Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HaDLnP1byGfWs5aT_5Ot6AmfpOc.roa
File: HaDLnP1byGfWs5aT_5Ot6AmfpOc.roa (raw, json)
Hash identifier: SL5qHb/OztNy4fLKZI9S8ePpCnjbmN/8uGn4YiWu4p8=
Subject key identifier: 1D:A0:CB:9C:FD:5B:C8:67:D6:B3:96:93:FF:93:AD:E8:09:9F:A4:E7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187175E934A6F8F390249470D05418B3FD8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HaDLnP1byGfWs5aT_5Ot6AmfpOc.roa
Signing time: Sat 25 Mar 2023 06:04:46 +0000
ROA not before: Sat 25 Mar 2023 06:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:175e:5d4d/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:17:5e:93:4a:6f:8f:39:02:49:47:0d:05:41:8b:3f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 25 06:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1da0cb9cfd5bc867d6b39693ff93ade8099fa4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:73:d5:c3:5d:0b:f4:62:93:a6:5a:c1:ed:fa:
56:01:ac:6c:6b:be:ea:07:27:df:c9:1a:46:21:13:
45:8c:49:7d:08:98:cb:69:15:73:3e:c8:0a:47:66:
06:0d:cd:39:d2:6f:9e:59:9a:c0:e8:f7:1c:27:79:
20:d9:66:fc:97:c2:1e:d1:85:29:56:14:ae:72:6e:
e7:94:88:75:94:e9:86:a6:12:39:0a:11:fa:4e:82:
98:fc:c7:66:ed:a9:8b:b0:29:9a:b8:98:35:63:73:
0e:46:ad:bb:cb:4e:a2:38:ac:0c:1d:5a:23:f6:d4:
d7:57:d1:54:a2:9b:21:f9:02:9a:80:9d:4a:1f:80:
63:f3:2b:b9:a1:d3:ba:6f:39:13:68:41:cb:2a:01:
ea:11:69:ca:12:d7:b9:f6:c3:30:ec:d8:0a:a8:1d:
d6:2e:f0:e8:23:49:e6:39:c2:e4:ed:ee:1b:47:bf:
dd:a7:89:a8:b5:50:96:4d:54:6d:6b:3d:f5:9e:7e:
1a:56:98:a1:5c:a3:27:34:de:51:c8:75:e5:b6:4f:
1b:f7:1e:18:2d:d4:a1:ed:b2:58:57:e7:47:75:bc:
66:3c:09:1b:0d:7a:e0:9b:a4:91:26:68:db:41:a0:
57:35:a9:f0:8f:ab:31:d2:be:54:a7:9a:e7:82:37:
0e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A0:CB:9C:FD:5B:C8:67:D6:B3:96:93:FF:93:AD:E8:09:9F:A4:E7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HaDLnP1byGfWs5aT_5Ot6AmfpOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:b4:6f:9b:43:af:f1:63:53:8f:1a:67:cb:6b:f4:26:a7:1a:
72:d2:25:27:cd:be:58:b4:f3:81:da:9a:76:0d:da:02:ec:c0:
59:f6:2a:66:ca:c8:27:2a:06:a1:e6:25:93:8e:46:d8:da:fd:
e5:63:63:f9:c3:ca:c3:7c:fa:d2:7a:86:36:16:d5:e1:3d:5c:
5c:b6:6e:9a:a6:62:b5:b5:30:04:6a:de:06:5f:ea:12:19:86:
fb:ce:ea:75:03:66:92:17:27:5b:7b:e0:c4:a2:bc:67:30:c8:
42:35:b0:86:5d:5c:18:97:3d:d2:31:40:d3:21:3b:3c:bc:c5:
e3:e0:8a:fd:3c:d4:85:3b:98:fe:50:16:78:cd:90:57:7b:85:
fe:6e:85:21:2b:3f:2e:0e:a9:29:a9:1a:c4:85:2c:55:76:7f:
7f:47:05:27:9a:19:c4:9e:23:b3:c6:4e:6b:16:36:fa:37:da:
c4:96:e2:a4:a2:57:1a:6f:81:06:d0:b3:ad:91:f5:fc:c1:83:
fa:09:7e:01:77:9b:e1:8b:47:11:92:b7:01:6f:64:1b:5a:63:
3d:f8:e7:cc:a2:ff:0d:37:06:7c:a8:0c:a3:f3:46:35:f0:09:
e5:65:29:09:d8:26:51:f5:3c:50:70:f5:19:0f:c3:8f:a3:95:
55:f9:7c:3b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYcXXpNKb485AklHDQVBiz/YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzI1MDYwNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGEwY2I5Y2ZkNWJjODY3ZDZiMzk2OTNmZjkzYWRlODA5OWZhNGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnPVw10L9GKTplrB7fpWAaxsa77q
ByffyRpGIRNFjEl9CJjLaRVzPsgKR2YGDc050m+eWZrA6PccJ3kg2Wb8l8Ie0YUp
VhSucm7nlIh1lOmGphI5ChH6ToKY/Mdm7amLsCmauJg1Y3MORq27y06iOKwMHVoj
9tTXV9FUopsh+QKagJ1KH4Bj8yu5odO6bzkTaEHLKgHqEWnKEte59sMw7NgKqB3W
LvDoI0nmOcLk7e4bR7/dp4motVCWTVRtaz31nn4aVpihXKMnNN5RyHXltk8b9x4Y
LdSh7bJYV+dHdbxmPAkbDXrgm6SRJmjbQaBXNanwj6sx0r5Up5rngjcOEQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFB2gy5z9W8hn1rOWk/+TregJn6TnMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSGFETG5QMWJ5R2ZXczVhVF81T3Q2QW1mcE9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACK0b5tDr/FjU48aZ8tr
9CanGnLSJSfNvli084HamnYN2gLswFn2KmbKyCcqBqHmJZOORtja/eVjY/nDysN8
+tJ6hjYW1eE9XFy2bpqmYrW1MARq3gZf6hIZhvvO6nUDZpIXJ1t74MSivGcwyEI1
sIZdXBiXPdIxQNMhOzy8xePgiv081IU7mP5QFnjNkFd7hf5uhSErPy4OqSmpGsSF
LFV2f39HBSeaGcSeI7PGTmsWNvo32sSW4qSiVxpvgQbQs62R9fzBg/oJfgF3m+GL
RxGStwFvZBtaYz3458yi/w03BnyoDKPzRjXwCeVlKQnYJlH1PFBw9RkPw4+jlVX5
fDs=
-----END CERTIFICATE-----
Generated at Thu May 1 05:37:12 2025 by rpki-client