Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ch1mvuab3S8nVUsDuC9ZXiOHI7M.roa
File: Ch1mvuab3S8nVUsDuC9ZXiOHI7M.roa (raw, json)
Hash identifier: banJPBE1CpcGwWbiEKW1qy7Tv8i6D7/VH9OP/qr0BAs=
Subject key identifier: 0A:1D:66:BE:E6:9B:DD:2F:27:55:4B:03:B8:2F:59:5E:23:87:23:B3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01893231793BCEBE230E643E7231A9C3BB8A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ch1mvuab3S8nVUsDuC9ZXiOHI7M.roa
Signing time: Fri 07 Jul 2023 21:10:50 +0000
ROA not before: Fri 07 Jul 2023 21:10:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:32:31:79:3b:ce:be:23:0e:64:3e:72:31:a9:c3:bb:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 7 21:10:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a1d66bee69bdd2f27554b03b82f595e238723b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3d:64:c4:e4:98:45:f3:4b:e7:87:97:79:13:
00:a1:5f:3f:25:7f:8a:ac:99:91:f4:bd:b6:c6:c9:
b5:de:07:7c:a4:0e:1d:fc:cd:8e:b9:69:c7:b5:73:
0b:be:7a:dd:d3:c3:05:f2:ba:4e:ad:e5:97:8e:f5:
08:a8:d2:f6:5f:59:ed:d7:fc:bf:02:54:f0:0a:04:
cd:2f:4c:35:2b:69:05:f4:49:10:22:1d:bf:a1:73:
23:2e:c7:7c:4d:b8:e0:1c:59:d5:36:59:f8:40:d5:
7c:2c:d5:03:0b:0d:a9:6a:4c:83:4f:6c:23:0e:48:
43:0b:80:21:c0:bd:1b:05:27:92:ee:9b:13:f3:7d:
66:a6:95:1b:30:e1:6a:cf:dc:d0:e8:d4:ae:9f:fc:
a4:d5:a1:32:30:8f:da:5c:8c:0c:5f:e8:e4:50:c1:
5b:eb:9c:ca:63:40:2d:93:08:8f:a8:38:9a:b0:dc:
3c:e2:48:57:85:21:f6:b9:77:ad:fa:61:5a:87:ad:
a3:ad:f6:5b:88:55:a9:f5:6e:a3:fa:d9:22:4e:4d:
3b:31:eb:e9:ab:ff:6e:1b:26:89:78:5f:4b:6a:60:
20:de:92:f9:5c:ca:82:2f:7c:35:13:e4:5f:b2:63:
cd:4a:cf:fa:b1:6b:cc:44:60:08:ef:8e:28:29:fd:
d9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1D:66:BE:E6:9B:DD:2F:27:55:4B:03:B8:2F:59:5E:23:87:23:B3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ch1mvuab3S8nVUsDuC9ZXiOHI7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:86:86:d5:ba:c0:f6:3e:a2:fd:1d:f8:e0:4b:94:ef:ad:67:
d6:5d:c2:04:65:3e:ee:0a:fa:82:32:2b:29:49:bf:ee:9d:d4:
22:fa:33:f4:e3:1d:fc:43:03:90:b0:76:f9:fd:cd:71:c8:58:
4f:1e:31:3e:cf:e5:ab:2a:4a:d6:41:ff:57:3a:2a:8a:b8:d0:
a9:d4:f4:cc:f5:2c:4c:2c:5b:fb:88:28:db:b3:d6:06:ee:d8:
76:79:2d:83:52:e7:d5:f3:48:39:d0:1c:4f:0f:5e:de:64:bc:
24:a6:ef:f8:56:2b:ed:67:69:de:a6:ca:b9:e1:29:7d:da:84:
18:5d:a1:6b:df:58:ba:b6:0b:00:9a:0d:6e:07:ef:15:98:97:
7a:55:5f:65:a3:d7:c1:f6:f3:e4:68:73:c6:6b:31:0c:a0:73:
13:02:41:58:0c:23:26:cd:79:3d:c5:1b:ec:8f:3c:4b:e3:ad:
df:21:47:47:7a:b2:e1:3c:5f:df:97:24:a6:43:88:2a:34:cd:
10:ad:38:97:45:df:fe:32:2a:40:5c:0d:fa:17:16:bb:76:af:
be:28:01:b0:df:0c:98:0e:31:1c:66:a9:47:ac:65:e3:db:06:
59:a4:e7:6e:f9:cb:2b:06:95:f5:16:fa:fc:27:e0:7e:62:24:
c0:4e:80:42
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYkyMXk7zr4jDmQ+cjGpw7uKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzA3MjExMDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTFkNjZiZWU2OWJkZDJmMjc1NTRiMDNiODJmNTk1ZTIzODcyM2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj1kxOSYRfNL54eXeRMAoV8/JX+K
rJmR9L22xsm13gd8pA4d/M2OuWnHtXMLvnrd08MF8rpOreWXjvUIqNL2X1nt1/y/
AlTwCgTNL0w1K2kF9EkQIh2/oXMjLsd8TbjgHFnVNln4QNV8LNUDCw2pakyDT2wj
DkhDC4AhwL0bBSeS7psT831mppUbMOFqz9zQ6NSun/yk1aEyMI/aXIwMX+jkUMFb
65zKY0AtkwiPqDiasNw84khXhSH2uXet+mFah62jrfZbiFWp9W6j+tkiTk07Mevp
q/9uGyaJeF9LamAg3pL5XMqCL3w1E+RfsmPNSs/6sWvMRGAI744oKf3ZlwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAodZr7mm90vJ1VLA7gvWV4jhyOzMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQ2gxbXZ1YWIzUzhuVlVzRHVDOVpYaU9ISTdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJ6GhtW6wPY+ov0d+OBL
lO+tZ9ZdwgRlPu4K+oIyKylJv+6d1CL6M/TjHfxDA5Cwdvn9zXHIWE8eMT7P5asq
StZB/1c6Koq40KnU9Mz1LEwsW/uIKNuz1gbu2HZ5LYNS59XzSDnQHE8PXt5kvCSm
7/hWK+1nad6myrnhKX3ahBhdoWvfWLq2CwCaDW4H7xWYl3pVX2Wj18H28+Roc8Zr
MQygcxMCQVgMIybNeT3FG+yPPEvjrd8hR0d6suE8X9+XJKZDiCo0zRCtOJdF3/4y
KkBcDfoXFrt2r74oAbDfDJgOMRxmqUesZePbBlmk5275yysGlfUW+vwn4H5iJMBO
gEI=
-----END CERTIFICATE-----
Generated at Thu May 1 08:27:43 2025 by rpki-client