Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0wVP7lhFaSgmX-iljDFbDmNXfdE.roa
File: 0wVP7lhFaSgmX-iljDFbDmNXfdE.roa (raw, json)
Hash identifier: /VQY0BNmxvYLskZXYEh/B8sufQXaSY+4nJ+LrKbV3fk=
Subject key identifier: D3:05:4F:EE:58:45:69:28:26:5F:E8:A5:8C:31:5B:0E:63:57:7D:D1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A4240745C1A97859F5B675A9CD9CC8E2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0wVP7lhFaSgmX-iljDFbDmNXfdE.roa
Signing time: Thu 02 Mar 2023 21:04:29 +0000
ROA not before: Thu 02 Mar 2023 21:04:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:a423:cce3/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a4:24:07:45:c1:a9:78:59:f5:b6:75:a9:cd:9c:c8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 2 21:04:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3054fee58456928265fe8a58c315b0e63577dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8d:85:4c:ab:b8:e1:96:b4:18:fb:d6:75:ff:
f8:27:8a:ac:13:31:84:21:af:89:62:d5:f1:70:f3:
3b:89:71:2a:ae:d8:f6:8e:eb:43:98:7e:88:bd:85:
f1:4d:a3:aa:46:1b:96:0c:c7:fe:22:ab:29:78:0c:
7d:01:69:14:57:6c:b1:ab:d2:5c:ef:12:4e:ce:78:
e5:75:61:43:e9:43:95:df:74:74:78:36:ee:59:89:
00:9f:05:dc:78:1b:a9:8c:d5:f9:02:79:c5:f6:c2:
b9:3c:e0:6d:8d:05:b6:b6:9e:e2:3f:31:4e:9c:5c:
12:54:ec:84:68:9e:f8:30:b6:32:51:f9:e3:76:7b:
9e:b2:08:2a:70:09:21:cf:d2:39:46:41:4d:7e:09:
1c:6c:07:17:8f:62:5e:12:5e:86:90:26:49:ad:7c:
8b:04:bd:08:ab:f6:63:c9:c6:7f:f4:7f:c0:16:10:
b5:7a:6a:fc:5c:0c:f3:af:e1:cd:91:eb:5e:3c:d1:
33:19:02:4c:83:0d:b6:26:1c:6a:62:60:ba:be:02:
6b:01:db:06:73:6c:5f:df:8e:5c:31:11:76:8f:07:
97:64:57:56:1d:dd:d2:45:5a:93:5a:1e:66:4e:fa:
87:a5:68:c6:fc:2f:b0:21:5f:a3:c9:e8:9b:00:11:
d7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:05:4F:EE:58:45:69:28:26:5F:E8:A5:8C:31:5B:0E:63:57:7D:D1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0wVP7lhFaSgmX-iljDFbDmNXfdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:ac:c0:26:be:5e:b1:78:a3:0f:0c:12:41:ce:b1:4e:fb:a4:
1a:af:99:69:4c:54:d5:07:52:d9:90:97:e6:27:82:8a:79:25:
65:31:a4:b7:9c:f2:9a:8a:3e:4e:6b:ca:d1:20:64:ad:76:62:
87:63:69:93:ab:28:34:17:46:8b:3a:e7:67:5c:29:b1:5d:ad:
7c:15:fc:d4:13:dd:20:34:b9:96:0e:7f:c6:0a:5a:16:da:3c:
5d:e5:38:57:e4:46:09:d5:97:0a:de:29:4c:65:a7:46:5f:03:
35:d8:f2:29:74:27:13:cf:42:68:d0:19:fd:ff:c7:ca:9f:3a:
ad:54:79:d6:28:f6:4d:12:a6:3b:47:00:4c:eb:93:68:be:10:
0f:e1:f2:44:4b:68:ff:28:0d:c5:27:ae:3a:55:f9:67:5b:14:
1d:7a:f2:9b:9d:a4:8e:9c:be:be:03:05:7b:d3:72:0a:55:8e:
2d:0d:12:53:b6:29:0a:d8:4e:44:fe:c4:11:21:a0:57:db:77:
be:4f:b2:dd:04:24:47:77:b6:c3:2a:4b:c9:7c:46:73:52:ca:
95:a5:bf:69:c8:74:7e:76:63:b5:a0:c0:19:83:7e:a6:5f:7c:
be:df:76:03:b0:10:f7:20:a5:7f:90:f4:52:ae:d2:a1:0b:29:
6d:16:b6:23
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYakJAdFwal4WfW2danNnMjiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzAyMjEwNDI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzA1NGZlZTU4NDU2OTI4MjY1ZmU4YTU4YzMxNWIwZTYzNTc3ZGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY2FTKu44Za0GPvWdf/4J4qsEzGE
Ia+JYtXxcPM7iXEqrtj2jutDmH6IvYXxTaOqRhuWDMf+IqspeAx9AWkUV2yxq9Jc
7xJOznjldWFD6UOV33R0eDbuWYkAnwXceBupjNX5AnnF9sK5POBtjQW2tp7iPzFO
nFwSVOyEaJ74MLYyUfnjdnuesggqcAkhz9I5RkFNfgkcbAcXj2JeEl6GkCZJrXyL
BL0Iq/ZjycZ/9H/AFhC1emr8XAzzr+HNketePNEzGQJMgw22JhxqYmC6vgJrAdsG
c2xf345cMRF2jweXZFdWHd3SRVqTWh5mTvqHpWjG/C+wIV+jyeibABHXXQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNMFT+5YRWkoJl/opYwxWw5jV33RMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMHdWUDdsaEZhU2dtWC1pbGpERmJEbU5YZmRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAImswCa+XrF4ow8MEkHO
sU77pBqvmWlMVNUHUtmQl+Yngop5JWUxpLec8pqKPk5rytEgZK12YodjaZOrKDQX
Ros652dcKbFdrXwV/NQT3SA0uZYOf8YKWhbaPF3lOFfkRgnVlwreKUxlp0ZfAzXY
8il0JxPPQmjQGf3/x8qfOq1UedYo9k0SpjtHAEzrk2i+EA/h8kRLaP8oDcUnrjpV
+WdbFB168pudpI6cvr4DBXvTcgpVji0NElO2KQrYTkT+xBEhoFfbd75Pst0EJEd3
tsMqS8l8RnNSypWlv2nIdH52Y7WgwBmDfqZffL7fdgOwEPcgpX+Q9FKu0qELKW0W
tiM=
-----END CERTIFICATE-----
Generated at Fri May 2 16:51:55 2025 by rpki-client