Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ihfxI0wSX_yp6H3EBDChcpaiT-k.roa
File: ihfxI0wSX_yp6H3EBDChcpaiT-k.roa (raw, json)
Hash identifier: ouGspIHGyW8rxauQ2UbjA7Uo80Zbho3SQh0BLV7oNlY=
Subject key identifier: 8A:17:F1:23:4C:12:5F:FC:A9:E8:7D:C4:04:30:A1:72:96:A2:4F:E9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184AF59CC7F65F5DEC2052735734A252976
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ihfxI0wSX_yp6H3EBDChcpaiT-k.roa
Signing time: Fri 25 Nov 2022 15:13:28 +0000
ROA not before: Fri 25 Nov 2022 15:13:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:af:59:cc:7f:65:f5:de:c2:05:27:35:73:4a:25:29:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 25 15:13:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a17f1234c125ffca9e87dc40430a17296a24fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:be:61:cc:2f:f3:e2:c4:97:c3:79:b6:0f:47:
d5:2f:c1:64:c1:1b:f2:33:53:41:81:ca:03:95:f4:
97:e1:a8:70:2f:0b:e2:10:2c:03:15:b1:1b:26:3c:
13:89:b3:67:af:e1:12:93:60:9d:5f:47:07:97:35:
9e:93:9d:e6:4c:89:85:ab:9d:19:69:cf:84:a3:4f:
ee:ac:f0:3a:55:13:67:5b:c6:26:33:4c:c0:8c:14:
7d:b8:86:60:f3:06:d8:eb:97:37:29:c7:86:90:c5:
f1:b0:19:96:b4:af:f3:1e:9b:0f:e9:05:96:7b:e4:
08:46:c2:9c:ea:35:15:fe:6d:e3:0c:94:9c:09:a3:
8c:a1:b8:ef:1b:e4:2a:9d:04:7f:85:c4:a3:80:3e:
a4:71:3a:09:84:f8:8f:e4:d5:68:44:ad:32:5a:3c:
0f:dc:43:f2:fa:33:be:fc:fd:db:8f:55:b3:a9:42:
99:73:15:fe:fb:ab:4a:16:fc:41:d5:9c:ab:20:02:
c7:70:a0:68:a3:88:5c:6e:44:e1:cb:8d:2c:e1:1c:
61:3e:e2:3e:54:1e:2d:b3:52:7d:8a:e5:39:2b:eb:
49:33:8d:71:f1:53:03:fd:e5:17:3b:f2:2c:85:0f:
89:df:41:7e:1c:7d:6b:a6:de:87:a4:e8:27:55:bc:
d5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:17:F1:23:4C:12:5F:FC:A9:E8:7D:C4:04:30:A1:72:96:A2:4F:E9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ihfxI0wSX_yp6H3EBDChcpaiT-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:85:1e:93:98:0a:75:da:6a:b5:12:f0:68:69:f3:40:86:09:
07:fc:d5:29:13:46:0d:eb:69:70:72:d6:0a:bc:64:07:3b:47:
fb:1a:dd:75:42:dc:2c:89:13:aa:7c:52:9d:e0:2e:12:a9:f2:
f1:94:f8:4b:6c:2f:13:fa:b4:35:f9:b2:07:a2:5b:20:6b:fb:
90:86:de:d6:35:aa:d2:01:bc:bc:7f:33:fd:62:4c:3c:75:6a:
d6:07:38:3f:d5:14:f6:5c:d0:e3:a2:d2:f4:85:8b:c3:33:5f:
e9:88:0d:e2:c9:76:2f:41:6b:d4:8c:97:26:f1:c2:8d:46:21:
e5:81:fb:13:4d:69:4d:e6:ed:6b:c3:2b:fc:e4:92:b7:c7:1b:
5e:cb:6b:6b:02:02:74:b8:59:89:94:ef:89:e3:73:53:34:a2:
9d:b9:4b:b5:82:1b:ad:3b:bc:a7:f2:76:ba:a5:dc:62:4d:9f:
be:52:24:4c:bb:a3:8f:89:dd:d4:77:1d:5e:d0:1b:15:c4:7c:
2f:0c:e6:30:53:6d:05:62:68:3c:1c:10:83:60:3b:01:68:98:
11:b4:5e:2d:56:d5:0e:aa:ad:3e:f5:a6:95:4c:4e:b7:5b:3e:
15:37:27:e0:d6:b5:dd:d7:93:d8:5d:89:80:14:e7:75:62:03:
5c:62:43:30
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYSvWcx/ZfXewgUnNXNKJSl2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTI1MTUxMzI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTE3ZjEyMzRjMTI1ZmZjYTllODdkYzQwNDMwYTE3Mjk2YTI0ZmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL5hzC/z4sSXw3m2D0fVL8FkwRvy
M1NBgcoDlfSX4ahwLwviECwDFbEbJjwTibNnr+ESk2CdX0cHlzWek53mTImFq50Z
ac+Eo0/urPA6VRNnW8YmM0zAjBR9uIZg8wbY65c3KceGkMXxsBmWtK/zHpsP6QWW
e+QIRsKc6jUV/m3jDJScCaOMobjvG+QqnQR/hcSjgD6kcToJhPiP5NVoRK0yWjwP
3EPy+jO+/P3bj1WzqUKZcxX++6tKFvxB1ZyrIALHcKBoo4hcbkThy40s4RxhPuI+
VB4ts1J9iuU5K+tJM41x8VMD/eUXO/IshQ+J30F+HH1rpt6HpOgnVbzVqQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIoX8SNMEl/8qeh9xAQwoXKWok/pMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvaWhmeEkwd1NYX3lwNkgzRUJEQ2hjcGFpVC1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAD+FHpOYCnXaarUS8Ghp
80CGCQf81SkTRg3raXBy1gq8ZAc7R/sa3XVC3CyJE6p8Up3gLhKp8vGU+EtsLxP6
tDX5sgeiWyBr+5CG3tY1qtIBvLx/M/1iTDx1atYHOD/VFPZc0OOi0vSFi8MzX+mI
DeLJdi9Ba9SMlybxwo1GIeWB+xNNaU3m7WvDK/zkkrfHG17La2sCAnS4WYmU74nj
c1M0op25S7WCG607vKfydrql3GJNn75SJEy7o4+J3dR3HV7QGxXEfC8M5jBTbQVi
aDwcEINgOwFomBG0Xi1W1Q6qrT71ppVMTrdbPhU3J+DWtd3Xk9hdiYAU53ViA1xi
QzA=
-----END CERTIFICATE-----
Generated at Mon Jun 9 01:07:46 2025 by rpki-client