70:1e:70:14:1a:1f:cc:86:c1:c2:49:81:fb:57:7b:b5:13:
a0:93:a5:a8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYXobPfizl1RsfJfdJwuUEd4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTI1MTAxNTMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzIzNDIwMjU5M2U2NmM0NWY2NzE5NDJkZjgwZmZhNjJmYTA0ZDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKVusU1A65SYJZZWbDCFIp4Uq6JO
g0qYWU98+X00m/nwwJciAKKgsTVWrDRwI+BqaGr3ZOY6H0AYEomSAcuc35BFtSaq
dmvqHFqHVozSW5Xc23J91xy14vodZ7jjNzHgihatxSf9koWN3PSOIb3UoMh36eJw
8bhLyyEgmtnz0jFja9puKH+WoXF+zU0AZDPtHUZGzSI44jHg7sPwetBvmqiUtJIC
xOxgU8iGPC3x15tT6k5UnxSYWZxX+/ju9MjmkLOR1lV8IpjpnO3qIH24i1BXcjz6
L1TZHgq/Drg0k/eQg2QbCoktXimTFIfsK+rg3jDK84/hMpBK/o1VXBjIRwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMcjQgJZPmbEX2cZQt+A/6YvoE1kMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveHlOQ0Fsay1ac1JmWnhsQzM0RF9waS1nVFdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEs5h7VjFeKK+KiCT9G3
+VK4PHwlDwJehNTEwCwrXxg5KZJ7X7wwApVcJPMrh171LDpMDUKhB0RT3dcfIdr+
hekRIVslOMehr8X/pJC4FAaku3rYiFaqMV00LPRwARauACc5pWrTgiJhLGPzYhvI
6PsZFjlysZk6vOHQ7mXvQOqkTUhsFlAy/wfxZyzg1N+okkDFTzmNf5ErcwtqL0U0
hlRk0QMpszvoNkfWMmUaQJTdVTxF9m+UnwMvld5EOr2ojZOuUzTYDyT79olDMRqP
Qt5ZlT4hFfueG7MLGJumGgKagECqtbiD9IUXw3pwHnAUGh/MhsHCSYH7V3u1E6CT
pag=
-----END CERTIFICATE-----
Generated at Sat May 3 17:09:41 2025 by rpki-client