Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0LjaR-1Oa6uIN2kW0QtA2-7B4qo.roa
File: 0LjaR-1Oa6uIN2kW0QtA2-7B4qo.roa (raw, json)
Hash identifier: ataVYHVUtAF7AObEWQm57u0zG9mFqzOvbXausv08GjE=
Subject key identifier: D0:B8:DA:47:ED:4E:6B:AB:88:37:69:16:D1:0B:40:DB:EE:C1:E2:AA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188BF2E52C3962413CB59A84F5B9F19E6F3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0LjaR-1Oa6uIN2kW0QtA2-7B4qo.roa
Signing time: Thu 15 Jun 2023 13:11:03 +0000
ROA not before: Thu 15 Jun 2023 13:11:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:2e:52:c3:96:24:13:cb:59:a8:4f:5b:9f:19:e6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 15 13:11:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0b8da47ed4e6bab88376916d10b40dbeec1e2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:6b:97:b8:36:a5:a2:ab:28:54:7d:49:9a:
93:95:0d:48:cb:33:a6:75:35:b1:11:25:51:c2:79:
89:72:af:22:b6:f4:9f:e6:19:f6:e3:10:10:02:a5:
a8:9a:a9:64:5a:7e:fd:c4:0f:8e:27:03:55:19:dd:
eb:af:74:3e:05:43:09:8e:21:5b:2f:e6:6a:21:be:
32:05:68:74:3f:ff:9e:15:fe:22:71:dc:88:f6:32:
64:ac:72:b2:14:69:c5:b4:d6:86:23:13:bf:46:a1:
e3:f3:ae:c5:74:ba:cf:1c:f3:75:f5:6d:58:67:07:
cb:dc:87:13:c9:99:dd:bc:bb:f6:7c:d1:6b:3e:ef:
11:84:05:07:78:b3:53:16:f1:81:72:ef:a2:e2:48:
01:29:ae:fd:ad:87:2e:ec:f0:1f:c8:ab:c2:ef:db:
34:9b:b8:d7:c6:e6:98:c1:ea:0f:76:32:ef:08:6f:
e8:72:ee:5a:76:ae:c2:88:9b:a4:a7:6d:bf:b2:73:
f8:30:01:52:1a:33:6e:6b:07:6a:17:85:f3:60:ed:
78:6b:93:55:51:eb:18:f1:cd:f9:a8:d5:76:0e:4a:
19:0b:72:87:21:94:ad:ca:45:93:f0:d7:58:88:94:
69:2c:e3:00:fc:29:5f:21:5e:59:59:ca:b0:69:d0:
d7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B8:DA:47:ED:4E:6B:AB:88:37:69:16:D1:0B:40:DB:EE:C1:E2:AA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0LjaR-1Oa6uIN2kW0QtA2-7B4qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:98:01:e7:3a:97:35:59:25:f9:f1:1a:8c:15:ac:18:95:24:
21:15:af:18:67:5e:30:4e:8a:03:fa:9a:d3:a8:45:56:f3:95:
58:76:0e:65:70:17:09:59:77:b9:8d:69:75:e7:70:16:ba:11:
98:4f:ca:a6:e4:0b:1a:b8:00:db:4f:7a:ca:e3:f5:68:87:de:
64:51:57:69:e0:c9:3c:2b:f7:4b:5a:0f:9c:bf:3a:9e:41:1f:
e9:02:01:85:e4:c0:0e:c9:9a:47:18:24:04:a8:07:7c:de:23:
b3:73:8b:44:17:11:a2:9f:85:5f:2f:e8:36:3a:6a:53:65:8e:
a3:24:4a:05:e2:cb:73:ca:ee:b5:5b:65:e7:4a:b8:87:d5:17:
69:fd:03:8d:ef:c1:35:99:0b:43:ff:04:8c:de:9f:82:b1:7e:
2a:7f:c8:d9:94:db:07:29:20:74:09:29:6d:12:66:f6:bc:16:
fa:60:7a:79:74:78:4b:6c:8f:6c:cb:11:cd:75:03:d1:8a:27:
54:85:0f:bb:ab:5b:85:60:27:fb:93:3c:22:51:18:5e:88:9a:
93:ed:3d:c0:e2:9d:a6:20:7a:32:c5:bc:fb:cc:96:9a:ae:7f:
e9:03:03:58:e1:33:e3:ac:86:e7:6b:3d:cb:8e:7e:30:e5:71:
a6:fd:f1:cb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYi/LlLDliQTy1moT1ufGebzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjE1MTMxMTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGI4ZGE0N2VkNGU2YmFiODgzNzY5MTZkMTBiNDBkYmVlYzFlMmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov5rl7g2paKrKFR9SZqTlQ1IyzOm
dTWxESVRwnmJcq8itvSf5hn24xAQAqWomqlkWn79xA+OJwNVGd3rr3Q+BUMJjiFb
L+ZqIb4yBWh0P/+eFf4icdyI9jJkrHKyFGnFtNaGIxO/RqHj867FdLrPHPN19W1Y
ZwfL3IcTyZndvLv2fNFrPu8RhAUHeLNTFvGBcu+i4kgBKa79rYcu7PAfyKvC79s0
m7jXxuaYweoPdjLvCG/ocu5adq7CiJukp22/snP4MAFSGjNuawdqF4XzYO14a5NV
UesY8c35qNV2DkoZC3KHIZStykWT8NdYiJRpLOMA/ClfIV5ZWcqwadDXTwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNC42kftTmuriDdpFtELQNvuweKqMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMExqYVItMU9hNnVJTjJrVzBRdEEyLTdCNHFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAK+YAec6lzVZJfnxGowV
rBiVJCEVrxhnXjBOigP6mtOoRVbzlVh2DmVwFwlZd7mNaXXncBa6EZhPyqbkCxq4
ANtPesrj9WiH3mRRV2ngyTwr90taD5y/Op5BH+kCAYXkwA7JmkcYJASoB3zeI7Nz
i0QXEaKfhV8v6DY6alNljqMkSgXiy3PK7rVbZedKuIfVF2n9A43vwTWZC0P/BIze
n4Kxfip/yNmU2wcpIHQJKW0SZva8Fvpgenl0eEtsj2zLEc11A9GKJ1SFD7urW4Vg
J/uTPCJRGF6ImpPtPcDinaYgejLFvPvMlpquf+kDA1jhM+OshudrPcuOfjDlcab9
8cs=
-----END CERTIFICATE-----
Generated at Thu May 1 12:52:54 2025 by rpki-client