Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DjIK1SS7MR-Hd_0xh3iwPQNzfTc.roa
File: DjIK1SS7MR-Hd_0xh3iwPQNzfTc.roa (raw, json)
Hash identifier: 5btaw556n7sGBwoyFUs5nRLN+XsFKgcqIryBbtTd3ks=
Subject key identifier: 0E:32:0A:D5:24:BB:31:1F:87:77:FD:31:87:78:B0:3D:03:73:7D:37
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018959398E413C707709622C31F1EF2B2F38
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DjIK1SS7MR-Hd_0xh3iwPQNzfTc.roa
Signing time: Sat 15 Jul 2023 11:04:51 +0000
ROA not before: Sat 15 Jul 2023 11:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:189:5939:102c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:59:39:8e:41:3c:70:77:09:62:2c:31:f1:ef:2b:2f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 15 11:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e320ad524bb311f8777fd318778b03d03737d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:15:fa:6d:12:42:9b:e3:97:d2:01:9b:0e:
3d:b3:f9:28:0a:d3:99:d2:4d:70:9b:0d:40:8e:58:
e0:b1:a7:ed:16:51:a0:16:19:c9:49:61:64:a8:93:
99:ba:ce:0c:0d:99:45:4a:d8:9c:51:a7:f2:80:d0:
33:bf:50:55:ae:83:93:92:a6:1c:ab:07:86:e6:b9:
c0:43:67:34:66:bf:9b:81:88:a7:b6:03:0a:64:88:
a1:9a:ac:7d:8a:59:52:a7:68:f7:94:44:d0:a0:0f:
b8:c8:41:0b:f0:ce:76:c0:52:11:a3:20:8f:d7:46:
05:a6:73:6f:fd:a6:e6:c4:00:3e:61:a2:32:e7:44:
8f:48:fe:43:2d:56:75:ad:ab:83:a4:31:c7:91:79:
71:a7:8b:0c:5e:8f:a6:f3:39:22:0b:a5:86:78:5a:
66:39:1c:01:b8:95:f0:ce:73:00:37:e4:5c:9b:a0:
ed:6e:f3:5f:96:1e:3d:d4:74:8e:03:f8:fb:40:e8:
b8:93:16:98:09:b9:75:01:b8:5f:b6:cc:c0:b7:20:
18:62:2a:1e:96:f7:13:8a:0a:50:00:2c:88:ff:98:
59:83:47:13:3a:c5:f8:3b:93:0e:89:c0:6e:9f:10:
32:ad:97:a8:93:11:59:40:5e:21:d7:0d:a2:f3:7c:
e8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:32:0A:D5:24:BB:31:1F:87:77:FD:31:87:78:B0:3D:03:73:7D:37
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DjIK1SS7MR-Hd_0xh3iwPQNzfTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:06:cd:ac:4d:91:eb:a5:e4:b6:ce:f8:02:43:4e:ab:12:ef:
73:d1:ef:7f:ae:ae:4d:57:9f:10:58:47:3e:1e:26:70:b1:3c:
a3:8f:02:53:fe:7a:71:39:79:18:86:10:ec:4b:c0:36:06:4f:
92:af:da:9e:c1:7e:df:10:ed:71:3f:e5:4c:cb:79:be:26:d3:
56:83:aa:1e:d5:47:be:f2:6d:cf:b1:84:de:4d:5c:44:f3:e5:
a9:06:f3:8b:91:2d:1e:bc:58:1e:37:eb:a6:91:7c:d8:0d:29:
78:db:77:9a:ff:41:8f:7e:dd:e7:d2:f0:2c:30:48:85:c5:63:
24:e2:fd:05:22:9f:c0:2c:0b:d2:44:b8:9e:e6:c7:85:58:90:
d4:87:ce:82:fe:9d:e6:34:2e:5f:63:ab:df:c5:55:b5:c7:5d:
c1:f9:75:61:2f:f9:ad:25:d8:4b:13:72:25:48:a5:6d:4c:aa:
4d:6f:fa:de:cc:9d:70:e0:d8:6b:51:7b:37:21:26:84:ae:5b:
f2:7b:b0:1d:12:75:98:70:e0:3a:fd:1c:e3:e5:1e:ca:9c:dd:
ff:91:7d:ba:d8:9b:ad:95:98:73:98:8e:3b:74:90:f1:6c:92:
ca:61:69:91:a4:8c:7d:9f:8e:d9:f8:c9:14:dc:de:5a:f2:3f:
f2:89:2a:a5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlZOY5BPHB3CWIsMfHvKy84MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzE1MTEwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTMyMGFkNTI0YmIzMTFmODc3N2ZkMzE4Nzc4YjAzZDAzNzM3ZDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMwV+m0SQpvjl9IBmw49s/koCtOZ
0k1wmw1AjljgsaftFlGgFhnJSWFkqJOZus4MDZlFSticUafygNAzv1BVroOTkqYc
qweG5rnAQ2c0Zr+bgYintgMKZIihmqx9illSp2j3lETQoA+4yEEL8M52wFIRoyCP
10YFpnNv/abmxAA+YaIy50SPSP5DLVZ1rauDpDHHkXlxp4sMXo+m8zkiC6WGeFpm
ORwBuJXwznMAN+Rcm6DtbvNflh491HSOA/j7QOi4kxaYCbl1AbhftszAtyAYYioe
lvcTigpQACyI/5hZg0cTOsX4O5MOicBunxAyrZeokxFZQF4h1w2i83zonQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFA4yCtUkuzEfh3f9MYd4sD0Dc303MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRGpJSzFTUzdNUi1IZF8weGgzaXdQUU56ZlRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFIGzaxNkeul5LbO+AJD
TqsS73PR73+urk1XnxBYRz4eJnCxPKOPAlP+enE5eRiGEOxLwDYGT5Kv2p7Bft8Q
7XE/5UzLeb4m01aDqh7VR77ybc+xhN5NXETz5akG84uRLR68WB4366aRfNgNKXjb
d5r/QY9+3efS8CwwSIXFYyTi/QUin8AsC9JEuJ7mx4VYkNSHzoL+neY0Ll9jq9/F
VbXHXcH5dWEv+a0l2EsTciVIpW1Mqk1v+t7MnXDg2GtRezchJoSuW/J7sB0SdZhw
4Dr9HOPlHsqc3f+RfbrYm62VmHOYjjt0kPFsksphaZGkjH2fjtn4yRTc3lryP/KJ
KqU=
-----END CERTIFICATE-----
Generated at Thu May 1 00:40:58 2025 by rpki-client