Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/40GK6cY24i1SmPtZDaVqVMLDHSs.roa
File: 40GK6cY24i1SmPtZDaVqVMLDHSs.roa (raw, json)
Hash identifier: i8rjEAZQslM5TG+nZ1frSaop9KWpkCo7Bt1uW0XpyUU=
Subject key identifier: E3:41:8A:E9:C6:36:E2:2D:52:98:FB:59:0D:A5:6A:54:C2:C3:1D:2B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018737CCB2CF31A9A45988CA1A00CE8DB2C1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/40GK6cY24i1SmPtZDaVqVMLDHSs.roa
Signing time: Fri 31 Mar 2023 13:12:54 +0000
ROA not before: Fri 31 Mar 2023 13:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:37:cc:b2:cf:31:a9:a4:59:88:ca:1a:00:ce:8d:b2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 31 13:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3418ae9c636e22d5298fb590da56a54c2c31d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f1:ff:8a:a0:4d:9f:d0:98:a8:6d:c0:a0:13:
07:0b:cd:ce:ba:08:ea:96:a5:2f:83:9f:78:0b:a1:
4d:fb:42:13:85:2d:b7:dd:7f:72:f2:45:9c:1e:47:
bb:a0:da:86:4e:cb:8b:d5:72:03:63:f8:9a:55:1d:
55:99:fa:55:d0:76:bd:32:5d:eb:a8:1a:b2:a0:c8:
1c:a0:e0:a4:4c:ef:71:e6:e9:95:5b:30:bd:6f:ef:
29:a4:4e:58:ae:b8:a5:9e:9e:9f:da:19:00:85:61:
a3:38:dd:4d:ae:03:61:89:02:4c:c2:2c:ef:db:07:
d1:a9:33:ae:8d:c5:cc:7b:5a:08:61:cf:64:47:b1:
e3:5d:6e:c8:0d:75:0f:95:d9:4e:6b:b4:a4:6c:e6:
65:81:64:75:ce:12:12:8a:69:bf:ea:b1:1d:be:e5:
fe:ab:80:08:67:34:d3:55:be:c5:56:bb:39:7f:d7:
d1:eb:6d:db:f8:b1:08:55:44:82:39:bc:b4:42:2d:
96:61:c4:bf:ca:5b:bc:3b:1c:79:19:14:36:df:b1:
be:71:39:56:a2:cb:da:c3:1f:d4:4e:e8:c2:82:ca:
1a:8d:7b:53:05:67:b7:fa:db:2e:0f:c2:4b:23:24:
1d:14:2b:be:69:dd:8d:17:64:ce:8e:74:e2:3b:2d:
94:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:41:8A:E9:C6:36:E2:2D:52:98:FB:59:0D:A5:6A:54:C2:C3:1D:2B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/40GK6cY24i1SmPtZDaVqVMLDHSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:92:fc:ad:5d:c4:13:66:e4:3c:a8:ab:e5:39:94:12:66:6b:
a7:69:c9:e5:c4:68:41:e6:2d:85:84:81:17:3c:ea:cb:e7:7d:
db:bb:4a:0a:f9:89:39:31:da:40:10:b0:f3:a9:47:f0:d9:bc:
42:47:60:15:ea:49:ec:ac:e8:1e:d6:6f:0f:53:2e:9b:55:ce:
10:d1:f7:6b:e8:76:79:a2:ff:96:04:76:77:ab:10:6f:6f:3b:
29:ef:15:53:b0:5a:44:48:a1:af:25:d9:65:8a:2e:86:08:99:
83:f3:55:bb:5b:e1:36:97:88:27:4a:9b:62:6e:b0:e6:83:a1:
ae:e1:30:ec:83:47:d0:c9:f3:d4:ab:bc:d1:75:a7:d1:e1:08:
d5:f7:7f:f3:10:11:18:54:86:a6:60:18:40:34:08:cf:21:4f:
71:8a:44:22:94:b0:b8:0f:ef:a8:17:db:c3:45:bb:f8:9a:72:
41:1e:4b:88:c0:c9:f7:61:64:e5:86:d5:8f:b7:02:32:84:18:
70:da:63:cb:be:31:b7:1b:c4:c1:8d:72:29:7e:17:84:eb:c9:
93:2f:18:aa:ab:4a:36:ee:5f:35:07:88:76:c6:4d:b4:f4:17:
d7:85:88:21:65:d7:5a:74:b8:f4:a2:db:79:93:67:af:01:dc:
61:af:1a:28
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYc3zLLPMamkWYjKGgDOjbLBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzMxMTMxMjU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzQxOGFlOWM2MzZlMjJkNTI5OGZiNTkwZGE1NmE1NGMyYzMxZDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/H/iqBNn9CYqG3AoBMHC83Ougjq
lqUvg594C6FN+0IThS233X9y8kWcHke7oNqGTsuL1XIDY/iaVR1VmfpV0Ha9Ml3r
qBqyoMgcoOCkTO9x5umVWzC9b+8ppE5Yrrilnp6f2hkAhWGjON1NrgNhiQJMwizv
2wfRqTOujcXMe1oIYc9kR7HjXW7IDXUPldlOa7SkbOZlgWR1zhISimm/6rEdvuX+
q4AIZzTTVb7FVrs5f9fR623b+LEIVUSCOby0Qi2WYcS/ylu8Oxx5GRQ237G+cTlW
osvawx/UTujCgsoajXtTBWe3+tsuD8JLIyQdFCu+ad2NF2TOjnTiOy2U/QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFONBiunGNuItUpj7WQ2lalTCwx0rMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNDBHSzZjWTI0aTFTbVB0WkRhVnFWTUxESFNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIeS/K1dxBNm5Dyoq+U5
lBJma6dpyeXEaEHmLYWEgRc86svnfdu7Sgr5iTkx2kAQsPOpR/DZvEJHYBXqSeys
6B7Wbw9TLptVzhDR92vodnmi/5YEdnerEG9vOynvFVOwWkRIoa8l2WWKLoYImYPz
Vbtb4TaXiCdKm2JusOaDoa7hMOyDR9DJ89SrvNF1p9HhCNX3f/MQERhUhqZgGEA0
CM8hT3GKRCKUsLgP76gX28NFu/iackEeS4jAyfdhZOWG1Y+3AjKEGHDaY8u+Mbcb
xMGNcil+F4TryZMvGKqrSjbuXzUHiHbGTbT0F9eFiCFl11p0uPSi23mTZ68B3GGv
Gig=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:47:10 2025 by rpki-client