Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Coy4clAM-kXFjvi8GmwdNKLQesU.roa
File: Coy4clAM-kXFjvi8GmwdNKLQesU.roa (raw, json)
Hash identifier: qi48w6yITPsbUaFjO00iBSHnNiEatwUj/JYGcJ28tMw=
Subject key identifier: 0A:8C:B8:72:50:0C:FA:45:C5:8E:F8:BC:1A:6C:1D:34:A2:D0:7A:C5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868C534ED37679AC3CA9D1391D9F7BB5DE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Coy4clAM-kXFjvi8GmwdNKLQesU.roa
Signing time: Sun 26 Feb 2023 06:05:15 +0000
ROA not before: Sun 26 Feb 2023 06:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:8c52:8fad/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8c:53:4e:d3:76:79:ac:3c:a9:d1:39:1d:9f:7b:b5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 06:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a8cb872500cfa45c58ef8bc1a6c1d34a2d07ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:3a:aa:29:82:03:bf:a0:53:1f:78:6b:f9:
0c:26:90:de:03:03:10:27:29:ab:f4:98:cc:5f:16:
92:39:8d:87:78:37:21:ad:51:41:43:d5:ef:fc:d1:
58:70:4c:5a:48:d8:bb:91:8c:27:ec:07:14:a4:eb:
58:b1:bf:3d:87:03:c1:5c:cd:d3:a6:1c:52:a2:d3:
a7:c3:71:7c:26:39:f7:d6:8b:1c:fc:e3:31:0f:44:
59:96:a7:81:9f:8f:6c:8e:f6:0f:61:28:21:2a:d7:
e1:27:11:10:1a:85:da:d6:c2:49:5e:1b:10:f2:68:
79:8e:45:50:22:b2:1b:91:a7:71:da:a3:70:46:c4:
e1:4c:fd:ad:5d:22:ae:18:68:2d:3f:2e:f4:b1:21:
7e:e5:fb:65:a9:12:c2:3f:4c:da:b2:bb:b7:5e:e8:
cf:e3:cc:6a:3c:f2:5a:c7:8e:e8:f1:5f:c6:6e:a1:
dd:f7:a2:b7:83:c2:b9:15:d9:e5:11:f0:5e:8a:b7:
88:76:71:3e:11:a4:9b:68:8f:eb:7b:b6:fe:7c:05:
9a:d1:72:39:73:7b:8b:1a:b6:84:79:7e:77:54:05:
18:dd:88:f8:cf:d7:09:f7:be:28:cd:30:08:2c:bc:
f1:ba:7c:97:29:36:f5:f5:fc:04:29:9f:2b:0a:45:
30:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8C:B8:72:50:0C:FA:45:C5:8E:F8:BC:1A:6C:1D:34:A2:D0:7A:C5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Coy4clAM-kXFjvi8GmwdNKLQesU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:b0:0f:4d:80:40:24:51:99:2c:59:1b:91:8e:40:6a:38:d5:
a7:00:63:e2:91:52:44:77:e4:b0:da:6f:58:67:52:6a:30:15:
87:b1:a1:df:56:ee:a2:f6:56:67:eb:2c:74:6a:27:0f:6b:b8:
7e:38:46:2f:a9:ca:8e:13:e5:93:85:85:62:9b:e0:1b:18:83:
3e:71:6f:18:b3:09:01:77:2d:68:dd:5e:b9:05:2a:8d:14:21:
e0:d4:97:17:49:21:40:13:3b:ce:36:a6:c8:64:7b:be:d8:db:
ac:5d:98:36:ab:ec:ce:f2:79:fe:4f:a5:cb:5a:86:b1:77:1f:
99:41:d4:3a:b1:78:5a:84:cf:b8:34:9b:f2:8e:d9:46:aa:6b:
8b:7f:4b:98:4d:9b:14:c0:4e:e0:66:86:89:2b:36:6f:24:76:
e4:90:60:07:0f:f9:94:05:77:9f:1e:11:76:7e:ab:1b:cf:ab:
e8:69:8e:75:e0:08:43:e9:9c:6c:ee:18:9e:55:bf:49:04:5e:
63:36:1f:a4:c2:fb:c4:db:93:32:7c:b0:c8:72:31:b1:4e:49:
02:97:20:61:57:1a:36:7e:bf:0e:02:2d:73:c2:ae:c4:48:9b:
d4:f6:bb:e5:90:2b:b3:29:8e:45:11:e1:d3:5e:81:1c:9a:d7:
c9:7d:14:25
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaMU07TdnmsPKnROR2fe7XeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjI2MDYwNTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYThjYjg3MjUwMGNmYTQ1YzU4ZWY4YmMxYTZjMWQzNGEyZDA3YWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbA6qimCA7+gUx94a/kMJpDeAwMQ
Jymr9JjMXxaSOY2HeDchrVFBQ9Xv/NFYcExaSNi7kYwn7AcUpOtYsb89hwPBXM3T
phxSotOnw3F8Jjn31osc/OMxD0RZlqeBn49sjvYPYSghKtfhJxEQGoXa1sJJXhsQ
8mh5jkVQIrIbkadx2qNwRsThTP2tXSKuGGgtPy70sSF+5ftlqRLCP0zasru3XujP
48xqPPJax47o8V/GbqHd96K3g8K5FdnlEfBeireIdnE+EaSbaI/re7b+fAWa0XI5
c3uLGraEeX53VAUY3Yj4z9cJ974ozTAILLzxunyXKTb19fwEKZ8rCkUwCwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAqMuHJQDPpFxY74vBpsHTSi0HrFMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQ295NGNsQU0ta1hGanZpOEdtd2ROS0xRZXNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA+wD02AQCRRmSxZG5GO
QGo41acAY+KRUkR35LDab1hnUmowFYexod9W7qL2VmfrLHRqJw9ruH44Ri+pyo4T
5ZOFhWKb4BsYgz5xbxizCQF3LWjdXrkFKo0UIeDUlxdJIUATO842pshke77Y26xd
mDar7M7yef5PpctahrF3H5lB1DqxeFqEz7g0m/KO2Uaqa4t/S5hNmxTATuBmhokr
Nm8kduSQYAcP+ZQFd58eEXZ+qxvPq+hpjnXgCEPpnGzuGJ5Vv0kEXmM2H6TC+8Tb
kzJ8sMhyMbFOSQKXIGFXGjZ+vw4CLXPCrsRIm9T2u+WQK7MpjkUR4dNegRya18l9
FCU=
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:01:17 2025 by rpki-client