Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9MpEZJ4RfFJ_sVjD1-MJg2nrFzQ.roa
File: 9MpEZJ4RfFJ_sVjD1-MJg2nrFzQ.roa (raw, json)
Hash identifier: TKMHq9DmwIeJHj7qBbZqqvutKe3k1CGmBcizmDcbvRg=
Subject key identifier: F4:CA:44:64:9E:11:7C:52:7F:B1:58:C3:D7:E3:09:83:69:EB:17:34
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01872E53FF409909EF887ED83275E041303A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9MpEZJ4RfFJ_sVjD1-MJg2nrFzQ.roa
Signing time: Wed 29 Mar 2023 17:04:29 +0000
ROA not before: Wed 29 Mar 2023 17:04:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:187:2e53:e4f8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2e:53:ff:40:99:09:ef:88:7e:d8:32:75:e0:41:30:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 29 17:04:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4ca44649e117c527fb158c3d7e3098369eb1734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bd:52:7e:cb:12:90:0a:6f:54:37:4f:e2:6f:
43:aa:8e:23:22:71:84:47:76:9f:25:9f:5c:6e:f5:
3d:74:ff:1c:36:c0:60:e8:2c:88:38:a9:3d:67:76:
be:61:7f:7e:c5:6e:26:2a:00:b3:ec:b3:b6:5c:a0:
01:a8:88:ae:ca:3e:79:9e:e1:6a:1c:79:73:de:3a:
c2:f9:a6:84:21:aa:e7:f7:a4:60:22:fd:32:91:e3:
0c:76:46:5e:f3:51:fc:71:38:be:7d:2f:d0:89:3c:
7d:9f:71:85:d2:2e:43:83:23:9c:60:4b:0b:11:ca:
70:2d:77:52:39:f3:7a:73:1e:2b:7e:6f:33:8e:69:
09:35:2c:fc:e1:21:2d:23:fe:dd:1b:4b:ab:8b:fd:
0f:5b:c7:43:a5:f4:d6:35:c3:6b:5a:65:b7:18:ba:
d6:3f:c6:e1:7f:f6:b5:b9:77:48:76:19:b5:70:64:
13:b4:fe:2d:90:61:c1:5a:34:06:2b:4b:12:33:96:
5a:be:3e:89:c3:eb:20:a0:b3:63:cc:ad:18:f1:4a:
99:90:f7:62:35:1a:f2:7e:c9:9e:99:a4:0b:2e:1a:
4f:f4:7c:35:5c:38:f8:7d:04:91:fb:a3:ed:6b:c0:
c4:f9:85:4b:d3:8c:2f:df:54:0e:a6:a4:85:00:a4:
c1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CA:44:64:9E:11:7C:52:7F:B1:58:C3:D7:E3:09:83:69:EB:17:34
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9MpEZJ4RfFJ_sVjD1-MJg2nrFzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:1c:17:33:25:38:2a:28:2e:f4:97:d5:eb:1b:46:b7:99:ee:
c8:ad:7b:b2:7c:88:92:a1:4f:af:a5:ba:a2:8d:34:d6:ed:e8:
e1:4e:ec:e7:e8:25:3b:2e:95:b4:18:ac:3d:cc:15:77:43:46:
e3:57:70:63:51:6c:8e:89:92:ca:b3:e4:ae:1b:b0:1b:38:30:
29:10:a4:db:22:31:e2:dd:0c:83:63:73:5d:63:9a:78:d6:09:
f7:f8:03:34:a8:e9:f6:22:99:78:fb:ce:e7:bd:d1:c6:09:8f:
c6:ad:02:db:08:0a:7f:03:42:1d:7d:0d:9b:5d:53:ba:42:48:
dd:5f:e9:66:46:46:24:27:6c:19:2e:08:8a:b6:b4:06:ed:ed:
2e:b4:eb:e7:13:d1:0c:9a:93:c9:d3:c6:60:31:da:1e:fc:21:
86:ae:5a:4c:f9:62:24:94:d3:63:61:7f:45:cb:c4:50:35:83:
a4:4e:63:f1:17:07:bd:c0:75:e1:9b:2c:00:bf:37:07:ac:56:
b3:96:cd:cc:38:4a:0f:c1:a0:ce:d2:1c:f8:b0:0c:d1:76:05:
67:9a:e8:6b:a9:01:37:ae:0c:8f:f6:5e:cf:f6:82:c4:60:0b:
9c:c3:92:ba:fe:81:41:33:b2:48:a4:a3:1e:0a:1f:10:8c:d6:
52:63:7a:c5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYcuU/9AmQnviH7YMnXgQTA6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzI5MTcwNDI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGNhNDQ2NDllMTE3YzUyN2ZiMTU4YzNkN2UzMDk4MzY5ZWIxNzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl71SfssSkApvVDdP4m9Dqo4jInGE
R3afJZ9cbvU9dP8cNsBg6CyIOKk9Z3a+YX9+xW4mKgCz7LO2XKABqIiuyj55nuFq
HHlz3jrC+aaEIarn96RgIv0ykeMMdkZe81H8cTi+fS/QiTx9n3GF0i5DgyOcYEsL
EcpwLXdSOfN6cx4rfm8zjmkJNSz84SEtI/7dG0uri/0PW8dDpfTWNcNrWmW3GLrW
P8bhf/a1uXdIdhm1cGQTtP4tkGHBWjQGK0sSM5Zavj6Jw+sgoLNjzK0Y8UqZkPdi
NRryfsmemaQLLhpP9Hw1XDj4fQSR+6Pta8DE+YVL04wv31QOpqSFAKTBAwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPTKRGSeEXxSf7FYw9fjCYNp6xc0MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOU1wRVpKNFJmRkpfc1ZqRDEtTUpnMm5yRnpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFkcFzMlOCooLvSX1esb
RreZ7site7J8iJKhT6+luqKNNNbt6OFO7OfoJTsulbQYrD3MFXdDRuNXcGNRbI6J
ksqz5K4bsBs4MCkQpNsiMeLdDINjc11jmnjWCff4AzSo6fYimXj7zue90cYJj8at
AtsICn8DQh19DZtdU7pCSN1f6WZGRiQnbBkuCIq2tAbt7S606+cT0Qyak8nTxmAx
2h78IYauWkz5YiSU02Nhf0XLxFA1g6ROY/EXB73AdeGbLAC/NwesVrOWzcw4Sg/B
oM7SHPiwDNF2BWea6GupATeuDI/2Xs/2gsRgC5zDkrr+gUEzskikox4KHxCM1lJj
esU=
-----END CERTIFICATE-----
Generated at Fri May 2 17:32:58 2025 by rpki-client