Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8fsFRF1ctcGTcnvdWZK3WmWg7iQ.roa
File: 8fsFRF1ctcGTcnvdWZK3WmWg7iQ.roa (raw, json)
Hash identifier: XFxAFDjlbNVZuMDL/qT9EZzYEM/vkh2nh0GTydVrG1Y=
Subject key identifier: F1:FB:05:44:5D:5C:B5:C1:93:72:7B:DD:59:92:B7:5A:65:A0:EE:24
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189503DC26F78A2DEE0803B3D12791997FD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8fsFRF1ctcGTcnvdWZK3WmWg7iQ.roa
Signing time: Thu 13 Jul 2023 17:12:52 +0000
ROA not before: Thu 13 Jul 2023 17:12:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:50:3d:c2:6f:78:a2:de:e0:80:3b:3d:12:79:19:97:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 13 17:12:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1fb05445d5cb5c193727bdd5992b75a65a0ee24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:80:38:7c:a7:48:cc:bf:8e:84:f1:05:e2:5a:
48:70:b5:ac:4a:7e:2b:e8:e6:20:3b:5b:a7:8c:0d:
e5:5c:24:a3:1f:7e:3b:ae:1d:2e:a1:c5:8b:da:ad:
68:4e:4c:99:ca:78:3c:c5:14:f8:bf:99:d0:c5:62:
af:1a:e2:a0:bb:26:78:cf:b6:e5:a3:b7:1f:21:2d:
ea:43:9b:74:c2:17:a1:5a:b7:65:8a:f0:86:de:28:
18:d7:e6:6d:1e:53:71:b4:c1:8c:a8:9f:9d:81:3b:
de:c8:c8:9d:0c:51:22:14:c9:df:00:b0:01:68:63:
9d:7f:9c:35:e7:01:e7:f2:43:1e:ec:06:38:c1:79:
cf:d0:59:be:ee:fc:a3:f5:29:e4:68:66:77:ac:f6:
59:89:f9:dc:56:90:09:f4:0f:d7:72:29:d5:51:e9:
88:e7:b8:2f:1c:5e:79:48:b7:8f:b1:01:f4:af:e2:
2f:60:3d:28:0f:6d:15:08:ff:c2:b8:28:f1:4e:a1:
da:03:59:25:e0:e3:fe:9c:4e:3a:3d:11:46:bb:94:
e2:48:b3:23:0c:31:67:4c:50:fa:5f:3e:6c:80:4c:
c9:7c:c7:cc:81:ad:33:b5:1a:07:46:3d:87:bf:2b:
4f:11:ee:65:18:df:24:c0:ab:7b:f7:d2:b8:b5:6d:
e6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FB:05:44:5D:5C:B5:C1:93:72:7B:DD:59:92:B7:5A:65:A0:EE:24
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8fsFRF1ctcGTcnvdWZK3WmWg7iQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:7a:e4:43:71:df:d7:d2:64:1d:40:2f:08:9e:1b:32:55:75:
ff:2c:50:f7:44:02:39:82:79:f5:8b:f9:f4:4b:3f:a0:d3:de:
f0:86:25:94:49:ac:78:71:81:ee:31:e3:8f:e4:81:0e:6f:b3:
e5:68:39:9e:8e:21:3d:bd:ca:0e:ea:eb:47:3f:17:b8:1d:cc:
cf:11:dd:17:75:18:2c:e9:9c:f9:2c:18:a9:96:5c:a0:d7:ab:
36:da:a6:bb:10:24:2a:dd:94:3b:a4:1e:d4:49:bb:57:10:97:
03:4b:df:06:65:77:72:51:94:c3:23:c7:a0:21:e2:32:73:ac:
11:04:d8:d6:0d:bf:af:de:f3:83:a5:99:a3:05:c2:8d:63:26:
75:d1:ba:3e:ab:4d:13:01:e6:e5:8d:fd:1e:81:9c:5d:44:65:
cf:db:81:de:3c:0f:eb:d9:77:c9:82:4a:ad:d2:4c:b6:16:ab:
f6:6e:23:92:05:e3:d1:65:3a:90:90:8b:48:2b:bd:9e:06:c2:
91:d2:8d:51:4a:7d:f0:a6:bb:82:04:af:d9:c1:7a:dc:06:59:
38:6a:36:f3:f4:77:ed:93:5b:7c:b8:98:9f:67:87:7c:a5:15:
76:29:b4:c6:a1:a0:84:73:6f:bb:1e:80:ac:d1:a8:a0:ab:5d:
6f:a8:ce:63
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlQPcJveKLe4IA7PRJ5GZf9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzEzMTcxMjUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWZiMDU0NDVkNWNiNWMxOTM3MjdiZGQ1OTkyYjc1YTY1YTBlZTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYA4fKdIzL+OhPEF4lpIcLWsSn4r
6OYgO1unjA3lXCSjH347rh0uocWL2q1oTkyZyng8xRT4v5nQxWKvGuKguyZ4z7bl
o7cfIS3qQ5t0whehWrdlivCG3igY1+ZtHlNxtMGMqJ+dgTveyMidDFEiFMnfALAB
aGOdf5w15wHn8kMe7AY4wXnP0Fm+7vyj9SnkaGZ3rPZZifncVpAJ9A/XcinVUemI
57gvHF55SLePsQH0r+IvYD0oD20VCP/CuCjxTqHaA1kl4OP+nE46PRFGu5TiSLMj
DDFnTFD6Xz5sgEzJfMfMga0ztRoHRj2HvytPEe5lGN8kwKt799K4tW3m4QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPH7BURdXLXBk3J73VmSt1ploO4kMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOGZzRlJGMWN0Y0dUY252ZFdaSzNXbVdnN2lRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABV65ENx39fSZB1ALwie
GzJVdf8sUPdEAjmCefWL+fRLP6DT3vCGJZRJrHhxge4x44/kgQ5vs+VoOZ6OIT29
yg7q60c/F7gdzM8R3Rd1GCzpnPksGKmWXKDXqzbaprsQJCrdlDukHtRJu1cQlwNL
3wZld3JRlMMjx6Ah4jJzrBEE2NYNv6/e84OlmaMFwo1jJnXRuj6rTRMB5uWN/R6B
nF1EZc/bgd48D+vZd8mCSq3STLYWq/ZuI5IF49FlOpCQi0grvZ4GwpHSjVFKffCm
u4IEr9nBetwGWThqNvP0d+2TW3y4mJ9nh3ylFXYptMahoIRzb7segKzRqKCrXW+o
zmM=
-----END CERTIFICATE-----
Generated at Thu May 1 14:10:12 2025 by rpki-client