Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M7UvrVYQPBkrHL8nS_axCPwedCs.roa
File: M7UvrVYQPBkrHL8nS_axCPwedCs.roa (raw, json)
Hash identifier: vhCvlkviaUMVRzDkG01d0yFqwO9S3Iz+yZD9qUJHkKA=
Subject key identifier: 33:B5:2F:AD:56:10:3C:19:2B:1C:BF:27:4B:F6:B1:08:FC:1E:74:2B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01893A937BC4B6746891EA5698EE8498B16A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M7UvrVYQPBkrHL8nS_axCPwedCs.roa
Signing time: Sun 09 Jul 2023 12:14:51 +0000
ROA not before: Sun 09 Jul 2023 12:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3a:93:7b:c4:b6:74:68:91:ea:56:98:ee:84:98:b1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 9 12:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33b52fad56103c192b1cbf274bf6b108fc1e742b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:42:75:19:2c:36:5d:65:41:94:16:6d:fa:cd:
a6:b4:2f:37:74:8e:98:b3:f4:6b:89:6d:05:de:d8:
38:6c:65:db:1d:33:d7:75:e4:9a:fb:b7:c6:26:1e:
81:aa:08:87:6e:17:11:c3:64:72:19:b7:a9:fc:45:
58:08:02:a0:fb:aa:f5:e5:2d:e9:74:70:1e:c5:79:
9c:47:c1:e4:b7:14:d9:ca:04:1c:95:08:8d:d2:55:
58:3f:2c:68:5d:93:d2:87:ce:7f:e6:88:10:96:2f:
59:0a:ad:64:13:4c:23:6b:36:5b:f3:e6:f8:9a:e2:
8a:7e:f2:23:b9:8e:d2:b8:9e:b7:1e:03:12:28:05:
9f:e2:9f:79:1a:c0:78:8c:39:9c:bb:61:71:41:0b:
3e:ef:8a:06:55:d0:86:89:89:be:af:9f:35:32:5b:
ae:cd:b1:26:b7:fb:3f:0c:98:02:40:8a:2b:c7:33:
b7:da:e1:66:84:e9:cd:06:98:51:eb:e0:a0:8e:2b:
ed:ec:ca:a2:a8:21:5f:3c:30:37:36:d1:a6:4b:58:
ad:21:fc:4f:33:d0:40:b2:b6:b8:16:3a:c3:06:a1:
e2:7a:c3:fa:0d:07:fe:22:cf:fe:ac:f5:eb:c7:3d:
29:68:3e:c4:ca:b4:c6:a6:17:18:cc:a9:45:44:9d:
74:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B5:2F:AD:56:10:3C:19:2B:1C:BF:27:4B:F6:B1:08:FC:1E:74:2B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M7UvrVYQPBkrHL8nS_axCPwedCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:cc:a2:45:ac:30:5f:42:08:7f:90:9c:87:cf:0a:e7:a1:7e:
a8:5e:ad:91:9c:cd:64:c9:d1:9c:4a:9a:60:2b:ea:71:f9:0b:
c5:ef:14:f5:98:72:4c:f5:d8:e1:da:f0:ff:c9:05:7f:53:a9:
bf:11:55:13:1e:f4:68:c7:3c:cb:bf:90:70:3b:14:5a:b6:59:
6b:d2:51:9d:8f:3b:7d:48:82:2c:66:ce:93:a0:e9:11:eb:09:
ba:ec:9d:26:78:c8:dc:27:a0:58:6d:7e:9f:a5:3c:01:ad:eb:
98:3c:63:7f:13:ef:e3:8e:96:03:71:db:e4:59:cb:1e:09:3a:
31:65:4b:f8:9e:55:a7:27:3a:5f:63:c5:31:d4:de:87:d1:d8:
d7:a7:c7:bf:c0:50:8d:c3:40:56:90:c4:45:13:82:88:3a:15:
85:06:c8:cc:5a:b6:7c:10:f0:4d:73:4b:55:71:0f:52:49:fe:
9a:2a:64:87:38:69:6e:8d:e0:05:20:85:41:94:97:50:e9:57:
99:04:ed:51:40:9e:f3:fe:ec:08:54:e7:d3:69:94:c6:c7:63:
46:42:50:ba:db:6b:d9:31:16:df:ad:4a:c1:12:be:83:d1:bf:
db:41:71:f9:ab:65:98:b4:ca:c8:be:42:b8:bc:df:83:fd:29:
5c:69:4b:b4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYk6k3vEtnRokepWmO6EmLFqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzA5MTIxNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2I1MmZhZDU2MTAzYzE5MmIxY2JmMjc0YmY2YjEwOGZjMWU3NDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkJ1GSw2XWVBlBZt+s2mtC83dI6Y
s/RriW0F3tg4bGXbHTPXdeSa+7fGJh6BqgiHbhcRw2RyGbep/EVYCAKg+6r15S3p
dHAexXmcR8HktxTZygQclQiN0lVYPyxoXZPSh85/5ogQli9ZCq1kE0wjazZb8+b4
muKKfvIjuY7SuJ63HgMSKAWf4p95GsB4jDmcu2FxQQs+74oGVdCGiYm+r581Mluu
zbEmt/s/DJgCQIorxzO32uFmhOnNBphR6+Cgjivt7MqiqCFfPDA3NtGmS1itIfxP
M9BAsra4FjrDBqHiesP6DQf+Is/+rPXrxz0paD7EyrTGphcYzKlFRJ10bwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDO1L61WEDwZKxy/J0v2sQj8HnQrMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTTdVdnJWWVFQQmtySEw4blNfYXhDUHdlZENzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALXMokWsMF9CCH+QnIfP
CuehfqherZGczWTJ0ZxKmmAr6nH5C8XvFPWYckz12OHa8P/JBX9Tqb8RVRMe9GjH
PMu/kHA7FFq2WWvSUZ2PO31IgixmzpOg6RHrCbrsnSZ4yNwnoFhtfp+lPAGt65g8
Y38T7+OOlgNx2+RZyx4JOjFlS/ieVacnOl9jxTHU3ofR2Nenx7/AUI3DQFaQxEUT
gog6FYUGyMxatnwQ8E1zS1VxD1JJ/poqZIc4aW6N4AUghUGUl1DpV5kE7VFAnvP+
7AhU59NplMbHY0ZCULrba9kxFt+tSsESvoPRv9tBcfmrZZi0ysi+Qri834P9KVxp
S7Q=
-----END CERTIFICATE-----
Generated at Thu May 1 00:28:54 2025 by rpki-client