Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9zbpSWyBk_j5MToVr3E9DMHmFDw.roa
File: 9zbpSWyBk_j5MToVr3E9DMHmFDw.roa (raw, json)
Hash identifier: RkBWm69J9ncbalgAqDMYqxYUoEWZYzhRR6B5lakalpU=
Subject key identifier: F7:36:E9:49:6C:81:93:F8:F9:31:3A:15:AF:71:3D:0C:C1:E6:14:3C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186AF1603AC2F55F24EF4B4F1257CFC9080
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9zbpSWyBk_j5MToVr3E9DMHmFDw.roa
Signing time: Sun 05 Mar 2023 00:05:00 +0000
ROA not before: Sun 05 Mar 2023 00:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:af15:669d/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:af:16:03:ac:2f:55:f2:4e:f4:b4:f1:25:7c:fc:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 5 00:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f736e9496c8193f8f9313a15af713d0cc1e6143c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:e9:cf:86:f6:97:3f:11:bf:e4:41:88:b1:
d0:80:cc:1e:57:a0:d5:d1:dc:ac:d0:e6:90:fc:7c:
31:76:06:bf:73:2f:f6:af:fb:9a:b3:1d:47:ed:8c:
7c:18:86:e3:c8:fc:12:39:1f:a5:6c:a0:27:cd:e1:
71:b2:8d:5f:df:b8:10:b8:6d:22:c4:24:cb:99:c7:
b5:09:08:ce:9c:7c:bf:34:ae:e6:0f:6a:df:8f:71:
80:90:22:57:9d:6b:5f:cf:65:33:ed:27:4a:df:e8:
6b:1f:f6:e3:56:bc:d4:51:a3:ec:6a:7c:ab:a4:38:
64:de:99:3a:12:3e:c6:2d:10:ee:55:fc:76:9f:dd:
ce:71:eb:27:9c:59:48:0d:6a:dc:ea:9d:ef:1e:04:
da:87:e4:4e:0d:14:43:8a:86:8b:52:86:4a:02:9d:
9f:1b:68:0e:44:a4:ad:21:8f:b2:84:7e:29:bc:f3:
22:4c:f8:66:63:7a:95:32:9f:a1:a7:d4:96:ba:f4:
23:18:3d:83:b8:53:95:26:71:49:aa:bc:00:fd:c7:
93:a1:34:e2:c5:53:28:e2:b9:f1:0b:7a:b3:4c:70:
19:f3:89:d0:fd:2f:c4:e9:3b:ae:ec:92:a1:86:fe:
0c:47:05:6d:1f:cf:c5:f2:14:71:0f:fa:ad:4d:50:
0c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:36:E9:49:6C:81:93:F8:F9:31:3A:15:AF:71:3D:0C:C1:E6:14:3C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9zbpSWyBk_j5MToVr3E9DMHmFDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:28:4d:cc:99:28:5a:1b:59:0b:bc:d1:e6:d3:98:69:35:61:
b8:97:2b:1f:48:fc:ec:43:6c:6f:d4:ac:7a:1a:9c:1e:fd:99:
4a:b4:06:99:67:1a:b9:1b:14:fc:6f:79:f5:39:f9:1d:07:0a:
d0:f3:e2:cb:a1:09:4b:01:72:1e:fc:37:be:c9:51:80:1f:16:
d0:97:16:17:21:73:ed:b2:20:74:6c:7d:3f:9a:de:bd:18:ff:
a3:8d:4f:23:fd:20:03:ae:e7:08:9b:1f:7c:38:65:47:59:15:
ad:ce:ce:cd:be:78:63:ed:25:97:0b:b7:58:43:8a:62:27:c9:
c8:d0:5b:9b:5b:62:e7:a1:7f:cd:ec:80:3b:f6:1f:c0:22:04:
df:91:57:59:39:a6:59:dd:0a:00:fb:df:24:77:6c:62:89:93:
11:df:c9:1b:08:d7:cd:10:6d:35:89:ec:0a:29:d2:fd:91:7d:
4e:b7:b4:73:3d:88:15:8b:18:3f:8a:38:01:94:b6:e1:8c:50:
c5:5e:60:f8:d1:88:2a:64:43:e8:50:52:a1:1a:18:1c:f7:58:
a3:7d:ee:fb:d8:6a:5d:a8:8c:69:fa:6f:82:4f:d3:4f:f1:f9:
59:9b:f2:46:e6:77:58:d9:e1:1d:b8:9f:a1:4a:da:15:dd:cb:
22:5e:c7:4a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYavFgOsL1XyTvS08SV8/JCAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzA1MDAwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzM2ZTk0OTZjODE5M2Y4ZjkzMTNhMTVhZjcxM2QwY2MxZTYxNDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK/pz4b2lz8Rv+RBiLHQgMweV6DV
0dys0OaQ/Hwxdga/cy/2r/uasx1H7Yx8GIbjyPwSOR+lbKAnzeFxso1f37gQuG0i
xCTLmce1CQjOnHy/NK7mD2rfj3GAkCJXnWtfz2Uz7SdK3+hrH/bjVrzUUaPsanyr
pDhk3pk6Ej7GLRDuVfx2n93OcesnnFlIDWrc6p3vHgTah+RODRRDioaLUoZKAp2f
G2gORKStIY+yhH4pvPMiTPhmY3qVMp+hp9SWuvQjGD2DuFOVJnFJqrwA/ceToTTi
xVMo4rnxC3qzTHAZ84nQ/S/E6Tuu7JKhhv4MRwVtH8/F8hRxD/qtTVAMkwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPc26UlsgZP4+TE6Fa9xPQzB5hQ8MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOXpicFNXeUJrX2o1TVRvVnIzRTlETUhtRkR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABkoTcyZKFobWQu80ebT
mGk1YbiXKx9I/OxDbG/UrHoanB79mUq0BplnGrkbFPxvefU5+R0HCtDz4suhCUsB
ch78N77JUYAfFtCXFhchc+2yIHRsfT+a3r0Y/6ONTyP9IAOu5wibH3w4ZUdZFa3O
zs2+eGPtJZcLt1hDimInycjQW5tbYuehf83sgDv2H8AiBN+RV1k5plndCgD73yR3
bGKJkxHfyRsI180QbTWJ7Aop0v2RfU63tHM9iBWLGD+KOAGUtuGMUMVeYPjRiCpk
Q+hQUqEaGBz3WKN97vvYal2ojGn6b4JP00/x+Vmb8kbmd1jZ4R24n6FK2hXdyyJe
x0o=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:16:33 2025 by rpki-client