Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9oQS5wZgEXYu6fFY-KrdaXMm4Lo.roa
File: 9oQS5wZgEXYu6fFY-KrdaXMm4Lo.roa (raw, json)
Hash identifier: RbVa0KUqJ86m4DSJX0X6Rjg591LzAGE4MFLCSPAWt1o=
Subject key identifier: F6:84:12:E7:06:60:11:76:2E:E9:F1:58:F8:AA:DD:69:73:26:E0:BA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186F1D7A73F69474F842FC63F377588D7BC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9oQS5wZgEXYu6fFY-KrdaXMm4Lo.roa
Signing time: Fri 17 Mar 2023 23:11:27 +0000
ROA not before: Fri 17 Mar 2023 23:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f1:d7:a7:3f:69:47:4f:84:2f:c6:3f:37:75:88:d7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 17 23:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f68412e7066011762ee9f158f8aadd697326e0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1b:e1:64:87:d0:6a:d2:bf:f8:cb:a2:30:be:
56:4f:29:1b:7a:9f:98:03:4f:d4:23:da:e9:4d:13:
70:ad:92:3b:e5:f4:e7:f4:bf:e5:e4:dc:10:34:99:
e8:bc:d0:6c:86:3c:a4:c0:3b:3e:92:8c:1b:d0:69:
62:41:ac:9c:6e:75:af:14:58:6f:c6:8b:d5:18:35:
5c:f4:50:40:6d:29:bc:3c:b5:09:48:50:d6:1a:3e:
e2:1d:04:55:83:37:2b:58:71:85:f2:fc:f1:63:86:
16:d0:4f:7e:f5:21:a6:7d:a0:78:15:fc:21:a2:3e:
1a:ed:80:f7:79:b6:59:35:d7:51:49:49:6d:b9:20:
08:df:23:01:40:8a:e5:30:08:f9:0d:63:42:0f:64:
7f:85:b2:06:ae:15:05:b2:44:9d:b6:38:6e:57:09:
be:5c:01:0a:63:81:a7:d4:e1:df:f6:46:46:ca:7a:
a2:af:60:94:7f:3c:9b:99:80:62:6a:ab:4b:a4:6c:
8d:04:c4:3b:ae:cd:77:3e:d8:b7:66:ca:48:ce:a2:
94:d3:28:d7:f4:b3:b1:b8:e6:c1:c0:a4:28:58:60:
f5:eb:b1:cb:98:b1:74:21:72:04:e5:35:c4:85:a5:
d2:30:cd:cd:90:3e:38:2d:b0:1f:3a:13:c3:61:a2:
da:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:84:12:E7:06:60:11:76:2E:E9:F1:58:F8:AA:DD:69:73:26:E0:BA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9oQS5wZgEXYu6fFY-KrdaXMm4Lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:b2:e8:06:8a:11:20:d6:8c:9c:f1:a8:e4:6d:68:db:60:65:
17:47:50:c4:11:55:8e:1b:c5:13:fd:60:bd:35:88:b2:a9:ad:
82:79:dc:f3:54:e1:9d:21:2f:83:4c:df:0a:ba:fe:00:13:17:
a7:b1:07:c0:ec:4d:ae:39:95:cf:b4:65:83:58:4c:ed:e5:96:
22:af:a2:74:3b:81:0c:84:4f:f8:aa:88:d4:e5:f2:cf:a9:68:
99:3f:ee:fb:fe:e0:8c:e4:e1:63:aa:03:06:96:6a:f2:20:72:
a6:ab:96:42:66:d2:05:cb:38:5a:03:5f:4c:0e:97:81:4d:6e:
4b:37:78:07:cd:a2:82:87:70:a2:17:86:e5:3b:61:ad:a0:78:
4e:da:a0:92:66:ac:77:24:72:1c:c6:02:b5:56:63:02:ec:4e:
a1:95:42:64:67:cc:c1:f8:e0:6c:ce:19:b6:de:bf:e1:46:78:
2e:6d:81:89:32:5e:70:fd:bd:4a:61:43:9c:a7:5a:f8:08:86:
4a:00:58:e9:ec:a1:c0:f6:cf:31:1b:74:89:34:4d:9f:2b:10:
97:99:a2:fb:b9:bc:69:d7:c4:04:fe:53:76:ab:79:e9:61:48:
bf:ef:24:4b:2b:b9:55:1a:b4:83:e3:bc:ce:0c:fe:13:7e:33:
46:76:a0:8e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbx16c/aUdPhC/GPzd1iNe8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzE3MjMxMTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjg0MTJlNzA2NjAxMTc2MmVlOWYxNThmOGFhZGQ2OTczMjZlMGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRvhZIfQatK/+MuiML5WTykbep+Y
A0/UI9rpTRNwrZI75fTn9L/l5NwQNJnovNBshjykwDs+kowb0GliQaycbnWvFFhv
xovVGDVc9FBAbSm8PLUJSFDWGj7iHQRVgzcrWHGF8vzxY4YW0E9+9SGmfaB4Ffwh
oj4a7YD3ebZZNddRSUltuSAI3yMBQIrlMAj5DWNCD2R/hbIGrhUFskSdtjhuVwm+
XAEKY4Gn1OHf9kZGynqir2CUfzybmYBiaqtLpGyNBMQ7rs13Pti3ZspIzqKU0yjX
9LOxuObBwKQoWGD167HLmLF0IXIE5TXEhaXSMM3NkD44LbAfOhPDYaLaxwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPaEEucGYBF2LunxWPiq3WlzJuC6MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOW9RUzV3WmdFWFl1NmZGWS1LcmRhWE1tNExvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFyy6AaKESDWjJzxqORt
aNtgZRdHUMQRVY4bxRP9YL01iLKprYJ53PNU4Z0hL4NM3wq6/gATF6exB8DsTa45
lc+0ZYNYTO3lliKvonQ7gQyET/iqiNTl8s+paJk/7vv+4Izk4WOqAwaWavIgcqar
lkJm0gXLOFoDX0wOl4FNbks3eAfNooKHcKIXhuU7Ya2geE7aoJJmrHckchzGArVW
YwLsTqGVQmRnzMH44GzOGbbev+FGeC5tgYkyXnD9vUphQ5ynWvgIhkoAWOnsocD2
zzEbdIk0TZ8rEJeZovu5vGnXxAT+U3areelhSL/vJEsruVUatIPjvM4M/hN+M0Z2
oI4=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:43 2025 by rpki-client