Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4fapDx9YTow3Oe8JtHwCBk0xOUE.roa
File: 4fapDx9YTow3Oe8JtHwCBk0xOUE.roa (raw, json)
Hash identifier: Y0l/H4S181hulYIR3PAeApBPVtrcBZbew/J8cyj64dQ=
Subject key identifier: E1:F6:A9:0F:1F:58:4E:8C:37:39:EF:09:B4:7C:02:06:4D:31:39:41
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018744AF5829D561AB8D838D34098B7DBD86
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4fapDx9YTow3Oe8JtHwCBk0xOUE.roa
Signing time: Mon 03 Apr 2023 01:15:54 +0000
ROA not before: Mon 03 Apr 2023 01:15:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:44:af:58:29:d5:61:ab:8d:83:8d:34:09:8b:7d:bd:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 3 01:15:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1f6a90f1f584e8c3739ef09b47c02064d313941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f4:ed:a6:88:03:9b:fe:74:22:b6:a3:df:3a:
af:1c:1a:4e:24:42:ff:88:53:03:73:42:19:e7:49:
8e:36:9a:7d:72:03:a1:08:37:c3:da:05:7a:9b:39:
08:00:92:5f:21:cf:c0:29:a0:ce:98:e6:ec:60:48:
bc:f8:64:82:58:f0:8a:57:47:4e:b4:dc:21:76:fe:
0d:53:c6:ad:dc:eb:14:ed:6f:a3:35:90:b3:26:99:
77:68:90:61:d7:d7:ec:fb:2d:4a:13:b2:02:3d:2c:
a1:dd:bc:56:4a:d1:ec:b3:fc:14:fb:55:3d:08:65:
d9:4c:47:09:f8:a1:df:e4:8a:37:92:4b:93:15:c0:
37:6f:64:43:13:5d:04:23:26:d9:1a:93:02:f1:1e:
70:e7:f6:f3:b9:ef:8b:ef:15:85:3f:04:af:d5:bc:
25:51:70:6b:94:64:d9:36:09:2a:f3:c7:11:e7:d5:
b5:7d:f6:33:74:06:ce:68:eb:f9:11:6b:6c:2c:30:
f3:a7:89:f4:be:cb:a8:9c:3e:7e:bb:1b:2a:76:55:
18:08:15:95:29:96:83:ae:dd:cb:ae:ba:1f:b1:3e:
11:ad:2d:46:c0:d4:70:ce:8f:e4:bd:17:24:fa:6d:
7a:5f:7e:65:5a:65:50:7d:41:f1:dc:98:15:e7:72:
5f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F6:A9:0F:1F:58:4E:8C:37:39:EF:09:B4:7C:02:06:4D:31:39:41
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4fapDx9YTow3Oe8JtHwCBk0xOUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:69:78:a7:90:9f:ea:42:8b:ea:92:fb:a8:24:0e:5d:cb:1b:
17:e2:94:33:af:16:56:0f:2c:9c:94:a7:af:08:82:28:19:ee:
a9:8b:2f:9f:8a:b0:8c:f9:88:82:58:7c:6b:58:8c:6a:bd:29:
fd:d6:08:37:f5:66:90:61:44:0c:88:30:2c:c4:85:93:ca:0f:
cc:9b:a4:32:8a:38:4a:d4:56:b0:28:b1:eb:ed:9b:f7:bc:cd:
3c:eb:e4:67:1a:8a:28:2e:f2:90:a5:c8:4a:86:ee:5c:25:df:
b2:6c:13:ad:ca:5d:b5:d5:62:c5:b9:d6:88:18:0d:84:cb:c9:
d6:57:5b:a7:3c:5e:f2:3f:f6:0e:bc:67:37:7e:4f:1f:90:a9:
96:ec:fd:c6:88:a6:ae:09:47:ae:c1:b6:cc:46:02:8e:95:30:
52:91:68:de:c5:ef:71:79:7a:19:48:e8:e0:84:fc:3f:65:ee:
68:cc:93:14:a8:1e:9e:48:ee:7e:7c:a3:85:0f:3e:5e:d1:4b:
a2:6e:89:b7:6f:01:54:b2:0e:e2:9d:c5:71:ca:89:19:d7:ac:
5a:8a:0e:a6:d9:b8:63:ed:3c:4d:a7:b5:7c:77:ba:16:20:43:
da:59:5e:17:ef:a4:d2:1f:55:6f:e5:23:8e:8b:d1:a3:3d:63:
1a:00:97:26
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdEr1gp1WGrjYONNAmLfb2GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDAzMDExNTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWY2YTkwZjFmNTg0ZThjMzczOWVmMDliNDdjMDIwNjRkMzEzOTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvTtpogDm/50Iraj3zqvHBpOJEL/
iFMDc0IZ50mONpp9cgOhCDfD2gV6mzkIAJJfIc/AKaDOmObsYEi8+GSCWPCKV0dO
tNwhdv4NU8at3OsU7W+jNZCzJpl3aJBh19fs+y1KE7ICPSyh3bxWStHss/wU+1U9
CGXZTEcJ+KHf5Io3kkuTFcA3b2RDE10EIybZGpMC8R5w5/bzue+L7xWFPwSv1bwl
UXBrlGTZNgkq88cR59W1ffYzdAbOaOv5EWtsLDDzp4n0vsuonD5+uxsqdlUYCBWV
KZaDrt3LrrofsT4RrS1GwNRwzo/kvRck+m16X35lWmVQfUHx3JgV53JfVwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOH2qQ8fWE6MNznvCbR8AgZNMTlBMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNGZhcER4OVlUb3czT2U4SnRId0NCazB4T1VFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHtpeKeQn+pCi+qS+6gk
Dl3LGxfilDOvFlYPLJyUp68IgigZ7qmLL5+KsIz5iIJYfGtYjGq9Kf3WCDf1ZpBh
RAyIMCzEhZPKD8ybpDKKOErUVrAosevtm/e8zTzr5Gcaiigu8pClyEqG7lwl37Js
E63KXbXVYsW51ogYDYTLydZXW6c8XvI/9g68Zzd+Tx+QqZbs/caIpq4JR67BtsxG
Ao6VMFKRaN7F73F5ehlI6OCE/D9l7mjMkxSoHp5I7n58o4UPPl7RS6JuibdvAVSy
DuKdxXHKiRnXrFqKDqbZuGPtPE2ntXx3uhYgQ9pZXhfvpNIfVW/lI46L0aM9YxoA
lyY=
-----END CERTIFICATE-----
Generated at Fri May 2 07:44:59 2025 by rpki-client