Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/32vj6mKnNqseuA5eCka3BrKQhlE.roa
File: 32vj6mKnNqseuA5eCka3BrKQhlE.roa (raw, json)
Hash identifier: BJjGpjW7stmbEzRspIeuIhgzRiQAZv6dtZINIxsxmwE=
Subject key identifier: DF:6B:E3:EA:62:A7:36:AB:1E:B8:0E:5E:0A:46:B7:06:B2:90:86:51
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B05EC55B0668639834D9B7AAC0924547
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/32vj6mKnNqseuA5eCka3BrKQhlE.roa
Signing time: Tue 01 Aug 2023 09:12:28 +0000
ROA not before: Tue 01 Aug 2023 09:12:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:5e:c5:5b:06:68:63:98:34:d9:b7:aa:c0:92:45:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 09:12:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df6be3ea62a736ab1eb80e5e0a46b706b2908651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8d:95:e8:17:b9:12:b6:72:c8:ae:8f:76:f0:
f6:05:6b:39:12:06:f1:1b:ce:93:5f:88:40:81:1a:
6b:c4:ec:53:38:e4:a2:c7:4f:a3:90:80:ac:a6:9e:
c8:ab:71:77:6e:06:2e:b0:ce:4e:07:e1:5d:b9:54:
f2:8a:8c:c4:fc:02:b7:42:37:13:ce:ac:86:3c:76:
5d:e0:ac:00:7a:2c:50:a3:b6:73:d3:52:7b:80:76:
89:f9:56:6e:15:19:1e:e7:12:7d:a7:91:93:8e:da:
81:48:d2:4f:be:e1:25:75:11:88:0e:c2:ea:27:05:
6b:68:b8:91:93:c3:b2:37:3b:15:16:4e:ab:5e:94:
3a:c7:19:9c:59:e2:07:42:21:6a:e0:7b:52:be:b1:
b5:cc:51:df:15:f8:eb:da:a1:a1:eb:5f:09:ad:38:
72:2c:5d:6e:f6:27:91:ff:26:9f:bf:6d:3b:a6:86:
e2:14:80:4f:ac:85:98:70:8b:b9:c6:d7:ff:12:0e:
8b:43:53:4f:60:ab:4c:e1:06:4a:90:21:ac:2f:d8:
26:e5:2d:89:15:e8:ed:01:65:c1:fb:3a:5c:74:02:
fc:be:bb:51:55:96:8c:22:f1:90:7d:c2:5e:05:7a:
6f:d5:0a:f8:cb:17:f3:e1:d6:f8:35:ba:b3:3c:9d:
34:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6B:E3:EA:62:A7:36:AB:1E:B8:0E:5E:0A:46:B7:06:B2:90:86:51
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/32vj6mKnNqseuA5eCka3BrKQhlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:d1:88:29:37:02:90:b9:22:8d:7b:47:de:55:ef:f8:1f:10:
b4:17:a8:42:d6:5f:5c:7f:f8:d8:f5:ce:ed:9f:a9:4f:c6:2c:
34:cc:af:8c:45:93:c8:ac:e9:c4:85:aa:18:bf:59:bc:20:05:
b3:40:ef:f1:01:fd:34:2a:bd:69:e4:aa:ab:d4:45:ea:92:c2:
bb:c7:ac:2e:4e:27:2b:f4:08:f2:f3:35:ac:4d:a6:f1:36:1f:
43:dd:f4:eb:62:52:95:c1:8e:05:83:41:9e:d2:78:ed:98:a3:
09:ea:96:28:63:7a:ce:cf:43:53:d4:5f:0f:11:46:95:2a:67:
82:c6:5b:41:32:18:09:ef:22:f2:b8:0c:e4:4a:6a:bc:5e:93:
5e:71:1e:92:e7:07:ea:88:00:96:e8:8c:be:b1:5b:d8:f0:ef:
5c:3a:2d:56:e5:21:43:f0:de:35:11:52:0f:1a:ac:aa:18:19:
4f:14:c1:c6:61:ec:3d:7c:a3:19:a4:18:01:d2:12:4b:eb:24:
e4:0b:a3:b8:54:82:98:c6:1e:fa:cb:76:56:e3:2d:c6:bd:af:
cd:34:fc:d4:bf:d3:15:55:e0:ff:bd:ff:6c:e5:7a:3f:9f:15:
96:ae:ac:03:c8:f7:ab:61:0a:a7:4d:de:bf:ad:08:47:b2:e5:
02:32:c5:5f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmwXsVbBmhjmDTZt6rAkkVHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODAxMDkxMjI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjZiZTNlYTYyYTczNmFiMWViODBlNWUwYTQ2YjcwNmIyOTA4NjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho2V6Be5ErZyyK6PdvD2BWs5Egbx
G86TX4hAgRprxOxTOOSix0+jkICspp7Iq3F3bgYusM5OB+FduVTyiozE/AK3QjcT
zqyGPHZd4KwAeixQo7Zz01J7gHaJ+VZuFRke5xJ9p5GTjtqBSNJPvuEldRGIDsLq
JwVraLiRk8OyNzsVFk6rXpQ6xxmcWeIHQiFq4HtSvrG1zFHfFfjr2qGh618JrThy
LF1u9ieR/yafv207pobiFIBPrIWYcIu5xtf/Eg6LQ1NPYKtM4QZKkCGsL9gm5S2J
FejtAWXB+zpcdAL8vrtRVZaMIvGQfcJeBXpv1Qr4yxfz4db4NbqzPJ00uQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFN9r4+pipzarHrgOXgpGtwaykIZRMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMzJ2ajZtS25OcXNldUE1ZUNrYTNCcktRaGxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFnRiCk3ApC5Io17R95V
7/gfELQXqELWX1x/+Nj1zu2fqU/GLDTMr4xFk8is6cSFqhi/WbwgBbNA7/EB/TQq
vWnkqqvUReqSwrvHrC5OJyv0CPLzNaxNpvE2H0Pd9OtiUpXBjgWDQZ7SeO2Yownq
lihjes7PQ1PUXw8RRpUqZ4LGW0EyGAnvIvK4DORKarxek15xHpLnB+qIAJbojL6x
W9jw71w6LVblIUPw3jURUg8arKoYGU8UwcZh7D18oxmkGAHSEkvrJOQLo7hUgpjG
HvrLdlbjLca9r800/NS/0xVV4P+9/2zlej+fFZaurAPI96thCqdN3r+tCEey5QIy
xV8=
-----END CERTIFICATE-----
Generated at Mon May 5 00:50:13 2025 by rpki-client