Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2vJ-lmZTGcNOO39qqDpvBAESrKI.roa
File: 2vJ-lmZTGcNOO39qqDpvBAESrKI.roa (raw, json)
Hash identifier: ncErNt95BpzjCUgNU2dDmV1JQyE9X9OYqXfEuizdtYI=
Subject key identifier: DA:F2:7E:96:66:53:19:C3:4E:3B:7F:6A:A8:3A:6F:04:01:12:AC:A2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885488B259ED24AEC6029095E246D9247D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2vJ-lmZTGcNOO39qqDpvBAESrKI.roa
Signing time: Thu 25 May 2023 20:10:24 +0000
ROA not before: Thu 25 May 2023 20:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:54:88:b2:59:ed:24:ae:c6:02:90:95:e2:46:d9:24:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 25 20:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=daf27e96665319c34e3b7f6aa83a6f040112aca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9f:1b:86:30:60:13:22:c0:62:da:d4:ce:46:
f2:80:29:66:a9:cc:bc:21:b9:75:79:4e:3f:37:21:
a5:8a:8e:29:c6:b8:40:d7:ea:69:97:ed:b2:c4:f3:
59:2d:6a:a2:61:3d:9f:4c:c1:91:d7:32:ff:b6:59:
a5:f6:6a:31:52:95:9a:67:a0:69:ac:a3:fb:e9:d8:
37:6c:0b:70:40:8d:d1:be:c9:83:1f:50:b0:e4:ae:
58:ac:84:1c:8c:34:fc:cf:d8:d5:87:10:25:aa:db:
f6:db:55:0a:1f:79:a7:4d:04:9e:84:49:d3:1e:8b:
1f:59:28:f6:41:33:ca:9c:e0:3a:02:b9:cc:c9:2b:
83:8b:19:04:8d:66:de:24:4f:f4:ca:ff:65:5b:fc:
83:4b:20:37:eb:7d:74:d2:dc:86:ab:bc:e7:fe:63:
40:87:00:7e:d9:d7:30:59:1f:94:1d:0a:90:26:53:
ce:d0:01:d9:c8:39:10:10:d6:5a:a7:d1:e3:b9:5e:
b9:30:41:4a:b1:6b:c6:89:cb:b6:88:ce:6b:2e:c1:
c2:7f:57:6d:02:04:d5:d6:2b:70:75:05:3c:4f:97:
53:69:a7:9e:9d:92:c4:dc:6a:78:14:6e:b3:f9:51:
73:d7:11:e7:c7:19:24:e0:6f:4d:cc:e8:fe:4b:46:
3c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F2:7E:96:66:53:19:C3:4E:3B:7F:6A:A8:3A:6F:04:01:12:AC:A2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2vJ-lmZTGcNOO39qqDpvBAESrKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:3b:c2:12:37:79:63:45:76:8c:96:f7:96:0f:48:9b:11:63:
33:17:a6:07:98:38:3e:c5:ff:88:89:29:16:8c:7e:89:02:f3:
5a:eb:5b:a3:85:74:06:b3:ec:c6:96:3c:43:4a:72:81:8c:9f:
bc:38:70:49:17:91:6c:64:4d:47:05:7d:22:da:09:ab:e0:6f:
2b:08:17:68:e4:91:dc:6d:9b:90:e0:f2:ec:c4:28:93:f4:e9:
f3:3d:16:a2:db:73:82:16:09:3d:c2:42:f4:88:9b:28:a7:db:
91:e8:ab:56:b6:83:be:f3:5b:ce:9c:fe:18:00:75:ee:8b:06:
09:ce:d9:29:70:32:aa:c1:eb:93:f3:9c:7b:30:aa:5e:b9:ce:
08:72:2d:75:54:81:0d:f5:e9:69:a5:0c:93:79:0f:f5:29:6f:
9b:c3:ca:4a:8d:ed:91:7e:c8:1b:85:8f:a7:1e:54:1b:aa:96:
19:ed:35:c1:fe:32:57:9b:ea:36:42:02:44:77:b3:ed:b6:12:
3a:b1:95:f1:85:e2:b9:8e:9a:13:d5:f0:8b:9e:42:c1:c0:24:
81:bf:d1:00:ae:41:9b:4a:80:4e:6c:fb:2e:b3:2c:cd:84:79:
2e:c3:2c:51:df:28:af:31:d6:4e:2c:84:63:58:d0:3f:9a:f7:
24:e4:52:c9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhUiLJZ7SSuxgKQleJG2SR9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTI1MjAxMDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWYyN2U5NjY2NTMxOWMzNGUzYjdmNmFhODNhNmYwNDAxMTJhY2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ8bhjBgEyLAYtrUzkbygClmqcy8
Ibl1eU4/NyGlio4pxrhA1+ppl+2yxPNZLWqiYT2fTMGR1zL/tlml9moxUpWaZ6Bp
rKP76dg3bAtwQI3RvsmDH1Cw5K5YrIQcjDT8z9jVhxAlqtv221UKH3mnTQSehEnT
HosfWSj2QTPKnOA6ArnMySuDixkEjWbeJE/0yv9lW/yDSyA363100tyGq7zn/mNA
hwB+2dcwWR+UHQqQJlPO0AHZyDkQENZap9HjuV65MEFKsWvGicu2iM5rLsHCf1dt
AgTV1itwdQU8T5dTaaeenZLE3Gp4FG6z+VFz1xHnxxkk4G9NzOj+S0Y8DQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNryfpZmUxnDTjt/aqg6bwQBEqyiMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMnZKLWxtWlRHY05PTzM5cXFEcHZCQUVTcktJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFs7whI3eWNFdoyW95YP
SJsRYzMXpgeYOD7F/4iJKRaMfokC81rrW6OFdAaz7MaWPENKcoGMn7w4cEkXkWxk
TUcFfSLaCavgbysIF2jkkdxtm5Dg8uzEKJP06fM9FqLbc4IWCT3CQvSImyin25Ho
q1a2g77zW86c/hgAde6LBgnO2SlwMqrB65PznHswql65zghyLXVUgQ316WmlDJN5
D/Upb5vDykqN7ZF+yBuFj6ceVBuqlhntNcH+Mleb6jZCAkR3s+22EjqxlfGF4rmO
mhPV8IueQsHAJIG/0QCuQZtKgE5s+y6zLM2EeS7DLFHfKK8x1k4shGNY0D+a9yTk
Usk=
-----END CERTIFICATE-----
Generated at Thu May 1 00:08:10 2025 by rpki-client