Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y3Wpixr9DJHIVBcN0Pa7svQYWfw.roa
File: y3Wpixr9DJHIVBcN0Pa7svQYWfw.roa (raw, json)
Hash identifier: SKGgws2U7GEibX3J3JVy/cl+0kJelepjyefQP47/FLM=
Subject key identifier: CB:75:A9:8B:1A:FD:0C:91:C8:54:17:0D:D0:F6:BB:B2:F4:18:59:FC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185B77A10AAC74B3F157CD4E8BF31FE3AE4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y3Wpixr9DJHIVBcN0Pa7svQYWfw.roa
Signing time: Sun 15 Jan 2023 22:08:28 +0000
ROA not before: Sun 15 Jan 2023 22:08:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b7:7a:10:aa:c7:4b:3f:15:7c:d4:e8:bf:31:fe:3a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 15 22:08:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb75a98b1afd0c91c854170dd0f6bbb2f41859fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9a:7c:ec:9d:19:02:db:23:51:31:55:51:80:
eb:f9:dd:5f:db:bb:39:88:7f:15:8a:8c:14:4d:e9:
b7:c2:ec:4e:36:05:51:c3:2b:55:71:83:5f:e7:20:
ec:6f:b2:c8:4d:66:54:90:73:89:f7:56:5c:c9:a0:
d2:5a:9a:bb:89:4c:a2:40:30:6f:c5:1c:d9:22:96:
78:24:f3:dd:46:d6:56:1d:b4:7b:23:a9:f4:08:9e:
79:28:09:a9:9c:c6:26:4c:70:a5:2f:87:9b:80:e5:
a5:d7:7c:24:35:08:44:5b:95:93:03:e0:3c:2d:16:
6b:c7:30:ea:9f:cc:3d:77:ba:8f:34:e3:ca:2c:ad:
5c:4e:21:fc:50:6a:1c:c9:b9:db:83:ff:bf:bd:c2:
51:98:85:49:5d:bb:33:d9:3d:18:21:4e:c3:3b:68:
a7:a9:db:43:e3:9d:b2:65:0c:ee:41:da:a5:ae:48:
4a:77:63:ef:77:81:df:52:ed:dd:b8:a5:c2:4e:5b:
06:01:87:4c:be:eb:fe:11:75:a1:76:a3:2c:2a:d5:
bd:b9:d9:10:85:36:e6:67:c5:95:02:a0:46:21:d2:
94:3c:74:d9:41:8e:22:b2:ca:1a:f8:a2:7c:17:a7:
51:7a:d5:13:a2:8f:ce:ad:f1:a4:de:54:11:3f:72:
1e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:75:A9:8B:1A:FD:0C:91:C8:54:17:0D:D0:F6:BB:B2:F4:18:59:FC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y3Wpixr9DJHIVBcN0Pa7svQYWfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:6f:c2:b0:39:f9:7d:7e:a6:be:89:24:ca:f3:6d:9d:f1:07:
59:09:02:0a:ec:7b:47:31:d1:28:98:68:b5:73:b7:a4:bc:bd:
07:91:9d:2f:7f:53:93:3f:ee:bc:ad:f3:d2:c1:2d:f4:4b:cf:
c1:10:12:cc:a8:4a:76:69:15:e4:c7:d3:45:68:bb:a7:12:83:
8d:d4:b1:7c:7d:6b:7d:71:48:40:16:f2:4d:2a:c8:a7:03:19:
73:96:a3:18:81:b6:f9:05:f3:60:49:98:a1:7c:9e:02:d1:c6:
11:b2:ec:63:f3:cb:22:8f:e4:c9:b7:67:ab:2f:c6:d9:f3:a5:
ee:31:28:df:1a:45:53:25:6c:2a:ee:e5:f0:28:7e:e8:74:2d:
f9:6c:df:99:98:dd:ec:20:09:71:f3:d7:de:94:00:cd:38:62:
e0:13:cc:b5:09:c5:03:9a:48:78:6c:69:93:52:61:2e:db:48:
c9:98:16:31:32:93:d4:53:0d:26:2d:44:8e:e0:c6:c7:cc:7f:
e6:c3:5b:c6:87:21:59:e4:af:bc:97:7f:d4:6b:25:d0:08:28:
62:ce:a2:4f:59:1b:20:e4:f3:70:e2:96:05:fc:f8:35:da:26:
81:8d:a6:f2:d1:6c:01:93:22:4a:73:09:d6:1a:34:d8:61:62:
1c:14:e3:5c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYW3ehCqx0s/FXzU6L8x/jrkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTE1MjIwODI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjc1YTk4YjFhZmQwYzkxYzg1NDE3MGRkMGY2YmJiMmY0MTg1OWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJp87J0ZAtsjUTFVUYDr+d1f27s5
iH8ViowUTem3wuxONgVRwytVcYNf5yDsb7LITWZUkHOJ91ZcyaDSWpq7iUyiQDBv
xRzZIpZ4JPPdRtZWHbR7I6n0CJ55KAmpnMYmTHClL4ebgOWl13wkNQhEW5WTA+A8
LRZrxzDqn8w9d7qPNOPKLK1cTiH8UGocybnbg/+/vcJRmIVJXbsz2T0YIU7DO2in
qdtD452yZQzuQdqlrkhKd2Pvd4HfUu3duKXCTlsGAYdMvuv+EXWhdqMsKtW9udkQ
hTbmZ8WVAqBGIdKUPHTZQY4issoa+KJ8F6dRetUToo/OrfGk3lQRP3IenwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMt1qYsa/QyRyFQXDdD2u7L0GFn8MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveTNXcGl4cjlESkhJVkJjTjBQYTdzdlFZV2Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFlvwrA5+X1+pr6JJMrz
bZ3xB1kJAgrse0cx0SiYaLVzt6S8vQeRnS9/U5M/7ryt89LBLfRLz8EQEsyoSnZp
FeTH00Vou6cSg43UsXx9a31xSEAW8k0qyKcDGXOWoxiBtvkF82BJmKF8ngLRxhGy
7GPzyyKP5Mm3Z6svxtnzpe4xKN8aRVMlbCru5fAofuh0Lfls35mY3ewgCXHz196U
AM04YuATzLUJxQOaSHhsaZNSYS7bSMmYFjEyk9RTDSYtRI7gxsfMf+bDW8aHIVnk
r7yXf9RrJdAIKGLOok9ZGyDk83DilgX8+DXaJoGNpvLRbAGTIkpzCdYaNNhhYhwU
41w=
-----END CERTIFICATE-----
Generated at Fri May 2 16:19:56 2025 by rpki-client