Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C8abyg0-1eLkRzW7XkVc9s5cYUQ.roa
File: C8abyg0-1eLkRzW7XkVc9s5cYUQ.roa (raw, json)
Hash identifier: f6vi4JiHAOHtm5VUzwCM8GUNT2RfPV5/chX5bdrTxVQ=
Subject key identifier: 0B:C6:9B:CA:0D:3E:D5:E2:E4:47:35:BB:5E:45:5C:F6:CE:5C:61:44
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189589D03B03F072C6D34A67265E846500D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C8abyg0-1eLkRzW7XkVc9s5cYUQ.roa
Signing time: Sat 15 Jul 2023 08:13:52 +0000
ROA not before: Sat 15 Jul 2023 08:13:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:58:9d:03:b0:3f:07:2c:6d:34:a6:72:65:e8:46:50:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 15 08:13:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bc69bca0d3ed5e2e44735bb5e455cf6ce5c6144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:82:a5:31:5e:f1:40:e8:bd:b6:05:97:1a:
92:89:1d:6d:72:97:0b:7a:af:50:fe:a6:c1:bc:0a:
99:61:2f:0d:44:fe:60:51:80:29:50:52:b5:01:ed:
1a:b4:21:ad:20:1e:0d:00:fb:d7:c8:7a:de:9c:f5:
f0:97:a9:95:8c:74:e5:41:db:08:ea:11:22:e4:91:
cb:7a:ab:16:a1:6b:97:4c:f4:7c:be:2c:8d:a9:df:
22:aa:2b:52:fe:80:b5:9c:ce:c2:63:8e:25:52:45:
c5:45:1c:05:a2:44:56:44:0f:1b:08:35:dd:17:ff:
b1:3c:91:ee:51:87:b5:07:c3:c1:61:05:4c:c4:ca:
ee:62:0b:ed:13:0f:9a:03:2f:a0:da:69:59:8f:56:
51:c3:25:2c:e7:0f:6a:2f:d3:8d:fb:e7:a1:65:73:
44:7a:e8:e3:9a:ad:6b:eb:d9:24:02:a5:a8:68:dd:
bd:1c:e5:4d:d0:75:32:f1:46:ec:53:b0:fb:0b:e0:
6b:30:22:b4:99:31:4d:08:6c:3a:00:be:10:ac:c3:
24:1a:34:dd:fc:07:1a:e8:9b:d6:9e:4a:5b:a2:5e:
2e:f7:b4:a5:c6:3b:41:81:a2:f1:71:2e:7f:fc:e9:
1a:b4:d1:3c:8d:56:bb:61:04:3a:f6:17:34:d7:59:
c3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C6:9B:CA:0D:3E:D5:E2:E4:47:35:BB:5E:45:5C:F6:CE:5C:61:44
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C8abyg0-1eLkRzW7XkVc9s5cYUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:05:5b:60:72:7c:e8:4a:f2:73:f9:32:8f:36:98:1b:d4:1c:
60:8f:d4:c7:cb:71:99:ed:55:a9:c4:60:a2:96:ff:bb:9c:8f:
13:ef:22:cf:78:80:c9:08:62:d4:50:df:d4:f0:42:6d:d8:30:
52:2a:b9:7b:9c:dc:a0:3b:47:cd:69:41:1c:6c:78:c8:0e:ed:
3d:ec:1d:ad:82:51:8f:6d:4a:59:b1:af:f2:13:d2:40:ee:55:
11:b7:a0:8b:97:0b:7b:d0:60:46:e6:0f:21:26:9e:bd:89:91:
79:f6:60:79:be:4f:e2:e7:2c:2b:8b:ad:c7:d3:3e:4f:1e:31:
12:c4:fb:a0:f8:2a:70:64:02:c0:35:3c:9b:96:02:f8:29:15:
cb:a3:52:fb:fa:7d:b3:82:fb:47:ed:1e:f4:bc:f1:e2:2f:0f:
2e:80:81:ee:d5:44:b7:36:28:5f:84:82:8f:3a:ac:40:17:45:
44:fa:92:84:13:8e:23:30:79:c9:9c:69:42:27:bf:96:af:49:
de:cb:1d:41:c9:a2:26:da:b5:d9:77:a6:8d:a7:65:b7:1d:9f:
80:01:1f:a5:c8:8a:17:49:43:e3:68:74:28:c9:5b:ab:b1:62:
65:77:40:2e:50:74:d7:48:4c:9b:7c:98:63:b5:61:4d:0a:5b:
3e:1c:9b:67
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlYnQOwPwcsbTSmcmXoRlANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzE1MDgxMzUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmM2OWJjYTBkM2VkNWUyZTQ0NzM1YmI1ZTQ1NWNmNmNlNWM2MTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomOCpTFe8UDovbYFlxqSiR1tcpcL
eq9Q/qbBvAqZYS8NRP5gUYApUFK1Ae0atCGtIB4NAPvXyHrenPXwl6mVjHTlQdsI
6hEi5JHLeqsWoWuXTPR8viyNqd8iqitS/oC1nM7CY44lUkXFRRwFokRWRA8bCDXd
F/+xPJHuUYe1B8PBYQVMxMruYgvtEw+aAy+g2mlZj1ZRwyUs5w9qL9ON++ehZXNE
eujjmq1r69kkAqWoaN29HOVN0HUy8UbsU7D7C+BrMCK0mTFNCGw6AL4QrMMkGjTd
/Aca6JvWnkpbol4u97SlxjtBgaLxcS5//OkatNE8jVa7YQQ69hc011nDgQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAvGm8oNPtXi5Ec1u15FXPbOXGFEMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQzhhYnlnMC0xZUxrUnpXN1hrVmM5czVjWVVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADQFW2ByfOhK8nP5Mo82
mBvUHGCP1MfLcZntVanEYKKW/7ucjxPvIs94gMkIYtRQ39TwQm3YMFIquXuc3KA7
R81pQRxseMgO7T3sHa2CUY9tSlmxr/IT0kDuVRG3oIuXC3vQYEbmDyEmnr2JkXn2
YHm+T+LnLCuLrcfTPk8eMRLE+6D4KnBkAsA1PJuWAvgpFcujUvv6fbOC+0ftHvS8
8eIvDy6Age7VRLc2KF+Ego86rEAXRUT6koQTjiMwecmcaUInv5avSd7LHUHJoiba
tdl3po2nZbcdn4ABH6XIihdJQ+NodCjJW6uxYmV3QC5QdNdITJt8mGO1YU0KWz4c
m2c=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:46 2025 by rpki-client