Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-n-crB4K-HWrnAsfkUUSpioOoQA.roa
File: 1-n-crB4K-HWrnAsfkUUSpioOoQA.roa (raw, json)
Hash identifier: J760mvmT17GOCVt/8zTyQjjjAvHKAh69c8pnYPX266g=
Subject key identifier: FA:7F:9C:AC:1E:0A:F8:75:AB:9C:0B:1F:91:45:12:A6:2A:0E:A1:00
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188AB38E2BB0E3DF57DE1C48A1C2159EF54
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-n-crB4K-HWrnAsfkUUSpioOoQA.roa
Signing time: Sun 11 Jun 2023 16:10:11 +0000
ROA not before: Sun 11 Jun 2023 16:10:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ab:38:e2:bb:0e:3d:f5:7d:e1:c4:8a:1c:21:59:ef:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 11 16:10:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa7f9cac1e0af875ab9c0b1f914512a62a0ea100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:23:24:5c:0d:1d:1a:3c:1f:f8:97:0f:92:8c:
d5:79:5b:b1:f2:49:36:4f:85:d0:ad:39:f6:51:d9:
49:a9:e0:cd:0e:75:34:2e:cc:fd:b0:0d:e4:94:0d:
58:be:6e:37:a6:c1:99:ce:ab:d0:1c:e6:79:57:3e:
3a:75:ce:f9:83:86:26:bc:a7:7c:2f:64:1f:18:2d:
bf:18:ab:f1:de:94:9d:aa:b5:e5:31:8f:ad:b2:60:
4a:f9:03:8a:24:fa:fe:b3:d4:c5:0e:ea:40:87:b9:
16:c5:45:2b:25:cf:e1:26:f6:45:b7:14:66:b3:51:
58:85:51:42:67:9e:fa:18:53:76:db:8d:4e:39:f7:
f1:3e:b4:7a:90:bb:ad:2b:b1:45:b1:65:8d:ff:a9:
97:0c:0d:6e:fd:d9:ec:dc:03:87:36:ee:33:01:a0:
cd:cb:c6:01:19:f7:1c:4e:be:e2:51:05:84:7f:a5:
d3:ca:a8:4c:33:f5:f2:1c:74:bd:dc:e9:b0:77:f5:
2d:28:10:96:f9:47:5b:b0:c1:1d:0c:0c:36:34:dd:
77:45:d5:41:dc:6f:5a:0d:80:ab:f6:d2:a1:53:89:
43:0a:a2:32:c2:b8:20:35:a4:1d:78:e3:9e:fe:45:
79:46:8e:25:d2:50:34:ac:a2:ff:4b:45:b4:25:ec:
6e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7F:9C:AC:1E:0A:F8:75:AB:9C:0B:1F:91:45:12:A6:2A:0E:A1:00
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-n-crB4K-HWrnAsfkUUSpioOoQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:5e:0c:c5:c4:3b:20:e3:47:aa:b5:3d:5e:9e:9c:79:78:91:
ae:ff:5f:6d:98:12:be:66:eb:33:c8:11:41:6f:f1:bb:a9:3d:
a0:a1:16:03:28:8b:b8:e0:4a:4e:3e:25:7b:65:e8:d9:16:77:
b1:6a:46:c6:09:ed:18:4d:1b:b6:95:62:02:e9:e3:32:fb:d6:
74:5e:a2:6c:eb:20:c5:5d:13:c2:db:38:bc:bd:51:b1:9c:c9:
dc:ef:22:e5:8b:98:f3:9c:fd:07:17:b0:d8:e8:b6:8d:e0:bc:
97:0a:4f:08:bb:85:47:2a:11:0e:2a:89:18:c4:51:f0:cb:b4:
80:02:5c:cc:d0:ef:62:31:7a:4b:9c:36:ce:4c:a0:57:7f:5b:
fe:b8:e0:6e:e8:a2:6c:de:09:0a:97:dd:51:81:f2:a8:10:6b:
56:5c:55:a1:c7:42:b0:c2:c1:38:10:d5:a8:2f:9f:6f:42:32:
f1:ce:9a:63:ec:6d:ff:63:fc:25:87:1b:63:08:57:64:12:53:
11:40:52:6e:6c:c4:20:ef:1e:c2:e2:18:bc:54:68:82:48:72:
c4:c4:12:6d:d6:d9:f4:a7:8a:26:49:a1:22:af:46:35:47:a7:
f7:ae:be:47:b3:a1:fa:53:2c:d3:32:30:97:e5:7a:94:87:ec:
e5:79:e1:7e
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYirOOK7Dj31feHEihwhWe9UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjExMTYxMDExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTdmOWNhYzFlMGFmODc1YWI5YzBiMWY5MTQ1MTJhNjJhMGVhMTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCMkXA0dGjwf+JcPkozVeVux8kk2
T4XQrTn2UdlJqeDNDnU0Lsz9sA3klA1Yvm43psGZzqvQHOZ5Vz46dc75g4YmvKd8
L2QfGC2/GKvx3pSdqrXlMY+tsmBK+QOKJPr+s9TFDupAh7kWxUUrJc/hJvZFtxRm
s1FYhVFCZ576GFN2241OOffxPrR6kLutK7FFsWWN/6mXDA1u/dns3AOHNu4zAaDN
y8YBGfccTr7iUQWEf6XTyqhMM/XyHHS93Omwd/UtKBCW+UdbsMEdDAw2NN13RdVB
3G9aDYCr9tKhU4lDCqIywrggNaQdeOOe/kV5Ro4l0lA0rKL/S0W0JexuYQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPp/nKweCvh1q5wLH5FFEqYqDqEAMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMS1uLWNyQjRLLUhXcm5Bc2ZrVVVTcGlvT29RQS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFh
Ni8xL2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQBkXgzFxDsg40eqtT1e
npx5eJGu/19tmBK+ZuszyBFBb/G7qT2goRYDKIu44EpOPiV7ZejZFnexakbGCe0Y
TRu2lWIC6eMy+9Z0XqJs6yDFXRPC2zi8vVGxnMnc7yLli5jznP0HF7DY6LaN4LyX
Ck8Iu4VHKhEOKokYxFHwy7SAAlzM0O9iMXpLnDbOTKBXf1v+uOBu6KJs3gkKl91R
gfKoEGtWXFWhx0KwwsE4ENWoL59vQjLxzppj7G3/Y/wlhxtjCFdkElMRQFJubMQg
7x7C4hi8VGiCSHLExBJt1tn0p4omSaEir0Y1R6f3rr5Hs6H6UyzTMjCX5XqUh+zl
eeF+
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:49:55 2025 by rpki-client