Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CIuAVkP5x2bnJSFIS6I127oA50A.roa
File: CIuAVkP5x2bnJSFIS6I127oA50A.roa (raw, json)
Hash identifier: GZZH/YQSitGxGp/kOYHGsrocRN8MNZlVYGwj9f3+lIA=
Subject key identifier: 08:8B:80:56:43:F9:C7:66:E7:25:21:48:4B:A2:35:DB:BA:00:E7:40
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187B252779DAD2550A3B0C222FABA8FBF69
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CIuAVkP5x2bnJSFIS6I127oA50A.roa
Signing time: Mon 24 Apr 2023 08:12:41 +0000
ROA not before: Mon 24 Apr 2023 08:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b2:52:77:9d:ad:25:50:a3:b0:c2:22:fa:ba:8f:bf:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 24 08:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=088b805643f9c766e72521484ba235dbba00e740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:da:b7:c1:8f:83:c4:47:5b:16:bd:e5:3a:64:
88:e8:b1:0a:97:a0:67:a7:6f:23:59:60:19:03:73:
d0:8c:bb:aa:09:93:dd:44:45:53:2c:4d:5a:45:a0:
f1:44:7f:2b:4c:14:ce:a1:b0:c3:51:b8:56:07:4c:
88:cf:9f:e4:21:a4:58:41:5e:f0:35:87:87:b3:1a:
11:98:83:37:0b:4c:56:e0:25:66:f0:f3:27:9d:ec:
cc:a3:03:91:1b:6f:c1:a1:88:90:4b:14:e6:81:bd:
1f:e1:d3:72:c4:e7:26:f4:e1:86:ee:a6:6c:e7:24:
e6:ad:cb:8c:a8:d2:79:be:2f:31:bc:51:d5:67:57:
b9:44:fe:a0:73:65:56:c9:4f:cb:85:ad:9c:1d:56:
16:a5:0d:78:91:d5:86:b7:61:dc:17:23:29:e3:ed:
2f:34:09:a2:29:00:80:ff:56:bd:d8:6a:e3:80:af:
d4:9f:7f:ea:6c:19:6e:d3:11:1a:fb:85:9e:7d:1d:
a0:7d:72:b0:b9:db:3c:54:9a:f3:fe:b9:db:b6:33:
0c:f4:17:29:24:90:ea:74:15:39:b0:48:66:fd:bb:
b6:ae:15:ea:c2:5d:e0:dd:d2:29:01:10:84:54:4f:
a1:b3:ab:41:a6:bd:60:80:ec:01:c1:4c:60:b3:d1:
77:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8B:80:56:43:F9:C7:66:E7:25:21:48:4B:A2:35:DB:BA:00:E7:40
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CIuAVkP5x2bnJSFIS6I127oA50A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:fd:4e:a3:34:dc:87:d5:71:bb:08:3c:02:59:ad:48:0d:47:
e6:3d:c0:b7:28:c7:b8:50:9f:73:07:53:d9:ce:35:2d:48:8b:
af:d0:d5:b8:fe:37:7a:33:91:96:3c:1c:22:49:5c:bc:79:2b:
36:ec:37:76:b9:4b:88:3b:0e:50:27:f3:4b:33:c4:3b:50:c3:
cf:f1:00:07:89:41:ac:9d:18:c6:d5:c3:aa:62:a3:51:a2:93:
c1:30:22:a4:05:c9:68:be:5c:2e:b4:86:11:b9:75:20:08:6a:
d7:7d:5c:e9:e4:0d:2c:5a:1c:48:0d:e1:0b:47:bb:d9:dc:a5:
55:5a:ca:f5:02:e4:c6:c7:9c:b0:03:67:5c:3d:86:b9:f5:ca:
b8:04:7a:2d:3c:8c:ed:c0:0a:41:ab:ad:77:ba:0e:26:d9:fc:
3c:36:2f:69:46:d6:1d:56:5d:d1:99:cc:7b:c2:69:d3:e3:03:
79:1e:32:ec:60:3b:7d:1a:0f:96:c6:04:0a:e5:fd:73:24:d1:
0f:0d:18:60:74:4f:65:53:a4:1e:4f:34:cc:c3:fb:c3:de:98:
5a:4b:be:80:30:90:e5:a3:70:cf:9a:62:f6:51:3e:13:be:31:
bb:ad:21:e1:61:89:f3:1b:e2:9b:c2:b8:b5:26:ff:c6:93:a8:
0d:94:77:70
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYeyUnedrSVQo7DCIvq6j79pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDI0MDgxMjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODhiODA1NjQzZjljNzY2ZTcyNTIxNDg0YmEyMzVkYmJhMDBlNzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitq3wY+DxEdbFr3lOmSI6LEKl6Bn
p28jWWAZA3PQjLuqCZPdREVTLE1aRaDxRH8rTBTOobDDUbhWB0yIz5/kIaRYQV7w
NYeHsxoRmIM3C0xW4CVm8PMnnezMowORG2/BoYiQSxTmgb0f4dNyxOcm9OGG7qZs
5yTmrcuMqNJ5vi8xvFHVZ1e5RP6gc2VWyU/Lha2cHVYWpQ14kdWGt2HcFyMp4+0v
NAmiKQCA/1a92GrjgK/Un3/qbBlu0xEa+4WefR2gfXKwuds8VJrz/rnbtjMM9Bcp
JJDqdBU5sEhm/bu2rhXqwl3g3dIpARCEVE+hs6tBpr1ggOwBwUxgs9F37QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAiLgFZD+cdm5yUhSEuiNdu6AOdAMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQ0l1QVZrUDV4MmJuSlNGSVM2STEyN29BNTBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC/9TqM03IfVcbsIPAJZ
rUgNR+Y9wLcox7hQn3MHU9nONS1Ii6/Q1bj+N3ozkZY8HCJJXLx5KzbsN3a5S4g7
DlAn80szxDtQw8/xAAeJQaydGMbVw6pio1Gik8EwIqQFyWi+XC60hhG5dSAIatd9
XOnkDSxaHEgN4QtHu9ncpVVayvUC5MbHnLADZ1w9hrn1yrgEei08jO3ACkGrrXe6
DibZ/Dw2L2lG1h1WXdGZzHvCadPjA3keMuxgO30aD5bGBArl/XMk0Q8NGGB0T2VT
pB5PNMzD+8PemFpLvoAwkOWjcM+aYvZRPhO+MbutIeFhifMb4pvCuLUm/8aTqA2U
d3A=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:37 2025 by rpki-client