Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-VY9OHp0X1xd1Uqvzsa2K1CMGTg.roa
File: 1-VY9OHp0X1xd1Uqvzsa2K1CMGTg.roa (raw, json)
Hash identifier: HhrADKy5K4hTADjY4+w8pqb8sVqhRjON/alAD2hHzWk=
Subject key identifier: F9:56:3D:38:7A:74:5F:5C:5D:D5:4A:AF:CE:C6:B6:2B:50:8C:19:38
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01870E92606B0F9EA15556DD31FF2E933B99
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-VY9OHp0X1xd1Uqvzsa2K1CMGTg.roa
Signing time: Thu 23 Mar 2023 13:04:46 +0000
ROA not before: Thu 23 Mar 2023 13:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:e91:ea36/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0e:92:60:6b:0f:9e:a1:55:56:dd:31:ff:2e:93:3b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 23 13:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9563d387a745f5c5dd54aafcec6b62b508c1938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a8:c1:4e:a7:a8:52:98:ed:a6:b7:b3:1d:ad:
35:bc:6d:23:08:57:c5:37:5d:45:d2:b6:4a:73:15:
4a:b8:f3:18:96:9c:b9:15:9a:fa:31:eb:03:23:cb:
9b:24:da:ec:a1:f5:b1:69:98:34:90:1a:3a:71:e1:
b0:9f:f2:be:52:90:85:d3:62:46:c1:47:fc:bd:dc:
28:f6:81:39:84:98:9d:cb:e7:6d:8f:4f:33:20:84:
e9:45:ad:1f:f9:b8:76:c9:aa:bc:c6:3a:86:0e:88:
69:d3:56:8d:9f:9e:e8:fd:51:3c:24:6b:ba:80:cc:
72:9c:7a:4d:ce:37:b4:67:98:e9:7e:8b:fd:99:15:
21:16:6b:a6:5b:89:7b:66:0e:97:33:16:3f:c7:ed:
21:f1:b1:7b:46:6b:76:1a:be:cf:3a:28:5a:fa:8c:
df:af:23:ce:01:74:9a:7a:2f:fe:a9:91:eb:74:ad:
11:94:4a:40:ce:02:24:68:91:5b:77:b6:bf:03:65:
10:37:ce:64:60:8d:71:b8:82:f2:58:c4:85:31:e7:
70:b9:b1:b9:a9:c0:19:d6:64:7b:be:df:d4:e2:01:
d8:a2:06:1b:a3:38:78:49:42:8d:08:c0:42:de:75:
3b:45:d6:39:a1:e8:80:ea:bd:2f:67:74:db:23:a4:
3c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:56:3D:38:7A:74:5F:5C:5D:D5:4A:AF:CE:C6:B6:2B:50:8C:19:38
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-VY9OHp0X1xd1Uqvzsa2K1CMGTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:55:60:6c:58:25:92:95:bc:f4:99:fc:67:89:8a:ef:30:01:
37:2a:6d:5a:be:2f:5e:02:c8:89:d6:9f:96:13:34:a1:84:2e:
f1:5f:c9:9f:f6:c5:c7:04:06:e8:57:7a:d5:bb:9b:15:f8:ff:
79:f3:e7:1f:e8:36:87:9d:bf:46:eb:18:79:aa:60:dc:60:ce:
2b:17:a4:e3:47:5a:97:2c:a7:91:c1:dc:e3:b1:c3:40:e9:5c:
38:fe:35:77:2e:63:99:01:ad:6c:6c:67:32:42:2a:8b:c5:68:
be:b1:2f:fb:a4:e5:79:8b:af:29:38:d2:b2:c7:7a:94:71:91:
ef:26:50:c9:8b:ef:2d:08:85:f4:a4:28:45:5b:59:86:b8:58:
26:c2:0c:f6:ad:80:50:95:8b:c5:55:5b:a9:2b:c7:6c:0c:4a:
c9:8f:64:94:e7:2b:f2:ae:72:ab:30:9a:73:94:c9:99:c9:ad:
5b:54:41:74:24:f5:2f:36:07:f5:47:ac:5f:b2:1a:8d:6b:00:
8a:45:67:c8:b2:61:95:34:c4:19:f1:33:7d:4e:4a:1e:15:73:
1d:1f:27:53:f2:ab:50:a2:40:5f:f5:04:c0:cf:61:11:4f:5b:
4c:9f:cb:9f:82:45:22:12:1f:90:01:9c:34:b7:d6:67:fc:97:
a5:b8:b3:1f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYcOkmBrD56hVVbdMf8ukzuZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzIzMTMwNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTU2M2QzODdhNzQ1ZjVjNWRkNTRhYWZjZWM2YjYyYjUwOGMxOTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuajBTqeoUpjtprezHa01vG0jCFfF
N11F0rZKcxVKuPMYlpy5FZr6MesDI8ubJNrsofWxaZg0kBo6ceGwn/K+UpCF02JG
wUf8vdwo9oE5hJidy+dtj08zIITpRa0f+bh2yaq8xjqGDohp01aNn57o/VE8JGu6
gMxynHpNzje0Z5jpfov9mRUhFmumW4l7Zg6XMxY/x+0h8bF7Rmt2Gr7POiha+ozf
ryPOAXSaei/+qZHrdK0RlEpAzgIkaJFbd7a/A2UQN85kYI1xuILyWMSFMedwubG5
qcAZ1mR7vt/U4gHYogYbozh4SUKNCMBC3nU7RdY5oeiA6r0vZ3TbI6Q8wQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPlWPTh6dF9cXdVKr87GtitQjBk4MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMS1WWTlPSHAwWDF4ZDFVcXZ6c2EySzFDTUdUZy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFh
Ni8xL2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQBxVWBsWCWSlbz0mfxn
iYrvMAE3Km1avi9eAsiJ1p+WEzShhC7xX8mf9sXHBAboV3rVu5sV+P958+cf6DaH
nb9G6xh5qmDcYM4rF6TjR1qXLKeRwdzjscNA6Vw4/jV3LmOZAa1sbGcyQiqLxWi+
sS/7pOV5i68pONKyx3qUcZHvJlDJi+8tCIX0pChFW1mGuFgmwgz2rYBQlYvFVVup
K8dsDErJj2SU5yvyrnKrMJpzlMmZya1bVEF0JPUvNgf1R6xfshqNawCKRWfIsmGV
NMQZ8TN9TkoeFXMdHydT8qtQokBf9QTAz2ERT1tMn8ufgkUiEh+QAZw0t9Zn/Jel
uLMf
-----END CERTIFICATE-----
Generated at Mon May 5 05:07:28 2025 by rpki-client