Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4DL7jG7EujzoNSxwrBSq6jwVFec.roa
File: 4DL7jG7EujzoNSxwrBSq6jwVFec.roa (raw, json)
Hash identifier: zVOvo+73XVZryNxNWF9XVKlcJeGHgHgfPX3qQYqJXfU=
Subject key identifier: E0:32:FB:8C:6E:C4:BA:3C:E8:35:2C:70:AC:14:AA:EA:3C:15:15:E7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018830B7392FDCE8B12C440392FD63FB0F50
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4DL7jG7EujzoNSxwrBSq6jwVFec.roa
Signing time: Thu 18 May 2023 21:14:54 +0000
ROA not before: Thu 18 May 2023 21:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:30:b7:39:2f:dc:e8:b1:2c:44:03:92:fd:63:fb:0f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 18 21:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e032fb8c6ec4ba3ce8352c70ac14aaea3c1515e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:30:14:be:83:49:c2:f0:34:e4:6f:95:bb:e8:
93:4d:0b:11:e9:7f:20:10:1a:8a:e4:a0:07:97:64:
77:6e:5f:9e:4c:12:02:24:30:3e:68:34:86:3d:2d:
35:5b:62:18:6f:98:3f:5d:5a:a7:3a:68:0d:f1:4b:
e0:d9:93:e5:5c:0f:01:5e:28:a8:97:ac:c2:12:6d:
fc:5f:68:bf:ac:98:d2:06:43:19:f9:37:46:b3:48:
ce:56:22:d0:28:56:b5:37:96:6c:18:c3:cb:41:57:
ac:e9:5a:6f:15:53:58:05:01:b5:e6:ab:77:9e:89:
98:d2:46:c5:58:28:0e:4e:8f:e5:f4:51:db:e8:98:
2d:ad:88:88:22:bb:34:94:96:da:c9:1b:5c:75:46:
8d:b8:3e:77:2a:37:97:26:bf:32:6a:b6:90:61:7f:
16:fa:73:c1:e9:2f:9c:16:d9:99:72:5b:97:c5:f9:
4c:d2:73:24:e4:31:f6:e8:45:26:ef:b7:82:dd:da:
2e:c3:de:e3:03:82:8e:41:a9:4d:90:b8:e1:1b:87:
8e:11:ec:f9:e2:93:0b:5f:10:06:f9:a6:ba:47:29:
79:21:8f:62:94:82:c3:18:f0:3d:fb:b2:ec:a3:f9:
17:fe:ec:3d:c8:1e:a6:58:57:4e:62:43:91:77:08:
f5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:32:FB:8C:6E:C4:BA:3C:E8:35:2C:70:AC:14:AA:EA:3C:15:15:E7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4DL7jG7EujzoNSxwrBSq6jwVFec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:4d:8e:9d:2e:ec:36:47:94:b6:3e:02:99:ed:39:08:86:52:
fc:d7:59:e2:4d:55:ff:fc:ce:1d:d5:3e:52:ea:3c:8a:a4:f7:
81:d8:6e:56:9e:cd:9a:57:10:39:f1:22:69:89:d6:72:c6:26:
01:40:a9:ec:d1:32:05:17:96:19:47:6a:c9:40:b5:91:4d:31:
77:b1:8d:d9:88:b9:0a:f6:a3:b2:5e:19:c8:d2:04:85:35:13:
b5:5c:1e:18:9c:22:70:0e:81:d5:be:eb:8f:eb:c2:e9:58:09:
95:21:7c:d8:ad:96:66:a4:a3:dc:f4:63:db:b3:a8:d7:e3:6c:
0a:39:26:ce:3c:16:91:43:91:60:a2:a4:fc:3e:95:6c:2b:dc:
67:68:6e:df:dd:08:e5:93:e9:21:63:40:54:fc:4f:36:b3:9a:
03:5a:79:4d:98:7d:da:76:f7:45:b1:13:a7:75:c5:be:d0:a1:
0f:57:aa:52:7d:b5:6c:6a:58:d7:27:7b:9a:8c:71:9a:e9:ad:
cc:70:2e:a8:ae:ec:03:84:e3:94:a1:3e:83:c4:11:24:c2:3d:
7e:23:fb:d6:a3:20:a4:ae:90:9a:2b:1c:06:3a:3f:10:c9:88:
7f:10:b1:9b:7f:81:58:66:14:6e:55:4e:63:da:7e:46:67:a1:
b2:59:04:90
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYgwtzkv3OixLEQDkv1j+w9QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTE4MjExNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDMyZmI4YzZlYzRiYTNjZTgzNTJjNzBhYzE0YWFlYTNjMTUxNWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTAUvoNJwvA05G+Vu+iTTQsR6X8g
EBqK5KAHl2R3bl+eTBICJDA+aDSGPS01W2IYb5g/XVqnOmgN8Uvg2ZPlXA8BXiio
l6zCEm38X2i/rJjSBkMZ+TdGs0jOViLQKFa1N5ZsGMPLQVes6VpvFVNYBQG15qt3
nomY0kbFWCgOTo/l9FHb6JgtrYiIIrs0lJbayRtcdUaNuD53KjeXJr8yaraQYX8W
+nPB6S+cFtmZcluXxflM0nMk5DH26EUm77eC3douw97jA4KOQalNkLjhG4eOEez5
4pMLXxAG+aa6Ryl5IY9ilILDGPA9+7Lso/kX/uw9yB6mWFdOYkORdwj1NwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOAy+4xuxLo86DUscKwUquo8FRXnMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNERMN2pHN0V1anpvTlN4d3JCU3E2andWRmVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKJNjp0u7DZHlLY+Apnt
OQiGUvzXWeJNVf/8zh3VPlLqPIqk94HYblaezZpXEDnxImmJ1nLGJgFAqezRMgUX
lhlHaslAtZFNMXexjdmIuQr2o7JeGcjSBIU1E7VcHhicInAOgdW+64/rwulYCZUh
fNitlmako9z0Y9uzqNfjbAo5Js48FpFDkWCipPw+lWwr3Gdobt/dCOWT6SFjQFT8
TzazmgNaeU2Yfdp290WxE6d1xb7QoQ9XqlJ9tWxqWNcne5qMcZrprcxwLqiu7AOE
45ShPoPEESTCPX4j+9ajIKSukJorHAY6PxDJiH8QsZt/gVhmFG5VTmPafkZnobJZ
BJA=
-----END CERTIFICATE-----
Generated at Thu May 1 05:38:40 2025 by rpki-client