Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/67om8LZZHKG9mq2_H5mfJcD7WUM.roa
File: 67om8LZZHKG9mq2_H5mfJcD7WUM.roa (raw, json)
Hash identifier: INuIfVdeoJLJ4AT2vCtCDm5nOgQ0k9gqHQ5Ci3R8Y7E=
Subject key identifier: EB:BA:26:F0:B6:59:1C:A1:BD:9A:AD:BF:1F:99:9F:25:C0:FB:59:43
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189552D2DDEA3899B0CDE108E8C11019128
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/67om8LZZHKG9mq2_H5mfJcD7WUM.roa
Signing time: Fri 14 Jul 2023 16:12:51 +0000
ROA not before: Fri 14 Jul 2023 16:12:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:55:2d:2d:de:a3:89:9b:0c:de:10:8e:8c:11:01:91:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 14 16:12:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebba26f0b6591ca1bd9aadbf1f999f25c0fb5943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:98:56:31:f7:aa:f0:d1:b7:ec:03:4c:06:83:
51:ad:d9:c1:fc:b6:39:ca:ae:bc:5e:3d:d6:6e:5e:
ff:20:28:6d:e9:dd:95:c9:ec:96:f4:55:b3:7c:3f:
6b:fd:18:52:f7:0c:57:02:85:5e:b2:e5:da:e6:9c:
81:41:98:a5:be:40:5e:9a:6d:80:86:8e:09:07:91:
3a:99:44:96:28:35:70:d7:54:d8:63:fd:48:76:42:
f4:f5:fc:ff:ff:12:19:7e:22:ee:df:f8:8c:14:15:
cb:38:bb:d4:1f:c0:15:9a:04:de:67:09:08:12:22:
2b:2a:ae:c3:a6:e4:55:fa:1b:c0:56:18:b6:e0:7e:
28:54:58:de:3d:11:ef:00:f4:fb:8f:f1:8d:93:15:
03:5a:d0:da:72:15:55:f3:10:df:08:5c:b2:48:9e:
fc:41:5d:17:4a:d0:fc:87:60:cb:72:3a:42:5a:58:
e7:f5:99:dc:16:5d:f9:7f:d6:fd:e1:c3:62:c1:61:
f3:6f:3d:6b:23:95:ca:d0:0d:e8:d3:f0:ed:1b:5c:
e5:e7:a5:92:b4:90:16:d1:d0:f6:69:14:05:97:96:
0d:2d:d9:25:7d:fd:a2:7f:69:76:a9:40:ba:24:b2:
c6:bb:ad:55:45:47:a9:d6:a2:cb:55:49:b9:fb:c3:
e2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BA:26:F0:B6:59:1C:A1:BD:9A:AD:BF:1F:99:9F:25:C0:FB:59:43
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/67om8LZZHKG9mq2_H5mfJcD7WUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:2c:79:0d:5d:46:62:32:cc:4c:dc:18:5a:b3:74:df:de:9b:
ab:a8:0f:2a:6f:6e:1a:1e:21:60:fa:94:b7:4e:29:bb:9a:be:
6e:13:18:a4:04:cb:0a:33:55:2c:05:d7:8a:15:76:d3:31:be:
19:cd:0f:c6:ab:09:a1:31:9d:41:f3:7b:16:da:c8:1c:cb:15:
cd:c6:52:24:56:c0:43:68:ba:02:2d:6e:14:db:8c:90:40:25:
af:da:93:3d:8c:3c:7f:74:ce:8e:2a:54:95:a7:59:58:f0:ed:
e2:c8:f7:c7:7d:fa:14:00:5b:bf:77:c1:b9:43:26:80:64:1a:
56:b0:2a:c0:22:92:6d:79:a2:15:f5:e8:0e:89:52:3f:6f:63:
4a:f8:3c:d6:39:18:d0:9c:f6:de:5c:7d:f9:c1:ef:2c:9d:b1:
d1:28:7c:8e:b2:53:24:53:9b:f4:8c:28:3a:a5:3b:cc:78:22:
20:89:56:ff:e2:ac:20:ea:a9:94:7e:ec:b4:8c:15:ea:33:de:
b6:6f:c0:52:e6:3f:09:98:26:31:80:4c:ed:ef:64:61:46:26:
29:32:58:aa:ce:22:b2:ef:11:17:9a:5e:19:d0:35:42:16:85:
b4:66:c2:1b:00:2a:b4:aa:bf:7e:63:f2:47:18:d9:f7:4a:68:
4c:10:de:06
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlVLS3eo4mbDN4QjowRAZEoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzE0MTYxMjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmJhMjZmMGI2NTkxY2ExYmQ5YWFkYmYxZjk5OWYyNWMwZmI1OTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JhWMfeq8NG37ANMBoNRrdnB/LY5
yq68Xj3Wbl7/ICht6d2VyeyW9FWzfD9r/RhS9wxXAoVesuXa5pyBQZilvkBemm2A
ho4JB5E6mUSWKDVw11TYY/1IdkL09fz//xIZfiLu3/iMFBXLOLvUH8AVmgTeZwkI
EiIrKq7DpuRV+hvAVhi24H4oVFjePRHvAPT7j/GNkxUDWtDachVV8xDfCFyySJ78
QV0XStD8h2DLcjpCWljn9ZncFl35f9b94cNiwWHzbz1rI5XK0A3o0/DtG1zl56WS
tJAW0dD2aRQFl5YNLdklff2if2l2qUC6JLLGu61VRUep1qLLVUm5+8PiEwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOu6JvC2WRyhvZqtvx+ZnyXA+1lDMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNjdvbThMWlpIS0c5bXEyX0g1bWZKY0Q3V1VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABcseQ1dRmIyzEzcGFqz
dN/em6uoDypvbhoeIWD6lLdOKbuavm4TGKQEywozVSwF14oVdtMxvhnND8arCaEx
nUHzexbayBzLFc3GUiRWwENougItbhTbjJBAJa/akz2MPH90zo4qVJWnWVjw7eLI
98d9+hQAW793wblDJoBkGlawKsAikm15ohX16A6JUj9vY0r4PNY5GNCc9t5cffnB
7yydsdEofI6yUyRTm/SMKDqlO8x4IiCJVv/irCDqqZR+7LSMFeoz3rZvwFLmPwmY
JjGATO3vZGFGJikyWKrOIrLvEReaXhnQNUIWhbRmwhsAKrSqv35j8kcY2fdKaEwQ
3gY=
-----END CERTIFICATE-----
Generated at Thu May 1 20:44:35 2025 by rpki-client