Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5nJ3JzqRYNAHcFkRK0rCcQcTL3I.roa
File: 5nJ3JzqRYNAHcFkRK0rCcQcTL3I.roa (raw, json)
Hash identifier: xey9rxyL695381WhrsxA7IRitG+NgUwX0+1Ob/XRsv8=
Subject key identifier: E6:72:77:27:3A:91:60:D0:07:70:59:11:2B:4A:C2:71:07:13:2F:72
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01896546E4324E55C09BD60DE72354E257A4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5nJ3JzqRYNAHcFkRK0rCcQcTL3I.roa
Signing time: Mon 17 Jul 2023 19:14:52 +0000
ROA not before: Mon 17 Jul 2023 19:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:46:e4:32:4e:55:c0:9b:d6:0d:e7:23:54:e2:57:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 17 19:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e67277273a9160d0077059112b4ac27107132f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a6:ac:7e:51:ab:21:7b:17:9b:5d:c8:9f:ef:
61:e8:d9:d0:7c:8e:7f:f3:1d:27:40:89:46:07:28:
bc:38:64:21:f2:09:22:86:fa:9e:df:56:92:36:39:
13:92:d3:1c:82:7f:25:f4:62:68:9c:be:ec:75:a6:
38:e0:3b:aa:16:75:02:41:d7:30:fa:ca:72:4c:16:
f0:15:25:36:da:9b:ce:28:70:2d:3b:31:cf:55:f8:
cd:31:09:92:99:dc:fa:10:c0:f6:19:99:d7:3d:1d:
41:6f:77:3a:75:3b:f7:33:46:2a:53:c3:55:1b:0c:
f8:d1:96:94:17:44:78:c5:f2:42:af:2d:bf:b9:d5:
3a:78:f1:21:5e:c3:72:a2:03:f5:66:3e:8a:da:88:
b1:91:8e:3e:44:eb:5f:f4:24:ab:7b:1e:e6:f3:4b:
4c:5a:d5:2a:2d:f8:36:b6:cb:fa:10:13:b2:41:6b:
74:d8:9c:52:25:00:57:20:65:2e:3f:aa:ee:33:f4:
63:d5:fc:74:5f:3d:39:55:34:e7:77:54:e0:5e:aa:
a6:e8:27:59:5b:b6:f8:0f:aa:e7:88:37:77:be:1c:
53:18:32:36:56:cf:d9:9c:e9:a5:c7:c4:ce:28:de:
74:a1:9e:b8:89:19:06:d9:a7:54:ac:8b:ed:34:dd:
53:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:72:77:27:3A:91:60:D0:07:70:59:11:2B:4A:C2:71:07:13:2F:72
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5nJ3JzqRYNAHcFkRK0rCcQcTL3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:ea:5e:d5:3b:d3:51:cc:3f:c2:67:d3:83:e2:7a:78:a2:26:
e2:44:a6:e0:37:b7:3b:6f:c5:f3:c5:3c:55:4e:b2:21:dd:94:
d7:48:7a:64:c1:ec:23:46:e6:68:4d:60:11:3b:a4:54:d1:0b:
aa:56:d6:62:9d:11:31:48:af:25:70:17:ad:ba:c2:7e:4d:d2:
6a:7c:46:15:dd:55:4f:40:cf:54:36:5a:ee:3d:d9:77:60:e9:
c8:a4:47:8c:20:96:e8:44:6d:81:48:d8:20:cf:d9:b3:49:81:
a3:2b:2e:c8:01:a5:e7:d4:0f:75:88:ab:1b:7c:ad:04:63:2d:
42:50:06:e2:10:73:4a:9c:12:d5:30:77:71:01:74:24:8e:92:
c0:5b:ca:62:4f:b2:6d:5f:2d:09:24:b9:b5:26:e1:a4:dc:43:
60:04:3e:3f:70:8f:44:5d:25:02:a0:54:11:cc:95:f2:d0:8d:
b7:4b:ea:96:b2:8f:8d:e2:aa:d7:99:1c:96:b6:cd:0b:cd:50:
d4:af:03:f9:1c:6b:d2:70:4f:40:5e:6b:df:1e:41:3c:7d:88:
db:84:23:cf:da:0c:bc:6e:15:40:b8:da:73:7e:68:b2:1f:41:
0a:78:19:76:a1:fc:dd:39:e7:a7:04:5e:d3:e8:df:84:62:3f:
e0:01:22:f9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYllRuQyTlXAm9YN5yNU4lekMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzE3MTkxNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjcyNzcyNzNhOTE2MGQwMDc3MDU5MTEyYjRhYzI3MTA3MTMyZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKasflGrIXsXm13In+9h6NnQfI5/
8x0nQIlGByi8OGQh8gkihvqe31aSNjkTktMcgn8l9GJonL7sdaY44DuqFnUCQdcw
+spyTBbwFSU22pvOKHAtOzHPVfjNMQmSmdz6EMD2GZnXPR1Bb3c6dTv3M0YqU8NV
Gwz40ZaUF0R4xfJCry2/udU6ePEhXsNyogP1Zj6K2oixkY4+ROtf9CSrex7m80tM
WtUqLfg2tsv6EBOyQWt02JxSJQBXIGUuP6ruM/Rj1fx0Xz05VTTnd1TgXqqm6CdZ
W7b4D6rniDd3vhxTGDI2Vs/ZnOmlx8TOKN50oZ64iRkG2adUrIvtNN1T6QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOZydyc6kWDQB3BZEStKwnEHEy9yMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNW5KM0p6cVJZTkFIY0ZrUkswckNjUWNUTDNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABfqXtU701HMP8Jn04Pi
eniiJuJEpuA3tztvxfPFPFVOsiHdlNdIemTB7CNG5mhNYBE7pFTRC6pW1mKdETFI
ryVwF626wn5N0mp8RhXdVU9Az1Q2Wu492Xdg6cikR4wgluhEbYFI2CDP2bNJgaMr
LsgBpefUD3WIqxt8rQRjLUJQBuIQc0qcEtUwd3EBdCSOksBbymJPsm1fLQkkubUm
4aTcQ2AEPj9wj0RdJQKgVBHMlfLQjbdL6payj43iqteZHJa2zQvNUNSvA/kca9Jw
T0Bea98eQTx9iNuEI8/aDLxuFUC42nN+aLIfQQp4GXah/N0556cEXtPo34RiP+AB
Ivk=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:19 2025 by rpki-client