Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-bTpFJhcN-RiNQkrJam2ouxCmrs.roa
File: 1-bTpFJhcN-RiNQkrJam2ouxCmrs.roa (raw, json)
Hash identifier: Q1LxgEXBo7vi9yyUzunZ8k48g6IbOZFCuHpBmQGNzLI=
Subject key identifier: F9:B4:E9:14:98:5C:37:E4:62:35:09:2B:25:A9:B6:A2:EC:42:9A:BB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01896C9144A833369EC0131FC13D60EA32EE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-bTpFJhcN-RiNQkrJam2ouxCmrs.roa
Signing time: Wed 19 Jul 2023 05:13:26 +0000
ROA not before: Wed 19 Jul 2023 05:13:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6c:91:44:a8:33:36:9e:c0:13:1f:c1:3d:60:ea:32:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 19 05:13:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9b4e914985c37e46235092b25a9b6a2ec429abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:91:ee:8e:c3:82:45:1d:ce:c0:41:2b:a0:
35:e8:22:bf:99:67:89:8a:fc:06:3b:80:6a:ea:03:
17:d3:f6:ee:96:48:0c:e2:6f:27:a7:5c:fd:63:af:
d0:1d:42:a1:be:d1:bf:b0:d2:14:ae:e9:63:92:9f:
86:59:7c:ec:6f:37:3e:e7:db:40:b0:9d:93:35:4c:
51:5a:31:20:90:17:8e:42:1d:89:03:cd:5e:89:76:
1f:a6:46:3b:b3:cc:b4:5a:20:79:8b:07:44:f2:30:
00:1e:f4:7a:9b:09:7d:9e:72:32:e0:e3:77:21:a3:
de:70:7d:a2:56:42:b3:76:45:86:d1:88:16:ee:25:
74:f4:d7:f3:07:dc:7b:55:77:48:99:3c:42:1a:15:
60:89:f2:db:05:09:1a:19:54:31:fa:a3:6a:c8:05:
f4:97:b9:c8:ae:4e:11:4f:08:9d:34:5f:f2:ad:05:
66:44:37:7e:05:14:33:69:86:eb:a8:94:22:93:f2:
b2:e6:16:5c:89:9f:9d:97:2b:74:58:6e:73:55:11:
34:5a:51:7b:63:8a:e9:76:c5:5f:02:27:27:df:11:
76:bf:77:2e:39:2e:20:b3:9d:dd:56:6d:0c:11:eb:
cd:77:a3:e4:f3:3e:b1:f7:5a:0e:f3:67:be:43:61:
dd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B4:E9:14:98:5C:37:E4:62:35:09:2B:25:A9:B6:A2:EC:42:9A:BB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-bTpFJhcN-RiNQkrJam2ouxCmrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:38:0b:98:55:9a:3b:09:99:b8:b2:d7:39:80:c5:54:15:31:
d8:50:c0:97:8a:21:ed:c2:ba:cd:d7:a5:f1:32:ea:da:1a:c2:
51:df:af:8e:9f:b5:a7:e0:2f:0c:e3:64:07:b9:0a:69:26:5a:
f2:e1:f1:68:ef:49:c1:8c:80:0e:6b:69:6c:97:cf:3c:6d:7a:
cb:1b:69:38:c2:e7:b6:58:93:8b:fe:69:c6:9b:c4:7d:72:5a:
3b:6e:32:e2:2f:05:49:4f:aa:90:b1:6d:4b:d2:3b:c4:3d:a0:
d6:57:32:e5:27:12:3c:7c:e8:0d:b9:ba:fe:43:35:7d:52:59:
fe:90:e8:20:33:2f:03:46:59:c6:79:50:05:0d:2c:01:00:eb:
8f:65:c6:54:f7:0a:9b:8a:de:ff:a6:ca:f9:76:62:d3:13:c5:
2a:d6:9c:ac:ce:c2:d5:d7:c0:5f:8e:f2:27:c6:42:b8:23:79:
3a:98:c0:fd:62:c0:17:43:63:f7:47:a3:29:2c:59:1e:f7:75:
48:8c:52:e1:fd:1c:17:97:b1:34:d1:4d:b4:1c:29:79:5b:6d:
0f:68:a5:c3:89:01:36:a7:53:02:01:27:4e:33:d5:6e:7c:98:
71:6d:70:70:23:70:f1:95:f9:36:24:f6:48:ce:89:54:20:8a:
03:62:de:eb
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYlskUSoMzaewBMfwT1g6jLuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzE5MDUxMzI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWI0ZTkxNDk4NWMzN2U0NjIzNTA5MmIyNWE5YjZhMmVjNDI5YWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQCR7o7DgkUdzsBBK6A16CK/mWeJ
ivwGO4Bq6gMX0/bulkgM4m8np1z9Y6/QHUKhvtG/sNIUruljkp+GWXzsbzc+59tA
sJ2TNUxRWjEgkBeOQh2JA81eiXYfpkY7s8y0WiB5iwdE8jAAHvR6mwl9nnIy4ON3
IaPecH2iVkKzdkWG0YgW7iV09NfzB9x7VXdImTxCGhVgifLbBQkaGVQx+qNqyAX0
l7nIrk4RTwidNF/yrQVmRDd+BRQzaYbrqJQik/Ky5hZciZ+dlyt0WG5zVRE0WlF7
Y4rpdsVfAicn3xF2v3cuOS4gs53dVm0MEevNd6Pk8z6x91oO82e+Q2HdkQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPm06RSYXDfkYjUJKyWptqLsQpq7MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMS1iVHBGSmhjTi1SaU5Ra3JKYW0yb3V4Q21ycy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFh
Ni8xL2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQAGOAuYVZo7CZm4stc5
gMVUFTHYUMCXiiHtwrrN16XxMuraGsJR36+On7Wn4C8M42QHuQppJlry4fFo70nB
jIAOa2lsl888bXrLG2k4wue2WJOL/mnGm8R9clo7bjLiLwVJT6qQsW1L0jvEPaDW
VzLlJxI8fOgNubr+QzV9Uln+kOggMy8DRlnGeVAFDSwBAOuPZcZU9wqbit7/psr5
dmLTE8Uq1pyszsLV18BfjvInxkK4I3k6mMD9YsAXQ2P3R6MpLFke93VIjFLh/RwX
l7E00U20HCl5W20PaKXDiQE2p1MCASdOM9VufJhxbXBwI3Dxlfk2JPZIzolUIIoD
Yt7r
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:22 2025 by rpki-client