Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5NjLDVJaiPM0zL1Hp6d-IOLQo4o.roa
File: 5NjLDVJaiPM0zL1Hp6d-IOLQo4o.roa (raw, json)
Hash identifier: CObpBhuAMywbTQNOFasiNUBz06Hc42Hb6J8KftysPt8=
Subject key identifier: E4:D8:CB:0D:52:5A:88:F3:34:CC:BD:47:A7:A7:7E:20:E2:D0:A3:8A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018956E3B7B934F79FD9FE279B3BD37C3361
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5NjLDVJaiPM0zL1Hp6d-IOLQo4o.roa
Signing time: Sat 15 Jul 2023 00:11:51 +0000
ROA not before: Sat 15 Jul 2023 00:11:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:56:e3:b7:b9:34:f7:9f:d9:fe:27:9b:3b:d3:7c:33:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 15 00:11:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4d8cb0d525a88f334ccbd47a7a77e20e2d0a38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e4:58:88:50:72:99:55:30:2d:4b:22:d9:f1:
17:ab:4c:bf:00:67:6e:5e:fe:8b:0b:cb:1f:77:be:
c2:1d:08:b4:58:6e:b5:94:dc:e4:da:5e:f0:63:ed:
2a:e2:14:d9:77:79:e8:df:35:31:de:c6:71:dd:f0:
0c:62:c6:71:3d:4b:b9:5d:44:55:ee:fd:2a:60:bd:
6a:93:c9:63:c7:f1:5c:f3:00:d5:fa:54:39:55:a9:
9c:c9:1c:07:72:7c:24:48:2b:d9:0f:1a:30:98:3a:
13:20:68:9f:d1:cf:49:7f:9a:24:c7:94:2c:b4:ee:
6f:da:48:10:81:af:24:7f:e4:3e:a8:46:33:61:cf:
d2:b0:c2:3f:0f:59:d4:cc:50:eb:82:70:75:70:0a:
9d:0b:68:db:75:4b:a5:ec:00:d1:06:bd:65:cf:9b:
d1:86:19:c8:bb:1a:f1:70:3a:7d:74:59:72:2d:b3:
40:db:0e:1b:ff:e1:10:2d:5d:1c:fd:94:72:1b:cf:
33:57:d9:4b:aa:a3:06:2d:d0:ed:15:20:6a:74:3d:
bc:9c:5a:84:33:32:ce:d6:bf:65:75:8b:91:43:79:
1f:38:ee:0e:d0:6e:b5:0a:2c:50:b2:ee:bd:9b:72:
6c:d6:23:87:d1:af:8c:86:da:1a:57:c8:a0:b0:cf:
23:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D8:CB:0D:52:5A:88:F3:34:CC:BD:47:A7:A7:7E:20:E2:D0:A3:8A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5NjLDVJaiPM0zL1Hp6d-IOLQo4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:bc:20:21:5e:0b:d2:6b:77:6d:70:43:62:54:a7:b1:21:3b:
1e:af:c8:80:5d:35:11:49:a0:c8:e5:b3:82:ae:95:9b:65:0c:
78:b8:96:e8:3b:1e:c5:a8:92:50:a4:11:1f:0b:24:9b:ff:11:
cf:1e:6b:df:8d:44:77:1b:ce:2b:45:47:b2:a9:3c:1c:b0:b5:
dc:f7:e5:34:5d:c6:56:04:df:3d:fd:dc:b4:2f:e8:80:56:a9:
46:95:d9:79:8e:d2:4b:2b:43:c8:69:fb:c1:76:c7:71:28:c0:
c2:c0:29:7b:bd:a3:3a:59:ce:1c:07:97:f3:70:1b:8d:10:1b:
ec:d3:52:dd:5d:33:e4:4a:ce:e9:fb:cb:84:b9:1a:2f:80:e3:
94:b8:e7:77:34:f6:89:13:b8:d3:9b:fa:12:fc:74:c8:58:d3:
6f:e3:ab:d6:27:69:ef:5a:95:c4:56:9d:fa:2b:41:00:44:33:
0d:b8:38:42:af:09:39:56:10:a4:3f:80:ae:d1:6e:73:f3:77:
82:8e:36:6d:50:bf:e9:1d:99:fc:9e:78:78:c2:e7:3c:5e:53:
fe:40:6b:e5:75:89:34:2a:0a:c1:cc:94:51:75:95:77:82:fe:
44:77:74:f4:4f:e7:3c:4d:16:25:10:f9:7b:a4:46:13:14:a5:
6f:20:fc:08
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlW47e5NPef2f4nmzvTfDNhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzE1MDAxMTUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGQ4Y2IwZDUyNWE4OGYzMzRjY2JkNDdhN2E3N2UyMGUyZDBhMzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoORYiFBymVUwLUsi2fEXq0y/AGdu
Xv6LC8sfd77CHQi0WG61lNzk2l7wY+0q4hTZd3no3zUx3sZx3fAMYsZxPUu5XURV
7v0qYL1qk8ljx/Fc8wDV+lQ5VamcyRwHcnwkSCvZDxowmDoTIGif0c9Jf5okx5Qs
tO5v2kgQga8kf+Q+qEYzYc/SsMI/D1nUzFDrgnB1cAqdC2jbdUul7ADRBr1lz5vR
hhnIuxrxcDp9dFlyLbNA2w4b/+EQLV0c/ZRyG88zV9lLqqMGLdDtFSBqdD28nFqE
MzLO1r9ldYuRQ3kfOO4O0G61CixQsu69m3Js1iOH0a+MhtoaV8igsM8jjQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOTYyw1SWojzNMy9R6enfiDi0KOKMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNU5qTERWSmFpUE0wekwxSHA2ZC1JT0xRbzRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACy8ICFeC9Jrd21wQ2JU
p7EhOx6vyIBdNRFJoMjls4KulZtlDHi4lug7HsWoklCkER8LJJv/Ec8ea9+NRHcb
zitFR7KpPBywtdz35TRdxlYE3z393LQv6IBWqUaV2XmO0ksrQ8hp+8F2x3EowMLA
KXu9ozpZzhwHl/NwG40QG+zTUt1dM+RKzun7y4S5Gi+A45S453c09okTuNOb+hL8
dMhY02/jq9Ynae9alcRWnforQQBEMw24OEKvCTlWEKQ/gK7RbnPzd4KONm1Qv+kd
mfyeeHjC5zxeU/5Aa+V1iTQqCsHMlFF1lXeC/kR3dPRP5zxNFiUQ+XukRhMUpW8g
/Ag=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:41:38 2025 by rpki-client