Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4zoLJUXBbTwSIM49kPc-Q9t7a7M.roa
File: 4zoLJUXBbTwSIM49kPc-Q9t7a7M.roa (raw, json)
Hash identifier: xCQPfyhhELuX6xusb4eF2Sxx2i7UWpELz7gOoU+kWAI=
Subject key identifier: E3:3A:0B:25:45:C1:6D:3C:12:20:CE:3D:90:F7:3E:43:DB:7B:6B:B3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188A3477FF173766A564685B1AC92BB672A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4zoLJUXBbTwSIM49kPc-Q9t7a7M.roa
Signing time: Sat 10 Jun 2023 03:09:11 +0000
ROA not before: Sat 10 Jun 2023 03:09:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a3:47:7f:f1:73:76:6a:56:46:85:b1:ac:92:bb:67:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 10 03:09:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e33a0b2545c16d3c1220ce3d90f73e43db7b6bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c6:43:f6:39:5c:08:33:36:13:31:94:c1:eb:
7a:55:cd:30:97:81:37:f8:00:7a:ce:2d:a3:da:10:
4c:d2:fb:bb:1a:e9:05:4a:e6:66:a9:17:e3:d5:73:
d9:c3:62:ac:e4:92:bb:2e:c8:5e:94:a5:e8:81:84:
43:68:24:e0:e2:7d:74:ac:d3:f0:ba:03:08:d8:76:
b4:34:00:e6:89:66:92:35:00:f8:35:29:ca:61:e0:
ab:48:8b:c3:5d:e2:3d:08:ec:58:00:75:be:a8:ba:
db:f7:3e:c1:00:92:16:20:ff:37:f7:a7:bc:40:6f:
a3:7a:d3:a1:0c:a0:5c:6d:09:56:af:c1:74:73:37:
00:36:8a:fa:12:79:96:72:ba:5e:39:13:4c:c6:16:
d9:7e:3d:32:39:ce:fd:4a:bd:71:a9:e6:78:9d:cc:
04:f3:28:5e:df:9e:9e:2f:58:9b:9d:dd:41:f7:55:
6e:f2:d2:30:3f:0b:97:ca:93:18:3a:97:8c:d9:3c:
e4:c3:a5:6e:c7:0b:c1:44:7a:8d:81:77:67:c0:ea:
06:46:a7:c5:8b:2e:04:87:d2:04:23:68:cf:2c:25:
37:6e:d8:70:44:13:7e:35:c0:98:02:88:49:6c:22:
5c:c7:ba:3a:3e:4a:7d:4f:5d:37:6e:f2:59:3a:e6:
f9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3A:0B:25:45:C1:6D:3C:12:20:CE:3D:90:F7:3E:43:DB:7B:6B:B3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4zoLJUXBbTwSIM49kPc-Q9t7a7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:82:57:a3:8c:e1:8c:17:79:39:61:b9:73:fd:25:ab:9c:1a:
f8:e4:af:ab:e1:c8:fe:5b:1b:da:d1:d3:df:27:36:3e:1b:33:
37:09:d3:af:1c:9c:ea:ac:11:06:10:24:d4:85:45:aa:c6:21:
18:38:12:86:42:90:1f:68:91:87:d5:98:02:4e:80:c6:f2:c1:
60:8b:cc:65:96:52:53:1e:a6:2d:da:1d:4b:d0:6e:97:66:7b:
a2:34:3c:4f:89:fb:5a:38:08:28:94:87:54:21:84:56:1b:dd:
3c:18:01:54:92:3c:51:30:08:b4:a3:65:46:b3:47:a4:35:a4:
6f:d6:7d:60:59:d1:f5:b8:47:55:7f:06:00:f0:b8:45:c6:9e:
4c:77:b5:a0:f2:22:39:17:1e:3d:54:92:43:f1:da:42:f5:e3:
38:2a:06:1f:f7:43:b1:02:fb:db:b6:b5:8a:74:d2:db:f4:76:
62:14:cd:e4:a2:d0:d6:ca:d7:e8:f5:42:65:a3:72:e2:0e:bc:
ff:0f:d1:f3:d6:95:7a:26:ef:1c:7e:15:e3:4e:14:26:24:f5:
70:b7:8e:55:f6:da:d1:21:6b:ac:85:f7:d0:8a:e1:6d:43:2a:
11:3f:b7:3c:6f:68:2f:3a:0c:7b:77:df:49:f6:c1:c0:06:8f:
c3:49:a7:cc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYijR3/xc3ZqVkaFsaySu2cqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjEwMDMwOTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzNhMGIyNTQ1YzE2ZDNjMTIyMGNlM2Q5MGY3M2U0M2RiN2I2YmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMZD9jlcCDM2EzGUwet6Vc0wl4E3
+AB6zi2j2hBM0vu7GukFSuZmqRfj1XPZw2Ks5JK7LshelKXogYRDaCTg4n10rNPw
ugMI2Ha0NADmiWaSNQD4NSnKYeCrSIvDXeI9COxYAHW+qLrb9z7BAJIWIP8396e8
QG+jetOhDKBcbQlWr8F0czcANor6EnmWcrpeORNMxhbZfj0yOc79Sr1xqeZ4ncwE
8yhe356eL1ibnd1B91Vu8tIwPwuXypMYOpeM2Tzkw6VuxwvBRHqNgXdnwOoGRqfF
iy4Eh9IEI2jPLCU3bthwRBN+NcCYAohJbCJcx7o6Pkp9T103bvJZOub5hwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOM6CyVFwW08EiDOPZD3PkPbe2uzMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNHpvTEpVWEJiVHdTSU00OWtQYy1ROXQ3YTdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFGCV6OM4YwXeTlhuXP9
JaucGvjkr6vhyP5bG9rR098nNj4bMzcJ068cnOqsEQYQJNSFRarGIRg4EoZCkB9o
kYfVmAJOgMbywWCLzGWWUlMepi3aHUvQbpdme6I0PE+J+1o4CCiUh1QhhFYb3TwY
AVSSPFEwCLSjZUazR6Q1pG/WfWBZ0fW4R1V/BgDwuEXGnkx3taDyIjkXHj1UkkPx
2kL14zgqBh/3Q7EC+9u2tYp00tv0dmIUzeSi0NbK1+j1QmWjcuIOvP8P0fPWlXom
7xx+FeNOFCYk9XC3jlX22tEha6yF99CK4W1DKhE/tzxvaC86DHt330n2wcAGj8NJ
p8w=
-----END CERTIFICATE-----
Generated at Thu May 1 02:51:55 2025 by rpki-client