Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4jR-LFVpOp4ejw5qaSnDvmM2FDk.roa
File: 4jR-LFVpOp4ejw5qaSnDvmM2FDk.roa (raw, json)
Hash identifier: PQ2WaLlRYq3ROATGlvWx9/mQtFKCUwbJ6Qo5GAjfKUA=
Subject key identifier: E2:34:7E:2C:55:69:3A:9E:1E:8F:0E:6A:69:29:C3:BE:63:36:14:39
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A24276F7557E0299564341C64FEFB49A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4jR-LFVpOp4ejw5qaSnDvmM2FDk.roa
Signing time: Thu 02 Mar 2023 12:18:30 +0000
ROA not before: Thu 02 Mar 2023 12:18:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a2:42:76:f7:55:7e:02:99:56:43:41:c6:4f:ef:b4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 2 12:18:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2347e2c55693a9e1e8f0e6a6929c3be63361439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ac:90:5b:d2:8d:49:40:d4:45:14:cb:d0:69:
8f:27:95:90:1d:06:2f:4f:d6:8b:19:22:2c:2a:f1:
83:9b:58:91:66:56:10:50:35:3a:1e:34:0d:d9:f4:
ba:8c:45:3e:dd:69:72:b0:04:c0:09:6f:5b:12:8b:
fd:20:f8:5a:02:3f:e4:7d:d3:5e:d3:a7:8d:67:f4:
c6:a7:e1:dd:8c:29:f2:97:b8:2f:c0:c7:f1:b3:61:
26:76:be:02:34:11:a4:67:90:db:aa:80:cc:52:6c:
5e:9c:80:64:a9:81:c1:b8:ad:c0:73:74:88:f3:8f:
0b:3c:c8:4c:e1:7e:18:01:78:54:b7:da:30:ab:85:
38:8d:02:9f:35:ef:ec:ea:c2:49:5f:a1:66:72:48:
1f:67:2f:79:bf:b3:29:0f:a3:22:05:45:8f:04:e8:
04:28:90:03:6b:73:e5:54:3a:86:74:b2:97:b5:bd:
59:24:d9:df:ce:75:16:d6:ac:d5:b3:d9:e6:3a:d9:
ca:6b:f7:a9:fb:65:13:8f:bd:6c:d2:ae:d3:b9:8e:
ba:35:24:ce:fa:80:07:15:97:ce:93:48:67:91:ef:
f2:2f:35:c9:3a:1d:c0:16:47:f3:15:38:c5:11:cc:
cd:e8:e5:a0:a7:0d:ef:7a:77:e4:83:49:4a:28:3a:
32:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:34:7E:2C:55:69:3A:9E:1E:8F:0E:6A:69:29:C3:BE:63:36:14:39
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4jR-LFVpOp4ejw5qaSnDvmM2FDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:b9:c4:20:42:65:d1:3a:d1:ec:84:2d:85:b4:3e:0f:25:d9:
bc:ee:97:e0:f5:a2:f8:10:7d:a0:1c:76:28:83:79:6b:30:4b:
2f:17:94:20:50:c5:96:78:7c:48:ea:2d:b6:79:3a:b4:6b:8c:
36:0d:a8:31:a1:0d:d4:1f:c5:ef:44:db:f7:13:44:80:10:b3:
3a:4c:31:5f:a8:ba:5f:8b:df:ad:60:4f:ec:83:e5:89:a1:f8:
d7:a6:7b:1a:30:8c:82:dd:02:e9:d7:a6:bb:f5:21:56:59:92:
b2:32:35:2e:5b:9c:f5:bd:f6:37:49:4f:d1:79:da:72:be:5e:
1d:54:0e:7b:fd:bc:d7:ce:20:85:9f:95:c3:11:bb:ff:46:22:
c5:73:bd:8e:72:db:9d:e6:2c:d2:cb:2d:6d:cb:2d:0c:2a:a5:
39:f1:b5:a3:3b:ac:58:30:ce:66:3e:21:21:96:96:7c:e1:bd:
11:94:bb:c3:88:9f:66:f7:d3:e6:16:38:79:c3:9c:1d:76:d5:
3f:83:bd:da:99:0e:bf:3d:c6:b4:2e:7c:02:ce:22:ef:ab:47:
27:d1:2f:0e:35:a9:a5:4c:66:70:35:03:ce:bd:c4:82:04:10:
47:93:11:65:b3:b9:1c:88:78:32:62:f8:b4:e5:e6:a3:22:2e:
0c:f2:5c:0e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaiQnb3VX4CmVZDQcZP77SaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzAyMTIxODMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjM0N2UyYzU1NjkzYTllMWU4ZjBlNmE2OTI5YzNiZTYzMzYxNDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlayQW9KNSUDURRTL0GmPJ5WQHQYv
T9aLGSIsKvGDm1iRZlYQUDU6HjQN2fS6jEU+3WlysATACW9bEov9IPhaAj/kfdNe
06eNZ/TGp+HdjCnyl7gvwMfxs2Emdr4CNBGkZ5DbqoDMUmxenIBkqYHBuK3Ac3SI
848LPMhM4X4YAXhUt9owq4U4jQKfNe/s6sJJX6FmckgfZy95v7MpD6MiBUWPBOgE
KJADa3PlVDqGdLKXtb1ZJNnfznUW1qzVs9nmOtnKa/ep+2UTj71s0q7TuY66NSTO
+oAHFZfOk0hnke/yLzXJOh3AFkfzFTjFEczN6OWgpw3venfkg0lKKDoyaQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOI0fixVaTqeHo8Oamkpw75jNhQ5MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNGpSLUxGVnBPcDRlanc1cWFTbkR2bU0yRkRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAI+5xCBCZdE60eyELYW0
Pg8l2bzul+D1ovgQfaAcdiiDeWswSy8XlCBQxZZ4fEjqLbZ5OrRrjDYNqDGhDdQf
xe9E2/cTRIAQszpMMV+oul+L361gT+yD5Ymh+NemexowjILdAunXprv1IVZZkrIy
NS5bnPW99jdJT9F52nK+Xh1UDnv9vNfOIIWflcMRu/9GIsVzvY5y253mLNLLLW3L
LQwqpTnxtaM7rFgwzmY+ISGWlnzhvRGUu8OIn2b30+YWOHnDnB121T+DvdqZDr89
xrQufALOIu+rRyfRLw41qaVMZnA1A869xIIEEEeTEWWzuRyIeDJi+LTl5qMiLgzy
XA4=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:35:27 2025 by rpki-client