Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4jaobwlaOWfuoaAnEDRcsy6xx6k.roa
File: 4jaobwlaOWfuoaAnEDRcsy6xx6k.roa (raw, json)
Hash identifier: m/USHYgUSNB2n03qKl27E4Fte8Qr0Gb3SjuDeBhOjUg=
Subject key identifier: E2:36:A8:6F:09:5A:39:67:EE:A1:A0:27:10:34:5C:B3:2E:B1:C7:A9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018760C5B5CE94D2C7AAAC5B51FDB23D3875
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4jaobwlaOWfuoaAnEDRcsy6xx6k.roa
Signing time: Sat 08 Apr 2023 12:09:42 +0000
ROA not before: Sat 08 Apr 2023 12:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:60:c5:b5:ce:94:d2:c7:aa:ac:5b:51:fd:b2:3d:38:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 8 12:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e236a86f095a3967eea1a02710345cb32eb1c7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:72:d6:89:ca:fd:6d:38:72:46:f5:db:2e:cb:
f4:50:70:1f:96:f3:f2:68:bb:8e:a6:78:21:3a:a6:
fe:41:e0:c5:66:c6:32:b2:f5:f1:42:5d:95:82:ff:
b9:a8:fc:8d:c9:2d:63:5d:88:0f:58:2a:0b:51:b5:
96:ec:86:6c:16:2c:57:a1:fe:21:d8:75:f0:95:53:
a3:e7:dd:6d:58:5a:8c:7b:64:09:b0:6b:39:9c:c9:
90:17:44:bc:d3:b5:48:66:e6:ac:b5:86:4e:3a:94:
23:da:73:6e:80:e2:17:1f:6f:52:f0:03:a3:43:ff:
12:35:00:9f:7f:b9:65:e3:9d:b1:c5:7a:d4:da:63:
5f:ad:b5:e2:65:1d:c8:94:c9:a1:0f:75:7a:66:89:
dc:4e:cf:2b:0b:cc:67:52:e2:8c:92:a4:44:37:98:
8f:25:b5:ce:42:92:9b:07:dc:d9:e8:3f:ac:0a:ba:
e7:ac:90:47:1d:40:ae:99:b0:be:d2:40:9c:7b:c8:
a3:4e:6b:58:a2:6f:c2:1a:82:ba:98:61:81:eb:07:
ab:ea:37:47:28:3b:ef:ca:19:e6:49:7c:e1:c6:fe:
0a:fd:96:ec:b7:84:fb:25:8c:0d:f8:79:a5:b5:2d:
66:2c:c7:d2:9a:5f:1e:ed:ae:0b:c5:7d:81:5b:53:
4b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:36:A8:6F:09:5A:39:67:EE:A1:A0:27:10:34:5C:B3:2E:B1:C7:A9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4jaobwlaOWfuoaAnEDRcsy6xx6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:c8:2e:4c:08:06:76:d0:08:63:4b:fe:0a:1c:92:e1:53:c4:
51:c7:3b:bf:61:14:e3:21:bc:24:6b:03:c2:d9:02:8d:b8:07:
7c:81:e7:04:a0:94:33:fd:7b:b3:a3:76:84:4b:0d:64:4e:7b:
6c:9b:7d:d0:9f:3f:66:7c:f1:dd:0f:a0:30:dd:95:da:57:49:
13:d2:1f:34:85:44:fd:62:e2:81:a4:fd:4f:4f:96:64:a7:ff:
65:ab:cd:33:6e:9f:0d:24:54:ec:79:23:7c:21:c4:7e:cf:dc:
48:96:e4:75:e4:ee:fc:8f:e2:58:b6:33:64:eb:16:04:97:8a:
bc:58:fc:5d:35:6b:17:08:83:9b:99:0c:13:5c:6d:5f:d0:0d:
63:e9:e4:fa:d3:65:6d:5e:83:86:85:69:77:12:08:ba:12:f0:
2d:0d:37:30:01:9d:2a:da:b1:76:30:ac:16:be:1e:03:1f:ae:
10:bc:a6:c4:e1:eb:63:e3:43:e4:8d:fd:19:de:1d:87:92:ea:
5d:f7:d8:a0:ec:34:04:eb:cf:06:70:d2:ce:1f:90:4e:ac:fc:
a8:1b:fd:21:3c:53:ce:5e:05:ba:72:66:23:e3:d6:e7:bc:4f:
72:03:4e:9f:e8:91:3f:74:cf:e6:9a:e1:c1:39:8b:4a:99:91:
f9:aa:6f:0e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdgxbXOlNLHqqxbUf2yPTh1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDA4MTIwOTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjM2YTg2ZjA5NWEzOTY3ZWVhMWEwMjcxMDM0NWNiMzJlYjFjN2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXLWicr9bThyRvXbLsv0UHAflvPy
aLuOpnghOqb+QeDFZsYysvXxQl2Vgv+5qPyNyS1jXYgPWCoLUbWW7IZsFixXof4h
2HXwlVOj591tWFqMe2QJsGs5nMmQF0S807VIZuastYZOOpQj2nNugOIXH29S8AOj
Q/8SNQCff7ll452xxXrU2mNfrbXiZR3IlMmhD3V6ZoncTs8rC8xnUuKMkqREN5iP
JbXOQpKbB9zZ6D+sCrrnrJBHHUCumbC+0kCce8ijTmtYom/CGoK6mGGB6wer6jdH
KDvvyhnmSXzhxv4K/Zbst4T7JYwN+HmltS1mLMfSml8e7a4LxX2BW1NLcQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOI2qG8JWjln7qGgJxA0XLMuscepMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNGphb2J3bGFPV2Z1b2FBbkVEUmNzeTZ4eDZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGfILkwIBnbQCGNL/goc
kuFTxFHHO79hFOMhvCRrA8LZAo24B3yB5wSglDP9e7OjdoRLDWROe2ybfdCfP2Z8
8d0PoDDdldpXSRPSHzSFRP1i4oGk/U9PlmSn/2WrzTNunw0kVOx5I3whxH7P3EiW
5HXk7vyP4li2M2TrFgSXirxY/F01axcIg5uZDBNcbV/QDWPp5PrTZW1eg4aFaXcS
CLoS8C0NNzABnSrasXYwrBa+HgMfrhC8psTh62PjQ+SN/RneHYeS6l332KDsNATr
zwZw0s4fkE6s/Kgb/SE8U85eBbpyZiPj1ue8T3IDTp/okT90z+aa4cE5i0qZkfmq
bw4=
-----END CERTIFICATE-----
Generated at Sun May 4 09:55:32 2025 by rpki-client