Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D0BDX7uTtgnWJ3tqWncEAJdosOM.roa
File: D0BDX7uTtgnWJ3tqWncEAJdosOM.roa (raw, json)
Hash identifier: DBWPoUgXSBXkfEDSIJ5xRDtVJcnY7bjEKqF9hAkLpRE=
Subject key identifier: 0F:40:43:5F:BB:93:B6:09:D6:27:7B:6A:5A:77:04:00:97:68:B0:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01889E5814138C1FABE605953DD18BFE4874
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D0BDX7uTtgnWJ3tqWncEAJdosOM.roa
Signing time: Fri 09 Jun 2023 04:09:12 +0000
ROA not before: Fri 09 Jun 2023 04:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9e:58:14:13:8c:1f:ab:e6:05:95:3d:d1:8b:fe:48:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 9 04:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f40435fbb93b609d6277b6a5a7704009768b0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:af:e3:cd:0c:c7:39:46:0a:f4:8d:6a:cb:8d:
27:9a:70:db:55:85:d1:38:50:45:40:0c:07:8a:52:
0f:ef:dd:33:51:bc:ba:02:a8:c4:bc:c9:ad:d9:8d:
b2:77:ff:c7:f0:88:9c:db:50:c8:52:d7:72:2c:58:
3d:96:5d:ad:88:fc:78:22:6f:b7:9a:02:48:23:b8:
bf:ea:e4:75:5c:d4:16:24:a2:e8:b2:82:60:1f:87:
1f:12:15:72:3f:02:ba:bf:52:ae:65:d6:9b:b1:5e:
08:e9:d2:c0:85:8b:e9:f6:cd:59:15:14:e7:5a:f1:
c4:3b:98:0c:23:5b:d0:ed:01:66:ef:eb:b6:34:bd:
16:4b:b9:ce:eb:93:55:8f:26:f1:ab:71:82:9b:79:
9a:de:30:ab:77:b6:aa:f9:5f:d3:d4:ef:f8:15:34:
e9:f6:d5:c3:38:7b:cf:00:c9:47:3a:75:ff:44:41:
b1:2f:bf:c2:47:4e:75:1b:05:6f:d4:75:fe:78:56:
cb:e2:36:dc:46:e6:d4:8c:af:c4:c3:76:07:67:78:
65:3b:49:02:a2:d0:5e:97:71:4b:a6:68:00:61:e8:
db:30:43:e4:ba:2e:04:48:e3:04:63:fb:37:37:c6:
3f:eb:3b:e6:7e:97:35:bf:70:17:c1:a1:23:ea:eb:
b2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:40:43:5F:BB:93:B6:09:D6:27:7B:6A:5A:77:04:00:97:68:B0:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D0BDX7uTtgnWJ3tqWncEAJdosOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:91:ce:6b:5c:03:f2:b9:29:c1:4e:77:13:9d:79:af:ff:bc:
e5:98:be:2d:03:2e:a8:f9:5a:de:9f:cd:34:10:a6:a1:ca:d8:
d7:7e:95:2f:dd:c2:ed:b0:f2:65:83:38:a4:09:ab:43:a2:b8:
20:89:6b:68:c9:fa:8d:47:8f:d3:1d:37:e5:a0:c9:d6:a9:bd:
9a:9e:df:1c:11:1a:f0:92:dd:42:4f:12:be:82:4a:a9:8c:88:
bf:4a:f2:51:70:92:f5:85:9e:6f:82:62:60:70:8a:82:ae:8c:
df:c3:3a:e4:5e:47:06:52:ff:3a:e9:76:59:a9:ad:b2:22:86:
d4:74:ba:30:4f:1b:91:67:89:8e:c9:c3:1f:51:d4:b7:de:30:
bf:33:05:37:b5:b4:31:77:0f:68:17:14:61:bd:dc:ba:62:52:
63:ef:5b:69:39:e7:44:45:03:c5:78:96:da:c2:46:6b:6d:7b:
97:18:0f:11:da:be:4e:a6:11:ab:d0:3f:33:3e:04:04:45:0a:
95:7f:84:55:b4:2a:a3:3c:50:38:93:7b:7f:71:b6:19:5b:80:
dc:15:7f:4a:3c:b6:66:59:72:12:28:aa:3c:a0:e5:e0:d1:4f:
a1:23:ae:19:a4:c7:79:ac:03:38:2b:01:ac:ee:42:d0:fe:f9:
66:d8:38:47
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYieWBQTjB+r5gWVPdGL/kh0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjA5MDQwOTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjQwNDM1ZmJiOTNiNjA5ZDYyNzdiNmE1YTc3MDQwMDk3NjhiMGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa/jzQzHOUYK9I1qy40nmnDbVYXR
OFBFQAwHilIP790zUby6AqjEvMmt2Y2yd//H8Iic21DIUtdyLFg9ll2tiPx4Im+3
mgJII7i/6uR1XNQWJKLosoJgH4cfEhVyPwK6v1KuZdabsV4I6dLAhYvp9s1ZFRTn
WvHEO5gMI1vQ7QFm7+u2NL0WS7nO65NVjybxq3GCm3ma3jCrd7aq+V/T1O/4FTTp
9tXDOHvPAMlHOnX/REGxL7/CR051GwVv1HX+eFbL4jbcRubUjK/Ew3YHZ3hlO0kC
otBel3FLpmgAYejbMEPkui4ESOMEY/s3N8Y/6zvmfpc1v3AXwaEj6uuyNQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFA9AQ1+7k7YJ1id7alp3BACXaLDjMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRDBCRFg3dVR0Z25XSjN0cVduY0VBSmRvc09NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFWRzmtcA/K5KcFOdxOd
ea//vOWYvi0DLqj5Wt6fzTQQpqHK2Nd+lS/dwu2w8mWDOKQJq0OiuCCJa2jJ+o1H
j9MdN+WgydapvZqe3xwRGvCS3UJPEr6CSqmMiL9K8lFwkvWFnm+CYmBwioKujN/D
OuReRwZS/zrpdlmprbIihtR0ujBPG5FniY7Jwx9R1LfeML8zBTe1tDF3D2gXFGG9
3LpiUmPvW2k550RFA8V4ltrCRmtte5cYDxHavk6mEavQPzM+BARFCpV/hFW0KqM8
UDiTe39xthlbgNwVf0o8tmZZchIoqjyg5eDRT6Ejrhmkx3msAzgrAazuQtD++WbY
OEc=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:20:39 2025 by rpki-client