Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CjpQsGWTSjjWVqxVuuPYaaaP5UY.roa
File: CjpQsGWTSjjWVqxVuuPYaaaP5UY.roa (raw, json)
Hash identifier: Cm5WGtlixKt/RXxou2RhodjVvZyB8bAVCEBi82kUkqU=
Subject key identifier: 0A:3A:50:B0:65:93:4A:38:D6:56:AC:55:BA:E3:D8:69:A6:8F:E5:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01873945E51367014CFCE26455889253BEF2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CjpQsGWTSjjWVqxVuuPYaaaP5UY.roa
Signing time: Fri 31 Mar 2023 20:04:54 +0000
ROA not before: Fri 31 Mar 2023 20:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:3945:3c4b/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:39:45:e5:13:67:01:4c:fc:e2:64:55:88:92:53:be:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 31 20:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a3a50b065934a38d656ac55bae3d869a68fe546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a5:7d:1b:2a:1b:d4:ca:82:a4:00:be:59:06:
0a:6a:5e:c2:b4:97:a0:89:30:f5:03:a5:aa:31:0c:
51:26:4a:46:0a:de:7a:a6:7b:db:6b:28:62:df:f3:
8c:ca:09:99:cd:6d:b2:84:8f:c2:d8:a7:84:9e:f2:
df:31:9b:90:e2:41:48:29:b8:83:d8:d8:34:fb:71:
51:8f:58:88:0c:29:3a:db:60:d9:ab:24:9a:f3:1d:
eb:bd:75:1d:58:8b:aa:30:ff:ae:cd:f7:14:fd:b8:
60:2e:de:b1:04:ca:00:fa:33:90:2c:4a:ee:11:27:
4d:50:50:9e:d5:ad:d4:71:22:88:e2:87:99:32:3d:
2e:15:01:8d:c6:e8:61:ef:53:0f:83:8d:cb:61:eb:
de:92:b3:32:d5:19:5b:1c:10:81:a4:90:f4:f6:d6:
e5:f3:97:87:e1:fa:ad:8c:dc:5d:83:51:b9:ef:9a:
aa:b5:7e:0e:f5:23:67:44:57:e8:c2:78:da:78:03:
7d:36:22:3f:b8:72:84:86:b7:bf:90:06:c8:2b:85:
c9:fa:9d:6b:b5:09:f3:1c:1b:75:2b:70:8a:8b:a1:
be:23:c9:ae:4b:b3:ab:f8:f1:a0:7b:1c:69:6d:28:
0f:b4:56:a7:ac:fa:80:5a:82:a7:13:f7:4c:eb:0c:
54:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3A:50:B0:65:93:4A:38:D6:56:AC:55:BA:E3:D8:69:A6:8F:E5:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CjpQsGWTSjjWVqxVuuPYaaaP5UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:35:47:f1:2f:5a:dd:03:10:2e:ae:a4:4d:e1:1c:a0:5a:72:
d0:dc:0c:1e:99:05:e4:e1:ea:ab:70:3c:f6:22:89:f0:ac:4c:
7b:3c:97:87:87:f2:d7:24:d0:62:92:b8:12:61:d6:36:4d:8f:
6c:c6:a0:6b:d2:0f:e3:e7:00:00:1a:52:84:9e:aa:c9:3c:4a:
d2:f1:c1:d9:e9:5b:a7:6d:97:e8:36:30:d6:0b:2a:ec:9d:bb:
1f:9b:3f:52:28:cb:ee:ff:84:ad:1a:9a:11:12:3f:f6:d4:7d:
a9:5b:a5:13:64:d1:de:33:6c:d3:6a:4d:35:b2:14:14:ce:0c:
35:e1:3f:79:9b:12:11:81:88:f4:9a:c7:f9:14:65:97:0b:1a:
63:b7:6a:63:62:47:7c:6f:3a:90:69:1c:0b:d6:fd:7b:1b:4b:
ec:16:13:e2:78:da:00:65:8f:3a:91:8f:2a:c6:38:d9:a4:41:
e7:ae:fa:16:80:eb:13:67:5d:5d:5d:77:58:34:6d:d2:83:b0:
46:93:6c:20:8c:00:4b:7f:f6:35:a8:f9:63:18:47:ea:98:0f:
cd:93:60:17:dc:85:5a:cb:c8:e3:7d:83:c5:8e:f7:bd:93:1a:
db:d2:c2:d2:28:a2:d8:d2:b5:9d:57:67:e8:0e:82:52:b9:d2:
07:8c:04:71
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYc5ReUTZwFM/OJkVYiSU77yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzMxMjAwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTNhNTBiMDY1OTM0YTM4ZDY1NmFjNTViYWUzZDg2OWE2OGZlNTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKV9Gyob1MqCpAC+WQYKal7CtJeg
iTD1A6WqMQxRJkpGCt56pnvbayhi3/OMygmZzW2yhI/C2KeEnvLfMZuQ4kFIKbiD
2Ng0+3FRj1iIDCk622DZqySa8x3rvXUdWIuqMP+uzfcU/bhgLt6xBMoA+jOQLEru
ESdNUFCe1a3UcSKI4oeZMj0uFQGNxuhh71MPg43LYevekrMy1RlbHBCBpJD09tbl
85eH4fqtjNxdg1G575qqtX4O9SNnRFfownjaeAN9NiI/uHKEhre/kAbIK4XJ+p1r
tQnzHBt1K3CKi6G+I8muS7Or+PGgexxpbSgPtFanrPqAWoKnE/dM6wxUgwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAo6ULBlk0o41lasVbrj2Gmmj+VGMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQ2pwUXNHV1RTampXVnF4VnV1UFlhYWFQNVVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAA1R/EvWt0DEC6upE3h
HKBactDcDB6ZBeTh6qtwPPYiifCsTHs8l4eH8tck0GKSuBJh1jZNj2zGoGvSD+Pn
AAAaUoSeqsk8StLxwdnpW6dtl+g2MNYLKuydux+bP1Ioy+7/hK0amhESP/bUfalb
pRNk0d4zbNNqTTWyFBTODDXhP3mbEhGBiPSax/kUZZcLGmO3amNiR3xvOpBpHAvW
/XsbS+wWE+J42gBljzqRjyrGONmkQeeu+haA6xNnXV1dd1g0bdKDsEaTbCCMAEt/
9jWo+WMYR+qYD82TYBfchVrLyON9g8WO972TGtvSwtIootjStZ1XZ+gOglK50geM
BHE=
-----END CERTIFICATE-----
Generated at Thu May 1 01:26:47 2025 by rpki-client