Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8RgdWrTW1zmSlShBd-efDiwma-4.roa
File: 8RgdWrTW1zmSlShBd-efDiwma-4.roa (raw, json)
Hash identifier: NDed4VHr2XeA90plRdoXn8IbN/j57cWczcSiuC02jB0=
Subject key identifier: F1:18:1D:5A:B4:D6:D7:39:92:95:28:41:77:E7:9F:0E:2C:26:6B:EE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2EFEB6BB128923141DEA8BEE41FFA9B0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8RgdWrTW1zmSlShBd-efDiwma-4.roa
Signing time: Fri 25 Aug 2023 23:19:19 +0000
ROA not before: Fri 25 Aug 2023 23:19:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2e:fe:b6:bb:12:89:23:14:1d:ea:8b:ee:41:ff:a9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 23:19:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1181d5ab4d6d7399295284177e79f0e2c266bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:27:8e:22:ee:8c:08:95:78:b7:23:d4:44:de:
b0:2d:e4:b3:b8:14:d3:6b:bc:3e:38:63:ab:71:12:
58:d9:40:dd:b9:43:19:d8:10:cc:35:90:7b:fe:3a:
20:4e:87:18:30:65:2c:b8:51:80:de:7c:3e:af:0c:
66:f9:07:c1:33:28:db:80:1b:5d:b2:20:79:4c:60:
2b:80:86:1e:01:34:48:47:36:59:d5:fc:14:7b:15:
a4:32:a7:a1:ed:b4:94:db:55:f2:37:fe:ea:26:a5:
9d:6d:43:4e:e1:ef:ce:8a:7d:84:d9:a5:fe:6b:59:
47:c3:17:27:d3:d5:7f:3a:10:38:08:df:2e:ec:1e:
09:f5:96:4d:55:fb:58:c1:33:c3:08:8a:20:a0:58:
3c:70:9e:5f:06:c8:c7:97:b2:2b:5c:e2:65:d1:02:
7b:da:2b:1d:5f:3e:3d:63:b1:56:4c:4a:e1:8f:2a:
69:a5:45:1b:c1:b5:7f:25:14:86:d2:3f:99:16:d4:
ae:0b:66:0b:fa:3c:b6:4a:e3:16:b1:37:d3:f9:2d:
46:68:ba:be:11:28:98:b7:f3:32:c8:16:e7:b5:cb:
27:fc:0a:22:82:90:2a:d6:cf:e8:4b:94:f1:f5:25:
18:38:cf:81:32:56:19:95:d2:d6:8b:e1:22:77:d4:
c4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:18:1D:5A:B4:D6:D7:39:92:95:28:41:77:E7:9F:0E:2C:26:6B:EE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8RgdWrTW1zmSlShBd-efDiwma-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:ed:49:cd:90:33:3c:60:9a:71:67:70:6b:30:91:dc:ac:8a:
5c:84:17:7a:39:00:22:84:1b:b1:17:23:2a:a9:08:eb:82:54:
f5:e7:dc:07:ee:3c:5d:8c:11:12:d3:ee:ca:e5:5b:44:da:7b:
98:38:12:84:96:31:af:55:52:87:5c:80:09:ed:ba:ac:d3:68:
d3:18:0d:b9:87:14:c7:e4:2c:bc:ab:3f:bc:13:cf:57:3d:2d:
2f:ba:09:61:9b:80:c0:d8:20:62:51:62:82:44:ef:be:44:cc:
91:0c:e1:13:f6:a8:75:ab:65:76:1b:3f:3d:33:7f:0a:c8:03:
8a:73:f0:f9:35:18:7a:24:23:3a:85:54:f2:1e:4d:09:55:eb:
b3:99:2b:9d:70:23:56:a6:86:81:e0:aa:d7:6c:1a:35:41:bb:
72:09:cc:8d:b0:ac:b7:ac:ea:bd:23:c5:ca:03:77:a6:45:a0:
70:2c:e0:ac:f7:17:ad:9c:19:45:d1:63:1f:15:7c:f2:f0:6f:
43:fe:4e:3e:aa:d1:a4:b6:ed:e7:ba:3f:3c:fd:01:1f:7c:54:
dd:5f:6f:fd:bd:22:3b:ce:8c:68:e6:b5:32:0a:c4:65:ef:eb:
81:42:eb:8d:90:98:ff:c9:06:ef:0f:3e:0b:7a:a9:53:83:31:
c3:27:a6:a3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYou/ra7EokjFB3qi+5B/6mwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODI1MjMxOTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTE4MWQ1YWI0ZDZkNzM5OTI5NTI4NDE3N2U3OWYwZTJjMjY2YmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtieOIu6MCJV4tyPURN6wLeSzuBTT
a7w+OGOrcRJY2UDduUMZ2BDMNZB7/jogTocYMGUsuFGA3nw+rwxm+QfBMyjbgBtd
siB5TGArgIYeATRIRzZZ1fwUexWkMqeh7bSU21XyN/7qJqWdbUNO4e/Oin2E2aX+
a1lHwxcn09V/OhA4CN8u7B4J9ZZNVftYwTPDCIogoFg8cJ5fBsjHl7IrXOJl0QJ7
2isdXz49Y7FWTErhjypppUUbwbV/JRSG0j+ZFtSuC2YL+jy2SuMWsTfT+S1GaLq+
ESiYt/MyyBbntcsn/AoigpAq1s/oS5Tx9SUYOM+BMlYZldLWi+Eid9TE+QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPEYHVq01tc5kpUoQXfnnw4sJmvuMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOFJnZFdyVFcxem1TbFNoQmQtZWZEaXdtYS00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABntSc2QMzxgmnFncGsw
kdysilyEF3o5ACKEG7EXIyqpCOuCVPXn3AfuPF2MERLT7srlW0Tae5g4EoSWMa9V
UodcgAntuqzTaNMYDbmHFMfkLLyrP7wTz1c9LS+6CWGbgMDYIGJRYoJE775EzJEM
4RP2qHWrZXYbPz0zfwrIA4pz8Pk1GHokIzqFVPIeTQlV67OZK51wI1amhoHgqtds
GjVBu3IJzI2wrLes6r0jxcoDd6ZFoHAs4Kz3F62cGUXRYx8VfPLwb0P+Tj6q0aS2
7ee6Pzz9AR98VN1fb/29IjvOjGjmtTIKxGXv64FC642QmP/JBu8PPgt6qVODMcMn
pqM=
-----END CERTIFICATE-----
Generated at Mon Jun 9 10:08:55 2025 by rpki-client