Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1atofPHYswzDR16sokrMBTSjPfo.roa
File: 1atofPHYswzDR16sokrMBTSjPfo.roa (raw, json)
Hash identifier: Cjg7KGC9tm0n2X8QZ0VwmQPji77tm7lb1MxPu+VjG/c=
Subject key identifier: D5:AB:68:7C:F1:D8:B3:0C:C3:47:5E:AC:A2:4A:CC:05:34:A3:3D:FA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1FF932DE0FD33892D9D4A8C046EB6921
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1atofPHYswzDR16sokrMBTSjPfo.roa
Signing time: Wed 23 Aug 2023 01:18:59 +0000
ROA not before: Wed 23 Aug 2023 01:18:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1f:f9:32:de:0f:d3:38:92:d9:d4:a8:c0:46:eb:69:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 01:18:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5ab687cf1d8b30cc3475eaca24acc0534a33dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:45:1a:b1:ef:be:b9:a0:2d:ce:50:8e:9e:a6:
87:7f:1d:3c:33:b5:d8:fa:a9:68:04:43:f1:20:51:
a5:00:98:15:b8:08:33:44:6b:c2:5e:af:3a:8d:85:
8b:b8:4c:2d:be:38:64:fc:58:d9:e0:c2:52:43:b4:
54:45:e1:b5:9a:04:a6:ae:d3:50:65:3f:3d:14:76:
90:45:5f:b1:8d:4a:f9:54:0d:4b:58:0a:3d:6a:2c:
93:73:02:fd:ca:05:cf:22:bb:3b:75:c3:71:62:00:
7c:20:b6:50:1b:30:af:af:97:e2:9d:be:09:f0:8a:
ad:c0:79:3a:06:67:68:be:8e:1b:0e:bc:6f:a7:79:
18:19:7d:b5:63:e5:63:28:02:5b:85:20:b7:e3:ef:
96:19:74:77:6d:10:00:c1:fc:3e:9b:27:d4:3b:91:
f0:3e:20:cc:a9:b1:4c:4c:cb:76:e0:6a:a7:c2:4f:
63:6d:c1:e5:78:13:52:21:c7:7e:7d:8b:43:fc:36:
51:56:7a:e6:e8:28:d5:ab:a2:e3:be:1a:e1:05:97:
cd:93:cd:80:94:a5:a4:f1:0c:f0:8e:21:c0:d0:82:
e9:2b:7e:94:b7:2d:97:6d:42:86:44:06:cb:94:5d:
93:68:ec:71:83:3d:c8:d5:88:db:51:a9:59:3a:a6:
e5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AB:68:7C:F1:D8:B3:0C:C3:47:5E:AC:A2:4A:CC:05:34:A3:3D:FA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1atofPHYswzDR16sokrMBTSjPfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:7b:74:92:65:a6:15:8f:73:88:f0:cc:ca:93:55:c5:41:ec:
60:02:74:67:33:4a:07:8f:d9:98:46:60:c8:e0:e7:95:ff:0e:
cd:56:3f:30:d2:80:52:45:23:c2:ec:40:f1:07:08:c0:ce:ad:
66:d4:21:6a:64:7c:7b:72:f7:44:44:7c:23:f0:4a:8b:e3:cc:
9a:69:50:d7:97:2e:d4:56:12:57:04:34:d2:8e:69:72:db:bf:
53:ad:2e:01:f9:91:b7:ed:7d:5d:c7:fb:4a:15:7a:0d:d6:0c:
e9:5b:12:e7:b0:63:01:50:4c:4c:cc:c5:f6:5a:a0:21:20:64:
a7:b9:cf:73:70:ba:a1:45:bb:1c:33:56:a0:55:f2:a0:af:00:
ef:9e:df:4d:79:45:19:6b:cb:ac:9a:81:28:4d:75:76:3c:56:
db:4c:32:52:6f:51:ee:c7:70:98:a2:85:7e:40:4f:cf:3b:40:
b3:9b:a7:61:b3:de:e8:91:0f:c2:fb:00:39:19:0c:d3:b1:d3:
f1:2b:ea:2a:f9:cc:f6:29:d5:a2:2a:09:85:3a:18:67:75:d7:
ac:b8:d8:29:6d:70:9e:1f:cc:4e:32:3d:ad:7d:69:be:3c:76:
f9:96:4e:7e:03:6b:2e:b8:a6:5a:75:d9:68:08:84:5a:be:b0:
d4:9e:d7:cb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYof+TLeD9M4ktnUqMBG62khMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODIzMDExODU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWFiNjg3Y2YxZDhiMzBjYzM0NzVlYWNhMjRhY2MwNTM0YTMzZGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0Uase++uaAtzlCOnqaHfx08M7XY
+qloBEPxIFGlAJgVuAgzRGvCXq86jYWLuEwtvjhk/FjZ4MJSQ7RUReG1mgSmrtNQ
ZT89FHaQRV+xjUr5VA1LWAo9aiyTcwL9ygXPIrs7dcNxYgB8ILZQGzCvr5finb4J
8IqtwHk6Bmdovo4bDrxvp3kYGX21Y+VjKAJbhSC34++WGXR3bRAAwfw+myfUO5Hw
PiDMqbFMTMt24Gqnwk9jbcHleBNSIcd+fYtD/DZRVnrm6CjVq6LjvhrhBZfNk82A
lKWk8QzwjiHA0ILpK36Uty2XbUKGRAbLlF2TaOxxgz3I1YjbUalZOqbl5QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNWraHzx2LMMw0derKJKzAU0oz36MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMWF0b2ZQSFlzd3pEUjE2c29rck1CVFNqUGZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGx7dJJlphWPc4jwzMqT
VcVB7GACdGczSgeP2ZhGYMjg55X/Ds1WPzDSgFJFI8LsQPEHCMDOrWbUIWpkfHty
90REfCPwSovjzJppUNeXLtRWElcENNKOaXLbv1OtLgH5kbftfV3H+0oVeg3WDOlb
EuewYwFQTEzMxfZaoCEgZKe5z3NwuqFFuxwzVqBV8qCvAO+e3015RRlry6yagShN
dXY8VttMMlJvUe7HcJiihX5AT887QLObp2Gz3uiRD8L7ADkZDNOx0/Er6ir5zPYp
1aIqCYU6GGd116y42CltcJ4fzE4yPa19ab48dvmWTn4Day64plp12WgIhFq+sNSe
18s=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:18:35 2025 by rpki-client