Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8r09Mql72BiZNefNJpDCEBNzaQo.roa
File: 8r09Mql72BiZNefNJpDCEBNzaQo.roa (raw, json)
Hash identifier: Pdj/nHuroHPCLdlaKl+UnzgI455rBbgEONhvmO2vB0Q=
Subject key identifier: F2:BD:3D:32:A9:7B:D8:18:99:35:E7:CD:26:90:C2:10:13:73:69:0A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187A081509F577BAEDF9B3AE9A043BC6A81
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8r09Mql72BiZNefNJpDCEBNzaQo.roa
Signing time: Thu 20 Apr 2023 21:10:41 +0000
ROA not before: Thu 20 Apr 2023 21:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a0:81:50:9f:57:7b:ae:df:9b:3a:e9:a0:43:bc:6a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 20 21:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2bd3d32a97bd8189935e7cd2690c2101373690a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:42:f7:c0:be:db:e4:fe:bd:60:a7:83:f2:78:
87:e0:81:b6:fd:34:b4:2f:79:66:85:65:4f:1b:d3:
00:85:c8:2d:9e:58:28:89:b4:c4:90:3e:6b:11:f3:
96:8a:7e:04:5d:58:65:b3:1f:c3:24:ac:5a:ae:5c:
be:49:0d:b3:4d:6c:19:9b:d7:32:38:ec:ed:75:cd:
d5:62:b0:dc:63:5d:4e:6a:e4:98:f1:9e:67:75:7f:
84:a1:1c:87:4a:76:d0:d6:4a:f9:9d:0f:00:d8:ed:
cc:f7:89:fd:64:fb:7c:ab:db:41:a4:92:97:c4:2f:
20:4d:e1:8f:eb:a9:c5:86:8f:b4:55:67:04:b3:a4:
65:83:ed:64:1a:fb:5a:e9:b9:83:9d:40:f0:7e:93:
cc:7e:fc:75:a0:7f:32:24:44:d7:77:b8:67:c7:cb:
e5:05:02:32:c3:da:ff:33:ae:10:0b:ac:e8:83:49:
54:f4:1a:fd:83:ba:db:6c:ef:b2:29:b1:a3:e5:b8:
da:88:e4:71:a7:4a:56:60:61:a5:3a:39:d9:67:0d:
10:bd:36:26:a8:af:b4:fa:ae:c6:52:0c:3d:f8:e8:
87:7a:eb:e0:d6:ae:9c:9d:e1:87:20:9d:a9:e2:fb:
50:6e:ab:40:9e:ea:f3:3a:f9:90:7b:f5:ba:93:bc:
db:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BD:3D:32:A9:7B:D8:18:99:35:E7:CD:26:90:C2:10:13:73:69:0A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8r09Mql72BiZNefNJpDCEBNzaQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:bf:d9:6a:ab:d8:54:de:28:17:d3:fd:fd:98:16:d0:17:74:
20:b8:a3:2e:97:6a:eb:27:1f:a3:36:e8:6a:ea:e4:c1:d8:38:
1a:f6:1b:78:4a:15:09:c9:3f:a2:ed:e5:41:59:9f:f1:b8:1b:
c0:2f:57:33:1f:a2:a1:24:64:76:b3:0d:d7:55:4b:1c:8b:2c:
4d:b4:88:b2:df:8c:8b:6c:c6:00:f6:13:42:1e:bf:ec:ad:b9:
78:67:1d:57:7d:a7:56:d6:1c:cd:26:bf:45:2e:0d:d1:0b:18:
97:dd:13:a8:51:57:40:66:06:fa:cf:21:ef:89:4b:9b:f9:84:
cb:52:a7:45:dd:22:92:43:88:58:f1:3e:5a:7c:d0:02:ae:4c:
ec:3c:2d:1b:88:21:b2:fd:bd:b1:e6:ef:30:82:8e:9f:99:26:
1d:e4:63:a5:94:f2:2c:d0:f6:84:45:4f:d1:71:ab:e9:0b:47:
0f:cf:17:32:95:ed:82:69:61:8d:1c:6f:ed:a8:3a:7e:94:8f:
2f:2f:eb:68:e2:1d:eb:fe:a5:4e:fb:31:85:10:ce:90:c4:2d:
8e:14:b0:bb:bb:37:f8:4e:27:61:e5:df:2c:f7:b9:08:3a:58:
29:de:eb:5a:95:18:70:d3:2c:ab:a6:dd:32:06:d4:ab:3d:f8:
41:49:54:83
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYeggVCfV3uu35s66aBDvGqBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDIwMjExMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmJkM2QzMmE5N2JkODE4OTkzNWU3Y2QyNjkwYzIxMDEzNzM2OTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUL3wL7b5P69YKeD8niH4IG2/TS0
L3lmhWVPG9MAhcgtnlgoibTEkD5rEfOWin4EXVhlsx/DJKxarly+SQ2zTWwZm9cy
OOztdc3VYrDcY11OauSY8Z5ndX+EoRyHSnbQ1kr5nQ8A2O3M94n9ZPt8q9tBpJKX
xC8gTeGP66nFho+0VWcEs6Rlg+1kGvta6bmDnUDwfpPMfvx1oH8yJETXd7hnx8vl
BQIyw9r/M64QC6zog0lU9Br9g7rbbO+yKbGj5bjaiORxp0pWYGGlOjnZZw0QvTYm
qK+0+q7GUgw9+OiHeuvg1q6cneGHIJ2p4vtQbqtAnurzOvmQe/W6k7zbMQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPK9PTKpe9gYmTXnzSaQwhATc2kKMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOHIwOU1xbDcyQmlaTmVmTkpwRENFQk56YVFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALW/2Wqr2FTeKBfT/f2Y
FtAXdCC4oy6XausnH6M26Grq5MHYOBr2G3hKFQnJP6Lt5UFZn/G4G8AvVzMfoqEk
ZHazDddVSxyLLE20iLLfjItsxgD2E0Iev+ytuXhnHVd9p1bWHM0mv0UuDdELGJfd
E6hRV0BmBvrPIe+JS5v5hMtSp0XdIpJDiFjxPlp80AKuTOw8LRuIIbL9vbHm7zCC
jp+ZJh3kY6WU8izQ9oRFT9Fxq+kLRw/PFzKV7YJpYY0cb+2oOn6Ujy8v62jiHev+
pU77MYUQzpDELY4UsLu7N/hOJ2Hl3yz3uQg6WCne61qVGHDTLKum3TIG1Ks9+EFJ
VIM=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:29 2025 by rpki-client