Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ArXVmSHmI28Rp-WS2U0XytxAoWM.roa
File: ArXVmSHmI28Rp-WS2U0XytxAoWM.roa (raw, json)
Hash identifier: xdVyEP4fmwUOY+RuDKtM5Hge2FE9SD+XlTMfpX/pPlk=
Subject key identifier: 02:B5:D5:99:21:E6:23:6F:11:A7:E5:92:D9:4D:17:CA:DC:40:A1:63
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187BA3B9D661B7545EFC4AAA2CB1F4D4373
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ArXVmSHmI28Rp-WS2U0XytxAoWM.roa
Signing time: Tue 25 Apr 2023 21:04:41 +0000
ROA not before: Tue 25 Apr 2023 21:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:187:ba3b:32d0/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ba:3b:9d:66:1b:75:45:ef:c4:aa:a2:cb:1f:4d:43:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 25 21:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02b5d59921e6236f11a7e592d94d17cadc40a163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:26:bf:38:9e:b4:44:52:8d:70:b8:93:2c:10:
ed:0e:11:f2:7f:e3:8f:69:59:23:33:7f:ee:15:24:
b4:b2:d7:6a:d1:fd:99:83:d0:79:2a:f4:46:dd:63:
b7:6a:fb:c0:fb:c0:47:0a:04:8f:3f:ea:29:55:2a:
9c:f8:72:ca:d1:69:88:4d:9a:53:b4:9c:20:dd:18:
03:bf:76:ed:95:c1:48:b1:a2:94:51:b2:47:b5:b0:
aa:87:54:97:73:c9:88:0d:1f:17:9f:35:14:b5:78:
fe:d7:36:93:9f:05:db:bd:70:21:15:d3:cd:2c:14:
49:ff:3c:2c:e5:cd:df:97:94:0e:f7:a9:0b:62:18:
54:0c:16:98:b6:52:77:a8:2f:f6:56:f1:6a:eb:31:
ca:da:d4:c9:19:b4:98:f2:90:c0:d2:ad:db:7e:b6:
47:1f:0b:6a:97:a7:f6:b5:2b:79:44:b5:15:e9:c6:
50:68:d4:d2:be:7a:e0:8f:77:20:11:99:fa:e2:68:
eb:55:53:ed:b7:37:3a:27:18:b2:b3:9c:15:bd:1f:
92:83:38:0d:b3:8e:93:1c:18:41:ab:c2:2b:5c:02:
1c:d6:83:c2:23:be:ae:c3:38:71:ba:4d:e4:0f:f3:
dc:f9:9e:f6:4b:b7:77:5e:cd:73:f9:6c:0e:12:75:
97:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B5:D5:99:21:E6:23:6F:11:A7:E5:92:D9:4D:17:CA:DC:40:A1:63
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ArXVmSHmI28Rp-WS2U0XytxAoWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:7d:9d:46:86:4d:57:0e:01:c2:fa:33:24:8b:32:62:81:16:
1d:db:b5:6d:07:a2:d4:4e:71:99:61:e4:61:4d:3d:e0:45:45:
cf:83:98:6c:f1:39:67:0f:8b:17:bc:fc:c6:e9:c7:11:aa:89:
12:9d:fe:fd:de:09:04:9f:bc:d5:50:05:d9:86:f8:96:60:82:
89:25:3e:11:d9:04:10:3a:39:e8:14:65:ff:50:bc:82:f1:34:
3e:94:36:ea:7b:43:41:a3:76:60:45:b9:6f:88:f8:17:80:21:
8b:f6:a1:22:d0:36:ec:36:81:c4:ad:46:e4:47:f9:84:f9:3f:
b5:b1:a9:5c:4f:05:df:ee:e7:ce:88:c0:5b:bc:f7:d9:c2:39:
96:dc:d1:5f:4e:c9:b5:50:f1:a6:ec:bf:8d:e5:a9:9f:04:e1:
08:39:5e:dc:56:9a:76:45:c9:55:4d:72:53:a2:1c:0e:86:93:
e0:ba:24:cf:e7:df:2c:86:9d:cb:92:ae:4c:d0:35:6f:13:45:
fe:76:ff:50:af:14:87:98:33:46:19:34:83:25:c0:2d:cc:3d:
b3:05:09:4d:b4:05:4b:53:36:1f:8a:25:4a:12:ed:b1:e3:f4:
e6:6c:a2:8f:09:69:c8:b3:67:67:ec:28:b8:ae:1d:67:40:31:
96:8b:4c:0c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYe6O51mG3VF78SqossfTUNzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDI1MjEwNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmI1ZDU5OTIxZTYyMzZmMTFhN2U1OTJkOTRkMTdjYWRjNDBhMTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCa/OJ60RFKNcLiTLBDtDhHyf+OP
aVkjM3/uFSS0stdq0f2Zg9B5KvRG3WO3avvA+8BHCgSPP+opVSqc+HLK0WmITZpT
tJwg3RgDv3btlcFIsaKUUbJHtbCqh1SXc8mIDR8XnzUUtXj+1zaTnwXbvXAhFdPN
LBRJ/zws5c3fl5QO96kLYhhUDBaYtlJ3qC/2VvFq6zHK2tTJGbSY8pDA0q3bfrZH
Hwtql6f2tSt5RLUV6cZQaNTSvnrgj3cgEZn64mjrVVPttzc6Jxiys5wVvR+SgzgN
s46THBhBq8IrXAIc1oPCI76uwzhxuk3kD/Pc+Z72S7d3Xs1z+WwOEnWX7wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAK11Zkh5iNvEaflktlNF8rcQKFjMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQXJYVm1TSG1JMjhScC1XUzJVMFh5dHhBb1dNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGx9nUaGTVcOAcL6MySL
MmKBFh3btW0HotROcZlh5GFNPeBFRc+DmGzxOWcPixe8/MbpxxGqiRKd/v3eCQSf
vNVQBdmG+JZggoklPhHZBBA6OegUZf9QvILxND6UNup7Q0GjdmBFuW+I+BeAIYv2
oSLQNuw2gcStRuRH+YT5P7WxqVxPBd/u586IwFu899nCOZbc0V9OybVQ8absv43l
qZ8E4Qg5XtxWmnZFyVVNclOiHA6Gk+C6JM/n3yyGncuSrkzQNW8TRf52/1CvFIeY
M0YZNIMlwC3MPbMFCU20BUtTNh+KJUoS7bHj9OZsoo8JacizZ2fsKLiuHWdAMZaL
TAw=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:25:56 2025 by rpki-client