Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9bJLW73wc66TPgKlcpMQLcE7FBg.roa
File: 9bJLW73wc66TPgKlcpMQLcE7FBg.roa (raw, json)
Hash identifier: Syu4YyXJ1xGcj9RGTHdux0J2VX0ICgIO25YJ8RpTFbU=
Subject key identifier: F5:B2:4B:5B:BD:F0:73:AE:93:3E:02:A5:72:93:10:2D:C1:3B:14:18
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187198DFBBF5F4130C31AD100D6684BC363
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9bJLW73wc66TPgKlcpMQLcE7FBg.roa
Signing time: Sat 25 Mar 2023 16:15:48 +0000
ROA not before: Sat 25 Mar 2023 16:15:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:19:8d:fb:bf:5f:41:30:c3:1a:d1:00:d6:68:4b:c3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 25 16:15:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5b24b5bbdf073ae933e02a57293102dc13b1418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:46:cc:6f:19:f9:f4:f7:b4:71:af:52:da:
bb:ee:2c:d8:c2:dd:fd:39:9e:e9:bf:2a:7e:91:ed:
8b:37:da:e1:ec:ad:b0:2c:62:9a:d3:86:99:2d:f2:
bc:80:47:0c:d0:53:9b:22:ad:10:d2:6e:4f:22:5f:
7c:ff:68:67:33:74:7a:5c:62:57:c2:db:f7:a2:36:
f8:e5:f0:d1:7f:15:64:07:68:c2:0e:3c:9b:bc:9e:
1f:0c:ae:93:0a:7e:7f:f5:62:2b:05:54:32:8b:3a:
ed:e5:3e:3e:7e:db:ae:3e:69:e3:4a:7a:00:4c:34:
2a:ac:1d:94:f4:c9:22:ac:b5:76:2f:f1:90:c4:b4:
63:47:02:a3:f8:4c:a4:88:79:1a:19:c5:f5:ee:48:
08:69:a5:a8:28:78:59:cd:a4:b5:bd:04:e8:67:ce:
28:30:0c:60:01:34:a3:aa:27:e2:cc:5e:bd:cc:51:
e4:40:32:9c:82:5b:cd:42:fd:51:85:6f:93:32:5c:
9e:b0:66:e3:b3:0f:13:49:9d:b8:bb:91:60:51:7a:
f2:e9:14:8a:ed:4b:c4:a2:f2:6e:0f:dc:d4:ab:a8:
5b:79:59:ec:f3:07:10:9f:8b:1f:dd:e2:02:b4:27:
4d:7e:f7:62:b5:c7:8f:72:1b:84:96:cc:05:6e:c0:
a2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B2:4B:5B:BD:F0:73:AE:93:3E:02:A5:72:93:10:2D:C1:3B:14:18
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9bJLW73wc66TPgKlcpMQLcE7FBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:85:95:21:a0:b5:22:5d:d5:75:85:41:75:1c:46:4b:f3:50:
f5:0d:63:99:9f:00:94:5f:28:62:f8:53:b2:85:33:5f:54:a3:
98:3a:cd:68:c7:c6:e2:d1:b1:ba:e7:8f:ae:b1:0e:c9:a8:e0:
5a:41:5e:bc:e1:aa:f6:e0:a5:a8:27:89:8f:e7:61:5f:74:68:
80:0f:52:5f:d1:23:9e:1a:44:b6:27:c0:18:c3:83:29:80:35:
b1:8e:90:54:75:47:d9:57:02:c8:a9:b2:01:b4:39:7f:76:7b:
58:aa:d1:66:18:bd:e4:39:ef:fc:25:a0:78:5c:70:da:de:ab:
7e:db:a1:09:0c:75:92:f7:fc:31:70:59:36:86:f0:53:3a:7e:
d4:b2:37:c3:c6:92:b1:a9:56:10:00:3e:9d:3c:86:03:a8:64:
56:f7:b9:b5:f7:a8:fe:63:86:2f:8d:d2:8e:26:c5:e7:29:6c:
67:6d:5e:2b:a5:60:f4:37:28:52:00:75:b7:40:59:bd:e7:39:
e9:7b:25:23:71:d4:9d:90:87:b9:e9:c9:08:90:e4:ab:89:2f:
de:7a:69:24:1e:2c:0f:3b:c7:7f:73:e8:a9:e4:7e:7b:22:9b:
dd:3f:e8:a7:de:e2:0c:5d:ff:69:21:62:a0:d9:ed:19:73:70:
d8:c9:8f:87
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYcZjfu/X0EwwxrRANZoS8NjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzI1MTYxNTQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWIyNGI1YmJkZjA3M2FlOTMzZTAyYTU3MjkzMTAyZGMxM2IxNDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUtGzG8Z+fT3tHGvUtq77izYwt39
OZ7pvyp+ke2LN9rh7K2wLGKa04aZLfK8gEcM0FObIq0Q0m5PIl98/2hnM3R6XGJX
wtv3ojb45fDRfxVkB2jCDjybvJ4fDK6TCn5/9WIrBVQyizrt5T4+ftuuPmnjSnoA
TDQqrB2U9MkirLV2L/GQxLRjRwKj+EykiHkaGcX17kgIaaWoKHhZzaS1vQToZ84o
MAxgATSjqifizF69zFHkQDKcglvNQv1RhW+TMlyesGbjsw8TSZ24u5FgUXry6RSK
7UvEovJuD9zUq6hbeVns8wcQn4sf3eICtCdNfvditcePchuElswFbsCiUwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPWyS1u98HOukz4CpXKTEC3BOxQYMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOWJKTFc3M3djNjZUUGdLbGNwTVFMY0U3RkJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAuFlSGgtSJd1XWFQXUc
RkvzUPUNY5mfAJRfKGL4U7KFM19Uo5g6zWjHxuLRsbrnj66xDsmo4FpBXrzhqvbg
pagniY/nYV90aIAPUl/RI54aRLYnwBjDgymANbGOkFR1R9lXAsipsgG0OX92e1iq
0WYYveQ57/wloHhccNreq37boQkMdZL3/DFwWTaG8FM6ftSyN8PGkrGpVhAAPp08
hgOoZFb3ubX3qP5jhi+N0o4mxecpbGdtXiulYPQ3KFIAdbdAWb3nOel7JSNx1J2Q
h7npyQiQ5KuJL956aSQeLA87x39z6Knkfnsim90/6Kfe4gxd/2khYqDZ7RlzcNjJ
j4c=
-----END CERTIFICATE-----
Generated at Thu May 1 05:26:44 2025 by rpki-client