Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IyPbtS60iIK8W1HO9lZgXS6beNs.roa
File: IyPbtS60iIK8W1HO9lZgXS6beNs.roa (raw, json)
Hash identifier: ts7UMvjf6lKRmx6ezg50FRasliMIeOoeejmtaW+zn0c=
Subject key identifier: 23:23:DB:B5:2E:B4:88:82:BC:5B:51:CE:F6:56:60:5D:2E:9B:78:DB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018942161838C2CA051DF4B439082AB5701A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IyPbtS60iIK8W1HO9lZgXS6beNs.roa
Signing time: Mon 10 Jul 2023 23:14:51 +0000
ROA not before: Mon 10 Jul 2023 23:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:42:16:18:38:c2:ca:05:1d:f4:b4:39:08:2a:b5:70:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 10 23:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2323dbb52eb48882bc5b51cef656605d2e9b78db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4f:96:88:ea:ab:a0:af:50:b5:02:34:c9:d6:
ac:1e:6f:79:cf:cf:3d:f2:7d:45:a4:6e:30:5e:fd:
4b:53:1e:fe:40:72:09:f7:ff:b2:66:38:67:b4:83:
1c:14:07:3c:49:0b:17:4e:f4:91:fb:a9:53:58:d1:
07:71:f8:7a:4f:98:e2:d9:97:b8:ab:26:45:46:3d:
51:b3:6b:66:1a:05:4e:a8:0e:38:7a:a2:9a:39:17:
6b:61:45:21:23:6a:ed:de:96:19:5a:fe:c2:36:c8:
92:41:05:bd:09:f2:ec:77:5b:12:7e:cf:c0:bf:16:
f9:a2:32:af:64:e4:ed:e8:b0:de:10:76:1e:cb:a6:
c2:2f:a5:26:aa:0e:53:83:f1:ea:7d:08:36:08:66:
7c:21:9d:28:8d:27:0e:3c:23:22:d3:f6:39:d2:98:
c0:bf:61:aa:bf:0b:86:73:a8:ea:19:d9:83:a7:35:
fd:34:93:cd:81:ea:18:de:3b:bf:3a:23:e5:10:75:
b7:d7:c0:6c:3a:ab:b1:31:49:cb:3f:e7:fb:c9:be:
36:78:4c:be:45:ce:dc:b5:37:9c:d3:2f:13:c6:3f:
1e:61:2b:0a:9a:4d:06:46:97:13:7a:6c:e7:f5:67:
2b:ba:bf:e8:80:0c:3c:e1:fb:08:42:26:46:e7:85:
1a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:23:DB:B5:2E:B4:88:82:BC:5B:51:CE:F6:56:60:5D:2E:9B:78:DB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IyPbtS60iIK8W1HO9lZgXS6beNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:c2:2d:7d:d8:f2:a0:b0:51:78:62:1d:20:a2:a5:50:e1:bb:
e4:a1:de:ac:1a:3c:fa:b8:11:c0:fd:5f:96:e3:77:4b:d1:2a:
82:04:d8:26:6f:64:52:06:bf:d4:3f:d1:d6:77:55:81:91:bb:
aa:0c:1f:b8:9c:ae:7c:2b:88:0c:52:de:57:0c:b2:f1:71:a9:
5f:da:ca:e3:b4:95:6a:f9:46:1e:96:67:6b:78:ff:5b:8b:72:
61:af:59:ac:1d:0b:bf:c1:5b:b6:1e:4b:35:9e:ad:7e:0f:87:
44:3c:f9:10:62:bc:ae:84:d4:80:a9:a1:a2:a6:62:7c:3e:76:
56:75:93:c9:5b:1e:55:41:1c:d3:03:ab:c0:d5:d2:c0:7d:e4:
d3:59:72:d7:37:77:7c:b6:6e:b1:73:a1:f3:57:5a:fd:ac:49:
d0:4e:ac:6b:0b:44:b1:08:c7:5a:62:b8:89:71:31:ce:bc:2e:
ae:f3:31:a4:f2:4d:87:53:ab:0e:8c:76:84:e6:bf:15:dd:cd:
6a:37:a1:ca:6b:10:60:6e:35:25:b8:46:33:95:d1:51:d8:3c:
45:cf:7f:b9:77:34:2f:bc:32:f3:a8:88:f0:94:76:d3:93:9b:
6f:96:65:96:dc:3c:12:7f:18:41:47:99:b1:88:2c:37:88:44:
a2:e7:e7:7d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlCFhg4wsoFHfS0OQgqtXAaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzEwMjMxNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzIzZGJiNTJlYjQ4ODgyYmM1YjUxY2VmNjU2NjA1ZDJlOWI3OGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0+WiOqroK9QtQI0ydasHm95z889
8n1FpG4wXv1LUx7+QHIJ9/+yZjhntIMcFAc8SQsXTvSR+6lTWNEHcfh6T5ji2Ze4
qyZFRj1Rs2tmGgVOqA44eqKaORdrYUUhI2rt3pYZWv7CNsiSQQW9CfLsd1sSfs/A
vxb5ojKvZOTt6LDeEHYey6bCL6Umqg5Tg/HqfQg2CGZ8IZ0ojScOPCMi0/Y50pjA
v2GqvwuGc6jqGdmDpzX9NJPNgeoY3ju/OiPlEHW318BsOquxMUnLP+f7yb42eEy+
Rc7ctTec0y8Txj8eYSsKmk0GRpcTemzn9Wcrur/ogAw84fsIQiZG54UaBwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCMj27UutIiCvFtRzvZWYF0um3jbMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSXlQYnRTNjBpSUs4VzFITzlsWmdYUzZiZU5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEzCLX3Y8qCwUXhiHSCi
pVDhu+Sh3qwaPPq4EcD9X5bjd0vRKoIE2CZvZFIGv9Q/0dZ3VYGRu6oMH7icrnwr
iAxS3lcMsvFxqV/ayuO0lWr5Rh6WZ2t4/1uLcmGvWawdC7/BW7YeSzWerX4Ph0Q8
+RBivK6E1ICpoaKmYnw+dlZ1k8lbHlVBHNMDq8DV0sB95NNZctc3d3y2brFzofNX
Wv2sSdBOrGsLRLEIx1piuIlxMc68Lq7zMaTyTYdTqw6MdoTmvxXdzWo3ocprEGBu
NSW4RjOV0VHYPEXPf7l3NC+8MvOoiPCUdtOTm2+WZZbcPBJ/GEFHmbGILDeIRKLn
530=
-----END CERTIFICATE-----
Generated at Fri May 2 10:45:26 2025 by rpki-client