Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yHmSlTdFOOET3Dxg0RqRuZmqe6Y.roa
File: yHmSlTdFOOET3Dxg0RqRuZmqe6Y.roa (raw, json)
Hash identifier: HXDL1Ntc44OAgGgMp5cC9x5RTjw13SjoX9JUtTTqv/c=
Subject key identifier: C8:79:92:95:37:45:38:E1:13:DC:3C:60:D1:1A:91:B9:99:AA:7B:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185E7218BEB6771505B07E446D7672033C4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yHmSlTdFOOET3Dxg0RqRuZmqe6Y.roa
Signing time: Wed 25 Jan 2023 04:13:33 +0000
ROA not before: Wed 25 Jan 2023 04:13:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e7:21:8b:eb:67:71:50:5b:07:e4:46:d7:67:20:33:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 25 04:13:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8799295374538e113dc3c60d11a91b999aa7ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:83:30:fd:84:26:3f:70:d5:cc:34:05:84:cc:
f4:97:46:cf:d7:26:8c:5d:85:cd:2f:96:7c:9d:ff:
ac:c8:49:ea:ce:f4:c2:82:d7:b2:e7:b3:e1:0b:17:
13:44:be:46:a2:35:ab:be:3c:4d:82:f8:db:1b:4a:
9a:3c:89:e6:24:7e:c0:2c:35:a6:ff:2b:30:3b:f1:
00:dc:85:18:de:ae:a6:78:63:ac:e4:57:cf:b4:3b:
73:7b:72:32:9f:c8:ed:ab:66:9e:8e:9b:0c:01:c5:
b4:fd:df:ab:ea:7e:62:6f:f4:e7:13:89:cb:42:2a:
fe:50:29:4b:6e:c2:49:8d:5b:58:18:73:ec:44:7b:
b6:c3:21:8a:0b:9f:9a:00:4f:5b:35:36:77:88:06:
ff:78:ad:a8:ce:04:c5:f4:ef:86:31:f6:c2:d5:18:
11:e0:64:06:b0:72:21:4e:d9:b7:54:cd:98:66:14:
8c:21:bb:c5:45:27:55:b2:91:32:37:3a:47:7f:a4:
77:ee:94:88:4f:30:c3:21:7c:5f:66:70:bb:43:c6:
b8:69:7c:91:fe:8e:40:23:d1:9b:8e:26:c0:de:1b:
1f:73:90:47:33:37:1f:70:79:ac:17:0d:6d:e6:6f:
dd:37:c7:58:00:4f:2b:56:96:a1:07:84:b2:21:d1:
86:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:79:92:95:37:45:38:E1:13:DC:3C:60:D1:1A:91:B9:99:AA:7B:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yHmSlTdFOOET3Dxg0RqRuZmqe6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:74:46:fd:3f:90:6f:5a:d7:f9:95:41:86:aa:3c:fd:41:e2:
07:96:2f:18:79:68:26:54:e9:37:a0:c3:77:a5:03:8a:76:99:
7a:ef:b0:33:7a:51:27:dc:a6:97:4c:4c:15:0d:34:88:b9:7e:
5a:3a:8a:f3:a0:76:97:b5:6c:63:59:68:bd:7e:3e:2a:73:c1:
c2:8c:dd:20:f8:da:bc:9b:08:a8:06:33:e7:bf:bf:c4:52:a9:
62:b9:0a:28:b5:57:a9:b5:76:d4:77:c7:69:33:c6:d4:de:54:
b0:77:7e:a8:53:b3:33:40:b8:5b:38:91:b3:fe:76:ca:07:ea:
f7:0a:24:bd:b1:36:18:25:4e:73:28:56:3a:d9:74:7d:55:05:
3e:f3:80:76:6f:73:f7:00:4a:a2:dc:66:ba:7e:99:4a:9e:1c:
b2:30:68:a0:55:30:70:1d:8e:11:64:26:48:f7:68:3d:95:a8:
bc:61:6c:2b:4a:a0:70:06:c7:9c:4d:e3:00:1e:22:86:c0:e4:
3a:eb:88:ec:70:fa:2d:cc:24:4a:22:55:75:b8:d0:14:7a:2d:
12:f9:b9:56:50:33:d5:ae:50:a7:e3:3f:ce:dc:2a:11:36:fe:
0f:76:a4:69:19:2d:8d:b0:91:a1:f8:b1:a4:1b:2b:10:58:3a:
73:6f:4d:64
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYXnIYvrZ3FQWwfkRtdnIDPEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTI1MDQxMzMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODc5OTI5NTM3NDUzOGUxMTNkYzNjNjBkMTFhOTFiOTk5YWE3YmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIMw/YQmP3DVzDQFhMz0l0bP1yaM
XYXNL5Z8nf+syEnqzvTCgtey57PhCxcTRL5GojWrvjxNgvjbG0qaPInmJH7ALDWm
/yswO/EA3IUY3q6meGOs5FfPtDtze3Iyn8jtq2aejpsMAcW0/d+r6n5ib/TnE4nL
Qir+UClLbsJJjVtYGHPsRHu2wyGKC5+aAE9bNTZ3iAb/eK2ozgTF9O+GMfbC1RgR
4GQGsHIhTtm3VM2YZhSMIbvFRSdVspEyNzpHf6R37pSITzDDIXxfZnC7Q8a4aXyR
/o5AI9GbjibA3hsfc5BHMzcfcHmsFw1t5m/dN8dYAE8rVpahB4SyIdGGGwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMh5kpU3RTjhE9w8YNEakbmZqnumMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveUhtU2xUZEZPT0VUM0R4ZzBScVJ1Wm1xZTZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHN0Rv0/kG9a1/mVQYaq
PP1B4geWLxh5aCZU6Tegw3elA4p2mXrvsDN6USfcppdMTBUNNIi5flo6ivOgdpe1
bGNZaL1+PipzwcKM3SD42rybCKgGM+e/v8RSqWK5Cii1V6m1dtR3x2kzxtTeVLB3
fqhTszNAuFs4kbP+dsoH6vcKJL2xNhglTnMoVjrZdH1VBT7zgHZvc/cASqLcZrp+
mUqeHLIwaKBVMHAdjhFkJkj3aD2VqLxhbCtKoHAGx5xN4wAeIobA5DrriOxw+i3M
JEoiVXW40BR6LRL5uVZQM9WuUKfjP87cKhE2/g92pGkZLY2wkaH4saQbKxBYOnNv
TWQ=
-----END CERTIFICATE-----
Generated at Thu May 1 14:02:13 2025 by rpki-client