Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IT5Qzdp11pvs5qS7E6MFcnttevc.roa
File: IT5Qzdp11pvs5qS7E6MFcnttevc.roa (raw, json)
Hash identifier: cVrB+8iNM7yZHBN3ouhSB7vrR89A9aRkYPhY5a3WqYw=
Subject key identifier: 21:3E:50:CD:DA:75:D6:9B:EC:E6:A4:BB:13:A3:05:72:7B:6D:7A:F7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885CE708EE6D5D12286860CB7837ED4B3C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IT5Qzdp11pvs5qS7E6MFcnttevc.roa
Signing time: Sat 27 May 2023 11:10:24 +0000
ROA not before: Sat 27 May 2023 11:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5c:e7:08:ee:6d:5d:12:28:68:60:cb:78:37:ed:4b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 27 11:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=213e50cdda75d69bece6a4bb13a305727b6d7af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f8:82:55:ca:26:7e:eb:f0:fd:51:8f:36:ae:
b6:37:5f:e3:36:e3:0a:63:70:dc:69:61:73:61:0b:
94:f1:a3:9b:f0:1b:96:30:a5:ff:4d:70:0d:78:a2:
5d:f7:b4:e6:bb:f4:8a:bc:1a:7b:7f:3c:12:33:56:
d7:05:6b:b6:6b:54:db:09:d7:fc:52:ed:df:11:1f:
6d:3e:56:de:5c:94:f8:1d:c7:5d:f2:4b:83:65:58:
cd:32:37:13:b8:99:1c:c2:f1:5e:ed:eb:80:60:4d:
73:ab:27:fe:b9:93:35:eb:aa:f2:3f:81:ac:f4:92:
39:a9:f7:da:1a:1a:99:58:40:56:a8:dd:82:37:1a:
50:1b:c1:3b:02:8d:58:84:df:8e:7a:e6:0d:3e:48:
eb:89:b7:3e:e0:26:ed:13:e4:2f:51:6b:fd:a5:ee:
26:0d:ac:6b:dc:5f:21:b2:63:1e:10:d5:97:11:2d:
77:3b:81:32:03:f4:16:0e:3c:5f:9e:de:83:8c:f4:
22:1b:5b:ac:d3:58:cc:c9:e5:5a:ff:bb:ec:28:a3:
85:b3:3b:fc:2b:32:61:a7:13:eb:c7:0c:09:25:c9:
5b:cf:fe:5a:d2:58:43:dd:4d:cc:81:9c:26:81:65:
bc:da:6a:51:5c:ee:8d:0a:50:7e:3b:90:77:2b:47:
cc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3E:50:CD:DA:75:D6:9B:EC:E6:A4:BB:13:A3:05:72:7B:6D:7A:F7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IT5Qzdp11pvs5qS7E6MFcnttevc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:47:43:06:12:1e:3f:de:2d:1e:1b:ad:00:c6:72:d0:eb:d7:
7a:63:c6:97:9b:2f:63:00:c8:e3:76:ca:d3:0b:ae:70:af:ad:
95:fe:21:fc:70:4f:ec:9c:7d:25:90:4a:f4:5d:0b:64:ec:24:
f0:c2:65:03:e0:a8:2b:43:fd:77:5c:b7:d8:f0:3c:c7:70:a8:
df:79:6b:41:4c:7d:5e:2a:8e:43:cb:d7:b5:77:67:cf:73:2f:
8d:45:c9:10:b5:cd:f8:04:8d:c1:85:b9:76:56:a2:5a:c7:75:
6d:ce:70:2b:7e:cc:f2:74:d7:06:d2:ba:d1:08:e4:14:9e:0c:
c0:c1:9a:ae:1d:1d:c3:22:e3:a4:99:e4:16:29:85:29:32:59:
e8:52:a9:85:6c:f2:f2:78:c7:f4:8e:1a:34:60:e7:de:ff:f2:
49:8d:ed:0b:ef:80:4d:d4:6a:36:21:89:09:ab:4f:3f:24:2a:
cf:55:ac:d8:a5:a6:73:28:2f:d4:09:9a:34:8c:ca:cf:be:72:
31:81:c1:4b:3c:35:85:a0:7b:cc:0c:b0:2b:57:d0:81:e3:5c:
98:cd:7e:cf:28:45:74:d3:fb:e1:54:cc:98:0e:15:dc:db:d5:
16:bc:3f:40:05:39:81:be:a4:9e:d6:e4:75:43:08:95:01:fd:
20:dc:71:60
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhc5wjubV0SKGhgy3g37Us8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTI3MTExMDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTNlNTBjZGRhNzVkNjliZWNlNmE0YmIxM2EzMDU3MjdiNmQ3YWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgviCVcomfuvw/VGPNq62N1/jNuMK
Y3DcaWFzYQuU8aOb8BuWMKX/TXANeKJd97Tmu/SKvBp7fzwSM1bXBWu2a1TbCdf8
Uu3fER9tPlbeXJT4Hcdd8kuDZVjNMjcTuJkcwvFe7euAYE1zqyf+uZM166ryP4Gs
9JI5qffaGhqZWEBWqN2CNxpQG8E7Ao1YhN+OeuYNPkjribc+4CbtE+QvUWv9pe4m
Daxr3F8hsmMeENWXES13O4EyA/QWDjxfnt6DjPQiG1us01jMyeVa/7vsKKOFszv8
KzJhpxPrxwwJJclbz/5a0lhD3U3MgZwmgWW82mpRXO6NClB+O5B3K0fMswIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCE+UM3addab7OakuxOjBXJ7bXr3MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSVQ1UXpkcDExcHZzNXFTN0U2TUZjbnR0ZXZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH5HQwYSHj/eLR4brQDG
ctDr13pjxpebL2MAyON2ytMLrnCvrZX+IfxwT+ycfSWQSvRdC2TsJPDCZQPgqCtD
/Xdct9jwPMdwqN95a0FMfV4qjkPL17V3Z89zL41FyRC1zfgEjcGFuXZWolrHdW3O
cCt+zPJ01wbSutEI5BSeDMDBmq4dHcMi46SZ5BYphSkyWehSqYVs8vJ4x/SOGjRg
597/8kmN7QvvgE3UajYhiQmrTz8kKs9VrNilpnMoL9QJmjSMys++cjGBwUs8NYWg
e8wMsCtX0IHjXJjNfs8oRXTT++FUzJgOFdzb1Ra8P0AFOYG+pJ7W5HVDCJUB/SDc
cWA=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:15:59 2025 by rpki-client