Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1ywvuZ4Sa3eHEVRSsoJSuTmT808.roa
File: 1ywvuZ4Sa3eHEVRSsoJSuTmT808.roa (raw, json)
Hash identifier: wlKPJXyDbva56C54gAda4eJgtaFWeTLLo67DdW+0hNk=
Subject key identifier: D7:2C:2F:B9:9E:12:6B:77:87:11:54:52:B2:82:52:B9:39:93:F3:4F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B6990CB9BEE952468F076BD996428669
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1ywvuZ4Sa3eHEVRSsoJSuTmT808.roa
Signing time: Tue 13 Jun 2023 21:11:03 +0000
ROA not before: Tue 13 Jun 2023 21:11:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b6:99:0c:b9:be:e9:52:46:8f:07:6b:d9:96:42:86:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 13 21:11:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d72c2fb99e126b7787115452b28252b93993f34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e8:59:59:35:a4:5c:d4:3e:ff:97:d4:35:fa:
4a:2f:3d:11:0d:bf:eb:47:5e:18:53:38:75:65:e4:
2e:42:b0:49:23:ee:00:d5:ce:ca:25:ce:ff:f2:a6:
04:0f:5d:0b:fe:b1:df:8c:b2:95:11:4d:ed:1e:b2:
29:a7:c1:e8:97:8e:2b:ec:fa:c4:01:f3:13:55:6d:
0c:5b:4c:96:99:81:7e:54:67:c6:d9:49:97:f5:29:
ed:6c:95:d1:1e:e8:02:ce:28:ee:36:96:46:56:04:
7c:de:66:43:3d:0a:ae:7a:18:da:8a:21:7f:1f:09:
a6:a5:19:76:36:2c:89:f5:11:63:68:7e:0d:ba:71:
c3:e1:36:50:d9:c5:0c:93:81:8f:f2:d3:ec:fe:de:
53:00:91:3e:4c:f8:99:80:7c:59:89:1c:d0:98:e4:
ff:42:73:33:57:61:4f:5a:80:e3:2d:02:50:c7:02:
fc:4e:b5:a0:1d:00:60:7d:83:10:1d:e0:dd:72:4c:
e9:a3:8a:1b:99:83:dd:da:01:95:d5:68:95:4f:cf:
b8:d2:78:85:e8:fb:c8:a8:83:b2:1d:ab:24:c8:f2:
4d:38:e4:a1:03:b6:e8:c4:73:4e:72:f2:34:1f:13:
13:b9:f2:b9:2f:4a:eb:93:ad:01:45:3b:19:8b:13:
71:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2C:2F:B9:9E:12:6B:77:87:11:54:52:B2:82:52:B9:39:93:F3:4F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1ywvuZ4Sa3eHEVRSsoJSuTmT808.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:c3:1d:51:6f:03:8b:3e:08:13:45:9c:8b:6b:0e:35:18:2f:
de:a5:27:16:27:c9:ab:f4:94:b0:f3:33:53:82:06:e3:c6:55:
da:f0:6f:3b:06:d6:61:52:11:1c:00:c8:5a:60:0f:de:e3:2f:
ad:f6:d3:8f:62:34:c9:fc:21:a4:87:ec:e7:f0:29:29:65:82:
f5:24:46:0e:b9:6a:73:c8:97:9f:ae:dd:26:e9:ad:2a:e3:0d:
d8:c4:fe:a0:ec:b0:ab:ad:61:8a:03:5d:f0:8e:96:24:fd:1c:
f1:ba:9c:92:f9:aa:c7:43:a0:89:dd:26:81:1f:48:24:62:3e:
ae:e3:b8:f2:09:ec:7a:1a:64:47:52:3a:51:7c:e6:57:79:e7:
bd:b8:be:cb:4a:da:6b:2b:43:bc:10:66:7e:b1:37:27:fa:54:
b9:ee:3a:12:d3:08:08:11:ef:ef:0d:b6:22:25:bb:15:dc:ed:
94:9e:b3:f1:74:19:34:f0:34:29:89:ae:90:c5:9b:4f:a0:45:
4c:7c:d8:61:a3:26:2e:36:2c:5d:ce:7e:ad:2a:8b:77:74:95:
07:9b:65:c6:bd:9a:ba:87:67:53:19:99:fb:71:93:c2:4a:78:
fe:f9:2a:63:8f:9a:56:49:15:e8:fc:8c:14:9d:ec:05:c5:8a:
41:49:d9:31
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYi2mQy5vulSRo8Ha9mWQoZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjEzMjExMTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzJjMmZiOTllMTI2Yjc3ODcxMTU0NTJiMjgyNTJiOTM5OTNmMzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOhZWTWkXNQ+/5fUNfpKLz0RDb/r
R14YUzh1ZeQuQrBJI+4A1c7KJc7/8qYED10L/rHfjLKVEU3tHrIpp8Hol44r7PrE
AfMTVW0MW0yWmYF+VGfG2UmX9SntbJXRHugCzijuNpZGVgR83mZDPQquehjaiiF/
HwmmpRl2NiyJ9RFjaH4NunHD4TZQ2cUMk4GP8tPs/t5TAJE+TPiZgHxZiRzQmOT/
QnMzV2FPWoDjLQJQxwL8TrWgHQBgfYMQHeDdckzpo4obmYPd2gGV1WiVT8+40niF
6PvIqIOyHaskyPJNOOShA7boxHNOcvI0HxMTufK5L0rrk60BRTsZixNxYQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNcsL7meEmt3hxFUUrKCUrk5k/NPMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMXl3dnVaNFNhM2VIRVZSU3NvSlN1VG1UODA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAzDHVFvA4s+CBNFnItr
DjUYL96lJxYnyav0lLDzM1OCBuPGVdrwbzsG1mFSERwAyFpgD97jL632049iNMn8
IaSH7OfwKSllgvUkRg65anPIl5+u3SbprSrjDdjE/qDssKutYYoDXfCOliT9HPG6
nJL5qsdDoIndJoEfSCRiPq7juPIJ7HoaZEdSOlF85ld55724vstK2msrQ7wQZn6x
Nyf6VLnuOhLTCAgR7+8NtiIluxXc7ZSes/F0GTTwNCmJrpDFm0+gRUx82GGjJi42
LF3Ofq0qi3d0lQebZca9mrqHZ1MZmftxk8JKeP75KmOPmlZJFej8jBSd7AXFikFJ
2TE=
-----END CERTIFICATE-----
Generated at Thu May 1 19:51:23 2025 by rpki-client