Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9RVcsTDpEpqyx2JNRRHI6WdINlY.roa
File: 9RVcsTDpEpqyx2JNRRHI6WdINlY.roa (raw, json)
Hash identifier: n0S1dZdH8sQoiqCoJ5agG/kpbPudtdfIkMvQx1iQaFo=
Subject key identifier: F5:15:5C:B1:30:E9:12:9A:B2:C7:62:4D:45:11:C8:E9:67:48:36:56
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C4F3FD0DDD11F4877B5E8025BC90635D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9RVcsTDpEpqyx2JNRRHI6WdINlY.roa
Signing time: Fri 16 Jun 2023 16:05:04 +0000
ROA not before: Fri 16 Jun 2023 16:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:188:c4f3:4b97/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c4:f3:fd:0d:dd:11:f4:87:7b:5e:80:25:bc:90:63:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 16 16:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5155cb130e9129ab2c7624d4511c8e967483656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ee:b1:76:21:87:6b:5e:26:28:99:73:67:95:
53:cd:0f:72:6d:d0:db:8d:67:da:30:b8:a3:46:ef:
85:53:98:68:02:c1:54:e8:69:30:72:91:8a:46:7b:
19:ab:11:17:98:3b:f6:bb:b6:c3:66:07:01:2e:b5:
38:6b:e0:ac:fe:ce:2d:e1:fa:3e:2f:82:9d:49:14:
11:c2:48:7f:a7:70:aa:58:9d:9c:93:28:44:b6:a2:
6e:d0:0b:89:74:d2:55:6d:19:47:e2:28:53:7f:9c:
62:d6:ab:4a:c8:7b:fb:d1:74:cb:07:a1:cf:74:f8:
00:6d:4d:ee:3d:bd:af:f5:42:5d:20:7b:a5:66:e0:
6e:11:40:a8:8e:92:5a:bc:92:eb:f7:77:d7:00:04:
05:7c:c9:be:57:9b:d5:07:b3:fe:93:32:06:05:1c:
eb:c4:f5:39:c2:db:20:58:49:eb:ab:a5:cf:ce:31:
92:01:1f:2c:21:1e:48:e2:6b:3a:53:ff:68:fc:79:
e9:c1:d7:81:b0:49:5a:e7:2c:e7:05:c4:03:69:5e:
f8:b5:72:60:65:65:33:1a:7b:83:91:6d:6a:02:c6:
46:b0:ce:35:4d:ad:dc:0c:f0:34:5c:55:f4:8f:5d:
2d:46:8a:25:40:0a:4a:5f:e6:d2:de:68:76:a8:cc:
e4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:15:5C:B1:30:E9:12:9A:B2:C7:62:4D:45:11:C8:E9:67:48:36:56
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9RVcsTDpEpqyx2JNRRHI6WdINlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:74:33:58:d6:eb:63:1d:3d:fd:e9:1b:fa:62:65:c7:14:67:
3c:fa:a8:2d:47:a0:2d:07:2f:b4:55:63:03:bf:c1:ed:9d:65:
b1:3c:86:fc:87:16:2f:7e:0e:99:62:70:6e:d9:b4:fe:c9:57:
7b:95:e1:b0:ab:d1:23:41:7f:86:1e:86:5a:9b:eb:29:4e:e3:
da:d1:d9:84:dd:ae:09:68:4a:98:ba:83:ea:02:18:a6:2f:26:
12:89:37:5b:b1:3b:42:d8:b5:07:c0:a5:48:78:b5:08:97:07:
49:f1:a9:41:37:e1:e1:e6:69:a4:44:9b:a6:9f:94:6f:df:9a:
2c:d8:d4:bf:89:ce:16:8c:67:04:9a:35:5c:c2:d3:16:b5:12:
5b:1c:3c:cf:fd:3e:10:bb:00:12:d8:32:81:58:a0:1d:ec:39:
06:be:02:a0:a4:a4:7f:18:8b:90:f8:2a:8b:4e:89:cf:5d:5b:
dc:60:69:fa:cb:2a:84:52:38:d9:28:0c:66:8d:7b:fb:e3:b8:
6d:58:05:42:8c:ac:59:8a:d6:3b:d7:3d:1c:14:07:d0:c7:49:
29:8f:f2:0a:e6:a5:1e:c6:ef:8f:e3:a8:7f:b8:40:de:3c:fc:
0e:36:0a:1a:53:2c:c3:05:8c:af:0a:3c:9a:e1:a7:4d:02:66:
db:6a:29:0e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYjE8/0N3RH0h3tegCW8kGNdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjE2MTYwNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTE1NWNiMTMwZTkxMjlhYjJjNzYyNGQ0NTExYzhlOTY3NDgzNjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu6xdiGHa14mKJlzZ5VTzQ9ybdDb
jWfaMLijRu+FU5hoAsFU6GkwcpGKRnsZqxEXmDv2u7bDZgcBLrU4a+Cs/s4t4fo+
L4KdSRQRwkh/p3CqWJ2ckyhEtqJu0AuJdNJVbRlH4ihTf5xi1qtKyHv70XTLB6HP
dPgAbU3uPb2v9UJdIHulZuBuEUCojpJavJLr93fXAAQFfMm+V5vVB7P+kzIGBRzr
xPU5wtsgWEnrq6XPzjGSAR8sIR5I4ms6U/9o/HnpwdeBsEla5yznBcQDaV74tXJg
ZWUzGnuDkW1qAsZGsM41Ta3cDPA0XFX0j10tRoolQApKX+bS3mh2qMzkiQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPUVXLEw6RKassdiTUURyOlnSDZWMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOVJWY3NURHBFcHF5eDJKTlJSSEk2V2RJTmxZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA50M1jW62MdPf3pG/pi
ZccUZzz6qC1HoC0HL7RVYwO/we2dZbE8hvyHFi9+DplicG7ZtP7JV3uV4bCr0SNB
f4Yehlqb6ylO49rR2YTdrgloSpi6g+oCGKYvJhKJN1uxO0LYtQfApUh4tQiXB0nx
qUE34eHmaaREm6aflG/fmizY1L+JzhaMZwSaNVzC0xa1ElscPM/9PhC7ABLYMoFY
oB3sOQa+AqCkpH8Yi5D4KotOic9dW9xgafrLKoRSONkoDGaNe/vjuG1YBUKMrFmK
1jvXPRwUB9DHSSmP8grmpR7G74/jqH+4QN48/A42ChpTLMMFjK8KPJrhp00CZttq
KQ4=
-----END CERTIFICATE-----
Generated at Sun May 4 05:02:07 2025 by rpki-client