Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2JixekVQibmw9XH3JUpZKQ0EXe0.roa
File: 2JixekVQibmw9XH3JUpZKQ0EXe0.roa (raw, json)
Hash identifier: fXcHCaHU/IFFrF7dKaq742dwqR6bA6FyuCQy7oFpbcM=
Subject key identifier: D8:98:B1:7A:45:50:89:B9:B0:F5:71:F7:25:4A:59:29:0D:04:5D:ED
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189438D77533D264D9A04F79E2E374EA93D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2JixekVQibmw9XH3JUpZKQ0EXe0.roa
Signing time: Tue 11 Jul 2023 06:04:51 +0000
ROA not before: Tue 11 Jul 2023 06:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:189:438d:1283/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:43:8d:77:53:3d:26:4d:9a:04:f7:9e:2e:37:4e:a9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 11 06:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d898b17a455089b9b0f571f7254a59290d045ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:36:5d:1e:5b:40:8a:3e:37:bf:57:63:90:09:
bd:96:f8:cf:a4:30:73:72:10:d3:91:2b:2b:54:3c:
18:18:1d:c7:b2:d2:2c:6d:6c:d9:99:67:c1:73:0e:
16:d8:19:ef:ee:3a:5b:52:b2:f7:92:77:23:59:62:
7b:f2:fb:f7:3b:c1:b3:9c:4b:46:f9:0e:1f:15:7e:
f9:92:36:98:cf:cd:2c:20:be:70:e0:32:b8:f7:73:
7c:66:d9:00:cc:dd:78:af:cc:12:45:02:59:a0:23:
a8:ef:c5:ea:07:45:89:fd:8a:d4:a8:f1:a4:91:3f:
f7:6e:ad:c2:97:14:c7:7b:a7:11:d6:b2:4d:91:8c:
cf:c6:df:e0:b4:74:84:10:ce:5b:17:18:8e:83:32:
31:bf:b5:06:32:c3:4b:3b:1e:34:3c:70:80:0a:5c:
38:7f:99:ae:ba:76:01:40:06:e3:06:bb:de:63:ca:
f6:04:fb:0d:e0:36:03:2d:3e:d9:16:92:3b:28:b5:
80:c8:6e:bc:47:d1:5c:05:8d:14:96:4e:f4:74:52:
72:6e:f6:fb:d3:db:4d:a1:60:72:95:41:07:02:ac:
8c:aa:59:6d:e6:d9:93:04:d7:64:8a:4f:d8:1f:16:
3e:61:d1:67:34:50:6b:75:bd:68:06:31:86:a0:ef:
6d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:98:B1:7A:45:50:89:B9:B0:F5:71:F7:25:4A:59:29:0D:04:5D:ED
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2JixekVQibmw9XH3JUpZKQ0EXe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:83:03:dc:31:e6:7e:7d:0d:ec:3a:18:fd:34:dd:c3:2b:ce:
a4:5b:b5:dd:c4:c3:fd:c9:7a:87:35:c4:2e:99:1c:93:26:f7:
9a:d2:25:65:00:ad:87:44:39:de:9a:ff:9d:70:58:b4:91:93:
89:ae:db:8e:e1:ad:c7:3b:b1:d1:23:43:c0:dd:e5:6e:8e:65:
16:01:bf:57:24:94:4a:0b:98:3e:16:aa:ba:34:a1:61:ed:b9:
a9:88:1f:d0:ed:c7:c0:05:3c:66:a5:2b:08:25:d7:d5:c9:e8:
1e:dd:25:d2:10:3c:fe:8b:57:39:1b:ca:66:0a:bd:fd:65:cb:
dd:ad:24:b6:0f:f3:fe:67:ff:61:06:85:29:00:00:c8:01:90:
81:23:54:c7:3e:7b:18:31:21:3d:ab:1c:4e:53:b4:d6:23:a2:
55:d4:c2:a5:f2:21:a1:11:3f:65:81:83:2e:d7:ea:54:f8:ae:
7b:95:2d:7a:fb:7a:93:d5:e6:4d:c5:19:4e:91:a8:54:05:4c:
7f:25:f7:60:cb:eb:e9:cf:08:35:01:4c:dd:48:5e:1d:8d:82:
c3:bd:89:e9:0d:ae:85:df:cf:63:2d:8e:0f:1d:8e:ff:84:cb:
7a:e4:0c:e7:25:f4:72:31:d6:68:44:c8:eb:16:33:10:ed:27:
ac:01:00:f7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlDjXdTPSZNmgT3ni43Tqk9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzExMDYwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODk4YjE3YTQ1NTA4OWI5YjBmNTcxZjcyNTRhNTkyOTBkMDQ1ZGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjZdHltAij43v1djkAm9lvjPpDBz
chDTkSsrVDwYGB3HstIsbWzZmWfBcw4W2Bnv7jpbUrL3kncjWWJ78vv3O8GznEtG
+Q4fFX75kjaYz80sIL5w4DK493N8ZtkAzN14r8wSRQJZoCOo78XqB0WJ/YrUqPGk
kT/3bq3ClxTHe6cR1rJNkYzPxt/gtHSEEM5bFxiOgzIxv7UGMsNLOx40PHCAClw4
f5muunYBQAbjBrveY8r2BPsN4DYDLT7ZFpI7KLWAyG68R9FcBY0Ulk70dFJybvb7
09tNoWBylUEHAqyMqllt5tmTBNdkik/YHxY+YdFnNFBrdb1oBjGGoO9tZQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNiYsXpFUIm5sPVx9yVKWSkNBF3tMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMkppeGVrVlFpYm13OVhIM0pVcFpLUTBFWGUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB2DA9wx5n59Dew6GP00
3cMrzqRbtd3Ew/3Jeoc1xC6ZHJMm95rSJWUArYdEOd6a/51wWLSRk4mu247hrcc7
sdEjQ8Dd5W6OZRYBv1cklEoLmD4Wqro0oWHtuamIH9Dtx8AFPGalKwgl19XJ6B7d
JdIQPP6LVzkbymYKvf1ly92tJLYP8/5n/2EGhSkAAMgBkIEjVMc+exgxIT2rHE5T
tNYjolXUwqXyIaERP2WBgy7X6lT4rnuVLXr7epPV5k3FGU6RqFQFTH8l92DL6+nP
CDUBTN1IXh2NgsO9iekNroXfz2Mtjg8djv+Ey3rkDOcl9HIx1mhEyOsWMxDtJ6wB
APc=
-----END CERTIFICATE-----
Generated at Thu May 1 00:08:28 2025 by rpki-client