Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IJzCN9g-4cvRHYJPPcRzDlY8Ycg.roa
File: IJzCN9g-4cvRHYJPPcRzDlY8Ycg.roa (raw, json)
Hash identifier: tRgqcPRbCl0Ivuq/8b8Hckwx1kH6bgl5lNveT1qqwnI=
Subject key identifier: 20:9C:C2:37:D8:3E:E1:CB:D1:1D:82:4F:3D:C4:73:0E:56:3C:61:C8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018741A439AEFDF159DF62EF90037E96766B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IJzCN9g-4cvRHYJPPcRzDlY8Ycg.roa
Signing time: Sun 02 Apr 2023 11:04:54 +0000
ROA not before: Sun 02 Apr 2023 11:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:41a3:bd18/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:41:a4:39:ae:fd:f1:59:df:62:ef:90:03:7e:96:76:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 2 11:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=209cc237d83ee1cbd11d824f3dc4730e563c61c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:75:7a:fd:fe:95:f4:cd:d0:6f:2a:98:b5:d9:
61:fd:e4:b4:87:07:82:82:f6:0a:8b:f4:05:47:88:
f5:e7:ce:cc:57:f8:98:56:70:99:39:f9:15:ca:c1:
49:e9:cf:44:ea:2a:81:4a:d4:79:4f:25:c7:de:e6:
84:9e:64:1d:9f:a1:29:2f:34:34:d8:d9:d9:e5:c8:
c7:09:fb:db:8b:e9:bc:e7:b7:f9:88:70:ac:06:84:
b1:b5:12:52:6b:32:b7:00:56:ca:6b:09:10:52:38:
ce:1f:ff:f5:07:b9:e7:26:36:14:ea:d1:49:38:bd:
18:6a:f6:f5:bc:19:5b:e6:31:2f:a7:ab:bc:3d:e7:
fd:0a:1d:a9:85:f2:c9:ce:4b:b4:3a:67:e2:e8:b8:
bd:89:56:d4:af:ef:cf:6b:30:7f:83:81:53:25:06:
fb:14:81:bb:6b:9c:a4:c7:d0:15:1d:a0:bb:8e:b0:
6c:aa:fe:2b:1c:f4:d1:c9:c3:c6:19:4e:90:42:f9:
31:bf:ad:b8:25:1d:5d:30:5d:a8:d7:e5:34:83:14:
76:21:37:7c:54:a3:b0:3e:2c:86:af:0c:40:c2:fa:
75:96:ff:86:1e:e4:f5:26:7e:e5:d6:2e:cd:88:f2:
4a:fd:19:e8:f3:c3:60:62:e0:f5:fc:62:f3:98:c1:
86:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9C:C2:37:D8:3E:E1:CB:D1:1D:82:4F:3D:C4:73:0E:56:3C:61:C8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IJzCN9g-4cvRHYJPPcRzDlY8Ycg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:69:51:d0:1a:56:d6:8c:5d:d1:2f:c0:f0:93:e0:dd:dc:ca:
c7:78:6e:4d:d2:a2:ad:95:f7:b0:6e:f8:9f:cb:a4:2e:ce:5e:
02:3f:f8:a8:85:55:24:a1:3f:1c:e6:82:18:e4:60:6b:5c:3b:
61:d1:3a:30:ed:29:27:fd:88:27:de:8c:45:04:9f:b3:57:2d:
4d:06:c9:0d:be:b5:e7:df:47:b4:d7:f3:f8:ad:cb:30:bc:ae:
98:79:3d:0a:a5:61:3c:c1:c2:a4:06:42:a8:5e:38:c0:f9:28:
43:3a:78:cf:26:d8:a1:c7:42:7e:2d:cc:26:90:dc:37:28:44:
fc:d5:41:6b:84:e7:7a:00:ec:e2:1d:6c:61:7d:07:d2:93:86:
33:fa:3e:39:d9:ac:cc:8d:30:cb:78:21:66:03:66:39:c5:a8:
6c:07:00:ec:e5:51:04:0c:42:47:b9:87:f8:86:60:29:2d:58:
4a:24:7b:0e:d5:58:fd:f9:db:40:59:8d:a5:0d:61:da:47:09:
f1:80:bf:4e:42:80:ae:0f:24:ea:8e:1c:fb:e5:ad:3e:c5:30:
64:01:f8:19:c0:cc:9b:f2:01:2a:7a:ce:18:d2:39:5e:42:4d:
5a:08:39:36:a2:e5:ac:84:7a:a1:ad:20:04:60:39:76:0b:3b:
b0:c8:17:a9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdBpDmu/fFZ32LvkAN+lnZrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDAyMTEwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDljYzIzN2Q4M2VlMWNiZDExZDgyNGYzZGM0NzMwZTU2M2M2MWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXV6/f6V9M3QbyqYtdlh/eS0hweC
gvYKi/QFR4j1587MV/iYVnCZOfkVysFJ6c9E6iqBStR5TyXH3uaEnmQdn6EpLzQ0
2NnZ5cjHCfvbi+m857f5iHCsBoSxtRJSazK3AFbKawkQUjjOH//1B7nnJjYU6tFJ
OL0Yavb1vBlb5jEvp6u8Pef9Ch2phfLJzku0Omfi6Li9iVbUr+/PazB/g4FTJQb7
FIG7a5ykx9AVHaC7jrBsqv4rHPTRycPGGU6QQvkxv624JR1dMF2o1+U0gxR2ITd8
VKOwPiyGrwxAwvp1lv+GHuT1Jn7l1i7NiPJK/Rno88NgYuD1/GLzmMGGewIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCCcwjfYPuHL0R2CTz3Ecw5WPGHIMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSUp6Q045Zy00Y3ZSSFlKUFBjUnpEbFk4WWNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFhpUdAaVtaMXdEvwPCT
4N3cysd4bk3Soq2V97Bu+J/LpC7OXgI/+KiFVSShPxzmghjkYGtcO2HROjDtKSf9
iCfejEUEn7NXLU0GyQ2+teffR7TX8/ityzC8rph5PQqlYTzBwqQGQqheOMD5KEM6
eM8m2KHHQn4tzCaQ3DcoRPzVQWuE53oA7OIdbGF9B9KThjP6PjnZrMyNMMt4IWYD
ZjnFqGwHAOzlUQQMQke5h/iGYCktWEokew7VWP3520BZjaUNYdpHCfGAv05CgK4P
JOqOHPvlrT7FMGQB+BnAzJvyASp6zhjSOV5CTVoIOTai5ayEeqGtIARgOXYLO7DI
F6k=
-----END CERTIFICATE-----
Generated at Fri May 2 18:34:53 2025 by rpki-client