Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0UTccGRCHyeCSYiT4gMwCwoiMmg.roa
File: 0UTccGRCHyeCSYiT4gMwCwoiMmg.roa (raw, json)
Hash identifier: VkkoHP6h076Zj3abpo942nO3a5Acr+vk/q7LFGa9snw=
Subject key identifier: D1:44:DC:70:64:42:1F:27:82:49:88:93:E2:03:30:0B:0A:22:32:68
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187AA23BDEE2CC78A8F7FCC3444678EFE13
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0UTccGRCHyeCSYiT4gMwCwoiMmg.roa
Signing time: Sat 22 Apr 2023 18:04:41 +0000
ROA not before: Sat 22 Apr 2023 18:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:187:aa23:51c0/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:aa:23:bd:ee:2c:c7:8a:8f:7f:cc:34:44:67:8e:fe:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 22 18:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d144dc7064421f2782498893e203300b0a223268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:58:7f:50:1a:92:94:3e:a5:3f:dd:b9:00:
2a:c7:8a:9f:2d:52:e3:23:c4:06:6a:a1:25:0e:5d:
63:1a:d5:9f:aa:6e:0b:cd:23:9b:1f:26:45:ba:e9:
6a:de:fa:98:63:ac:46:21:05:b5:02:cd:54:45:7b:
35:f1:4a:a5:af:19:b5:dd:f3:55:9a:f6:b4:a0:db:
81:d6:ae:ab:ad:9f:10:9d:3a:c1:14:bf:ce:92:50:
6d:aa:a6:eb:24:28:20:ae:3d:d3:e4:b5:ed:d2:7a:
c9:37:f0:14:fd:f3:a8:33:54:1b:2f:49:ab:7c:dd:
6e:ba:43:80:73:2b:33:fb:f9:a5:96:a5:80:6d:e7:
98:84:27:63:a3:fd:c1:d9:c5:e1:6d:8e:d5:56:c6:
85:f7:eb:94:95:23:cf:0c:51:fa:8c:10:2e:af:62:
dc:a4:67:13:f1:4a:eb:58:62:90:1a:be:c0:a0:22:
ae:5c:08:1d:e7:27:0b:70:76:6d:32:c6:fc:94:43:
bb:c2:cb:0c:e2:39:da:02:b1:9c:a1:64:c0:e9:10:
46:de:a5:9d:ca:71:65:0f:a3:d1:88:19:d4:fb:0d:
0d:e2:12:fa:17:c4:0d:ad:77:4f:b9:a8:ec:79:57:
23:35:9f:76:27:7d:24:6b:52:0f:a8:60:ad:6a:00:
8b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:44:DC:70:64:42:1F:27:82:49:88:93:E2:03:30:0B:0A:22:32:68
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0UTccGRCHyeCSYiT4gMwCwoiMmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:c6:1f:a8:1c:dd:99:c8:3f:a3:30:b9:0d:6d:ed:cc:ce:9e:
b4:53:a1:32:78:b8:5c:13:28:99:0e:8c:ca:c3:42:ec:4c:3d:
74:3d:3b:51:83:0a:3d:44:81:c5:2b:9a:fd:91:2e:ae:b4:45:
64:ed:88:5d:fb:39:b1:d1:bb:14:8e:99:30:20:ec:de:da:fa:
4e:fd:fc:a2:89:2c:0d:9f:74:1b:29:8e:09:99:57:3d:9f:ed:
77:32:3c:31:54:41:9b:0b:91:06:17:be:17:74:d8:40:c3:ca:
36:38:16:88:4a:34:5d:3c:7a:2b:4c:1a:74:41:b9:e6:98:8a:
3a:2c:6c:ed:bb:fc:03:40:3c:c6:2c:e4:f9:91:44:08:89:de:
8a:3b:72:e5:c4:88:4d:d5:65:30:57:21:c2:aa:8d:66:64:1e:
37:c6:62:f2:cf:61:e9:38:1b:23:00:4d:7d:64:a9:48:a4:40:
54:50:58:35:5c:4a:e4:4a:c9:b6:10:ee:39:bf:ab:35:37:e2:
8a:bc:af:12:70:37:91:cf:95:8c:eb:c5:45:33:7b:26:95:11:
11:6e:f2:54:86:4d:46:c4:60:83:ac:ea:e2:db:19:b0:79:83:
c7:f9:76:b9:20:03:b6:1e:7d:cf:53:de:2d:f4:96:84:f6:6d:
26:14:b6:1d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYeqI73uLMeKj3/MNERnjv4TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDIyMTgwNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTQ0ZGM3MDY0NDIxZjI3ODI0OTg4OTNlMjAzMzAwYjBhMjIzMjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcBYf1AakpQ+pT/duQAqx4qfLVLj
I8QGaqElDl1jGtWfqm4LzSObHyZFuulq3vqYY6xGIQW1As1URXs18Uqlrxm13fNV
mva0oNuB1q6rrZ8QnTrBFL/OklBtqqbrJCggrj3T5LXt0nrJN/AU/fOoM1QbL0mr
fN1uukOAcysz+/mllqWAbeeYhCdjo/3B2cXhbY7VVsaF9+uUlSPPDFH6jBAur2Lc
pGcT8UrrWGKQGr7AoCKuXAgd5ycLcHZtMsb8lEO7wssM4jnaArGcoWTA6RBG3qWd
ynFlD6PRiBnU+w0N4hL6F8QNrXdPuajseVcjNZ92J30ka1IPqGCtagCLOwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNFE3HBkQh8ngkmIk+IDMAsKIjJoMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMFVUY2NHUkNIeWVDU1lpVDRnTXdDd29pTW1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAbGH6gc3ZnIP6MwuQ1t
7czOnrRToTJ4uFwTKJkOjMrDQuxMPXQ9O1GDCj1EgcUrmv2RLq60RWTtiF37ObHR
uxSOmTAg7N7a+k79/KKJLA2fdBspjgmZVz2f7XcyPDFUQZsLkQYXvhd02EDDyjY4
FohKNF08eitMGnRBueaYijosbO27/ANAPMYs5PmRRAiJ3oo7cuXEiE3VZTBXIcKq
jWZkHjfGYvLPYek4GyMATX1kqUikQFRQWDVcSuRKybYQ7jm/qzU34oq8rxJwN5HP
lYzrxUUzeyaVERFu8lSGTUbEYIOs6uLbGbB5g8f5drkgA7Yefc9T3i30loT2bSYU
th0=
-----END CERTIFICATE-----
Generated at Thu May 1 05:03:06 2025 by rpki-client