Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/566GSXgHx8ypAbD26TazqIobgFM.roa
File: 566GSXgHx8ypAbD26TazqIobgFM.roa (raw, json)
Hash identifier: fbmHt9SLjQWXGQ/wws1SEzDGv5JifLYZVpPjRUojRng=
Subject key identifier: E7:AE:86:49:78:07:C7:CC:A9:01:B0:F6:E9:36:B3:A8:8A:1B:80:53
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01876BB7380D943BBFEFD4E59414C8C0819F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/566GSXgHx8ypAbD26TazqIobgFM.roa
Signing time: Mon 10 Apr 2023 15:09:42 +0000
ROA not before: Mon 10 Apr 2023 15:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6b:b7:38:0d:94:3b:bf:ef:d4:e5:94:14:c8:c0:81:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 10 15:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7ae86497807c7cca901b0f6e936b3a88a1b8053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e1:00:22:e4:4b:85:be:76:d1:5f:92:eb:a5:
f6:91:5a:d0:0b:db:97:82:ac:c2:98:19:87:5e:99:
f6:7e:b4:17:27:56:86:d7:e6:c1:3b:a1:f7:bf:ac:
8f:af:3b:ff:75:d9:c5:7d:3d:9c:d2:f2:0a:5e:0f:
be:83:a0:bf:75:cf:71:e2:59:6a:2c:b3:09:29:de:
f1:7f:45:6d:f5:61:7f:23:d3:04:31:d5:2c:be:f1:
2f:55:80:8f:e4:18:45:4a:79:a3:25:81:ae:53:1b:
c5:fe:f3:c0:8b:5c:82:6e:f8:09:24:d4:06:78:81:
c6:9a:12:94:cf:c9:2e:a9:69:b5:c1:77:90:4c:40:
53:90:75:61:02:1f:86:71:fd:69:ad:45:b4:6c:f1:
16:96:91:6d:88:74:7f:93:98:7e:27:a5:a2:20:18:
58:77:2e:27:ae:f6:20:3f:bb:45:dc:a4:3e:6d:ad:
e4:26:5c:7b:63:b2:20:51:4c:6f:ec:7b:af:1a:7b:
7c:e6:d1:a1:a9:e8:20:2c:7c:06:ea:0b:04:0d:62:
6b:87:be:1b:da:3e:b1:83:32:f5:4f:dd:1b:5a:f1:
d1:94:ac:b5:c3:e4:fc:a3:82:b7:2d:39:00:5d:11:
58:fc:ca:fe:c0:9c:65:0e:fd:ec:86:b6:8c:e7:61:
10:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AE:86:49:78:07:C7:CC:A9:01:B0:F6:E9:36:B3:A8:8A:1B:80:53
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/566GSXgHx8ypAbD26TazqIobgFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:7f:a6:14:24:0f:34:fb:aa:7f:4d:30:15:f6:61:4f:d4:ed:
cd:e7:a6:a5:af:79:ac:91:f4:bf:49:6f:2b:de:c4:6a:3a:78:
53:e9:8a:f0:c3:1e:94:41:0e:25:28:c3:e5:d6:47:8c:61:e0:
27:3f:64:54:c9:ac:1a:2c:7e:be:2c:a7:21:37:51:43:72:32:
30:c6:06:8f:ba:24:65:32:c0:0f:3a:a9:1e:50:68:26:bc:b7:
8e:de:48:b2:da:dc:5c:94:8d:2d:46:5b:fc:9a:e3:35:b4:19:
0d:f5:f8:f0:af:69:38:f6:3e:65:1f:cb:96:e9:07:2e:8d:57:
e0:d0:7f:fc:64:fd:c0:f1:c9:04:19:1e:60:88:f7:0c:d0:f2:
5c:2f:b2:15:85:f3:1f:9c:23:a8:ce:a0:ec:67:2c:62:a7:f2:
ee:d1:d3:93:55:68:cb:83:ee:fd:b3:9e:00:ff:a4:b6:85:e4:
39:78:fb:71:9a:99:4f:bd:3a:50:b1:21:c7:21:1c:34:88:9b:
8b:65:27:c7:7a:83:ff:2b:8c:4d:a1:eb:39:b6:9c:93:e2:f8:
29:58:14:6e:fd:bc:1c:10:b4:c6:76:e4:a8:b1:7c:77:53:cf:
55:e9:b2:da:84:08:25:26:77:6d:87:3e:ad:ec:c7:95:0f:25:
d3:8f:a2:b0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdrtzgNlDu/79TllBTIwIGfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDEwMTUwOTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2FlODY0OTc4MDdjN2NjYTkwMWIwZjZlOTM2YjNhODhhMWI4MDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+EAIuRLhb520V+S66X2kVrQC9uX
gqzCmBmHXpn2frQXJ1aG1+bBO6H3v6yPrzv/ddnFfT2c0vIKXg++g6C/dc9x4llq
LLMJKd7xf0Vt9WF/I9MEMdUsvvEvVYCP5BhFSnmjJYGuUxvF/vPAi1yCbvgJJNQG
eIHGmhKUz8kuqWm1wXeQTEBTkHVhAh+Gcf1prUW0bPEWlpFtiHR/k5h+J6WiIBhY
dy4nrvYgP7tF3KQ+ba3kJlx7Y7IgUUxv7HuvGnt85tGhqeggLHwG6gsEDWJrh74b
2j6xgzL1T90bWvHRlKy1w+T8o4K3LTkAXRFY/Mr+wJxlDv3shraM52EQWQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOeuhkl4B8fMqQGw9uk2s6iKG4BTMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNTY2R1NYZ0h4OHlwQWJEMjZUYXpxSW9iZ0ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADR/phQkDzT7qn9NMBX2
YU/U7c3npqWveayR9L9JbyvexGo6eFPpivDDHpRBDiUow+XWR4xh4Cc/ZFTJrBos
fr4spyE3UUNyMjDGBo+6JGUywA86qR5QaCa8t47eSLLa3FyUjS1GW/ya4zW0GQ31
+PCvaTj2PmUfy5bpBy6NV+DQf/xk/cDxyQQZHmCI9wzQ8lwvshWF8x+cI6jOoOxn
LGKn8u7R05NVaMuD7v2zngD/pLaF5Dl4+3GamU+9OlCxIcchHDSIm4tlJ8d6g/8r
jE2h6zm2nJPi+ClYFG79vBwQtMZ25KixfHdTz1XpstqECCUmd22HPq3sx5UPJdOP
orA=
-----END CERTIFICATE-----
Generated at Thu May 1 04:50:57 2025 by rpki-client