Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LpE0Rp0ZVk1w_MD1r59DS1KqKF8.roa
File: LpE0Rp0ZVk1w_MD1r59DS1KqKF8.roa (raw, json)
Hash identifier: tWwdA/5tHF/PjHnIYQBGIsPFlUdnC/zWQ62f0Qhnmhc=
Subject key identifier: 2E:91:34:46:9D:19:56:4D:70:FC:C0:F5:AF:9F:43:4B:52:AA:28:5F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01871CC506A979AA9F5D6E8FA912032C55FB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LpE0Rp0ZVk1w_MD1r59DS1KqKF8.roa
Signing time: Sun 26 Mar 2023 07:14:46 +0000
ROA not before: Sun 26 Mar 2023 07:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1c:c5:06:a9:79:aa:9f:5d:6e:8f:a9:12:03:2c:55:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 26 07:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e9134469d19564d70fcc0f5af9f434b52aa285f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:79:bc:a4:81:2f:fe:c1:6a:b1:47:b7:a2:6d:
b5:d2:af:e9:31:2f:2f:ff:a7:17:a3:42:0e:e8:52:
01:9a:c2:1a:38:d5:db:e1:30:d8:12:b5:2b:14:80:
ec:56:68:4c:80:8e:15:e5:0f:b9:d8:be:42:c7:a2:
23:50:0e:60:6d:de:7e:99:f6:98:10:c2:e5:d8:dc:
00:78:ee:46:d1:ad:46:64:07:75:6a:da:6d:a1:30:
28:e6:52:eb:14:c3:0e:0b:d5:51:95:c4:ae:ee:d2:
61:65:eb:1c:1e:25:9f:07:22:e1:82:33:70:7a:66:
34:8c:61:6b:f2:54:5c:13:50:b7:55:55:8d:aa:bf:
68:9a:fd:00:cb:08:65:89:ad:9b:92:74:f5:7b:af:
e8:82:dd:64:79:88:21:4e:42:68:58:f8:11:3d:f1:
64:20:01:57:69:0f:b7:0b:e8:2d:0a:36:4c:1b:a4:
ad:a7:20:b4:d2:99:ba:67:4f:ab:e4:7e:12:2c:f7:
d7:76:70:4f:35:29:cf:2a:4e:bd:fe:21:9f:66:90:
60:e4:29:50:be:fe:10:bc:05:9b:a7:70:08:32:13:
62:d7:d1:72:64:06:03:c2:67:51:b7:c3:36:8c:2d:
25:72:a5:ea:28:17:d3:df:2f:aa:20:61:f9:db:21:
ed:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:91:34:46:9D:19:56:4D:70:FC:C0:F5:AF:9F:43:4B:52:AA:28:5F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LpE0Rp0ZVk1w_MD1r59DS1KqKF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:34:58:1d:a6:c3:85:af:4f:6f:d7:86:4e:42:16:27:5a:f0:
70:ab:4b:43:87:15:40:9b:4c:6f:a2:a1:e0:44:a2:0b:ab:b5:
ce:0e:ae:83:75:d4:7e:26:b9:a8:d2:7b:b3:e5:c6:b6:e8:9f:
7b:a0:9e:97:f2:19:08:e0:71:14:9b:ae:f7:33:a2:c8:c0:fa:
04:15:c3:0e:17:53:5e:e0:7c:60:c8:f7:f1:3d:ee:d1:c9:53:
37:cf:d8:9e:e0:b6:87:c7:27:f5:eb:66:de:9d:c5:fa:d6:cf:
74:c4:9b:67:48:35:ca:51:fe:1b:03:a9:35:d8:e9:82:a8:3b:
8f:e5:41:3c:16:d0:72:de:76:49:09:70:df:30:85:60:c6:bd:
81:93:d5:76:3e:36:22:be:2c:46:c0:37:02:1a:5d:62:ad:7d:
c7:11:b8:82:3a:74:3d:f0:b0:d8:ad:6e:7e:24:93:4f:80:c1:
0d:df:08:95:29:a8:e1:52:e2:0c:1e:35:f2:eb:39:25:eb:f2:
c2:f7:0c:a3:85:2e:41:42:7f:22:70:85:b2:d1:00:15:8d:b9:
f8:16:86:5c:3f:18:0c:8b:58:ff:ff:10:29:0c:2c:ba:fa:f2:
9a:a5:34:e4:dd:b1:90:28:5f:e7:eb:2c:24:34:73:5c:5f:b1:
19:3c:17:b9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYccxQapeaqfXW6PqRIDLFX7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzI2MDcxNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTkxMzQ0NjlkMTk1NjRkNzBmY2MwZjVhZjlmNDM0YjUyYWEyODVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3m8pIEv/sFqsUe3om210q/pMS8v
/6cXo0IO6FIBmsIaONXb4TDYErUrFIDsVmhMgI4V5Q+52L5Cx6IjUA5gbd5+mfaY
EMLl2NwAeO5G0a1GZAd1atptoTAo5lLrFMMOC9VRlcSu7tJhZescHiWfByLhgjNw
emY0jGFr8lRcE1C3VVWNqr9omv0Aywhlia2bknT1e6/ogt1keYghTkJoWPgRPfFk
IAFXaQ+3C+gtCjZMG6StpyC00pm6Z0+r5H4SLPfXdnBPNSnPKk69/iGfZpBg5ClQ
vv4QvAWbp3AIMhNi19FyZAYDwmdRt8M2jC0lcqXqKBfT3y+qIGH52yHtUwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFC6RNEadGVZNcPzA9a+fQ0tSqihfMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTHBFMFJwMFpWazF3X01EMXI1OURTMUtxS0Y4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKI0WB2mw4WvT2/Xhk5C
Fida8HCrS0OHFUCbTG+ioeBEogurtc4OroN11H4muajSe7Plxrbon3ugnpfyGQjg
cRSbrvczosjA+gQVww4XU17gfGDI9/E97tHJUzfP2J7gtofHJ/XrZt6dxfrWz3TE
m2dINcpR/hsDqTXY6YKoO4/lQTwW0HLedkkJcN8whWDGvYGT1XY+NiK+LEbANwIa
XWKtfccRuII6dD3wsNitbn4kk0+AwQ3fCJUpqOFS4gweNfLrOSXr8sL3DKOFLkFC
fyJwhbLRABWNufgWhlw/GAyLWP//ECkMLLr68pqlNOTdsZAoX+frLCQ0c1xfsRk8
F7k=
-----END CERTIFICATE-----
Generated at Sun May 4 05:25:24 2025 by rpki-client