Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O59FKGlJ12gehLhr0sgf4CrhG9U.roa
File: O59FKGlJ12gehLhr0sgf4CrhG9U.roa (raw, json)
Hash identifier: 7lcIQphnRK7sn1/rOvJvsl6irR/N5rOcDYsmLQKJKWE=
Subject key identifier: 3B:9F:45:28:69:49:D7:68:1E:84:B8:6B:D2:C8:1F:E0:2A:E1:1B:D5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01884D01832A812524D3090E5CCDE04DC16D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O59FKGlJ12gehLhr0sgf4CrhG9U.roa
Signing time: Wed 24 May 2023 09:05:24 +0000
ROA not before: Wed 24 May 2023 09:05:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:188:4d00:ca22/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4d:01:83:2a:81:25:24:d3:09:0e:5c:cd:e0:4d:c1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 24 09:05:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b9f45286949d7681e84b86bd2c81fe02ae11bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:33:7a:2d:d3:39:e8:4d:43:08:0a:ae:10:63:
db:0a:65:0a:9f:0c:00:3a:aa:b5:7a:74:07:ad:d2:
a4:a1:7a:9d:bf:f6:1c:fa:46:c0:4e:f5:f2:b8:4f:
89:70:5f:d7:02:4d:17:2e:73:36:df:3e:d5:09:15:
01:06:d9:f9:54:a9:c7:9c:18:3d:26:67:4b:90:89:
cb:2d:fa:53:f7:2f:00:71:45:2f:b0:b0:b9:f6:be:
ee:a8:d6:2b:54:a4:77:73:3e:c4:43:96:b6:0b:d3:
1c:90:e9:06:cc:60:61:58:e0:90:55:5f:4d:3b:38:
7d:d8:d1:38:19:9c:e9:a5:34:a1:61:23:6d:02:dd:
72:18:fd:df:ea:cb:2d:53:12:3a:8a:fd:6f:2c:91:
2a:ae:f1:e5:7d:14:4e:c6:41:df:9e:17:ac:4a:3d:
91:60:2d:d7:15:11:6e:f2:f9:d5:e2:18:89:34:4b:
0e:b9:37:1a:2f:0d:b9:33:82:3c:1e:b6:00:31:08:
6e:26:2a:96:68:d1:0b:ff:d5:61:ef:19:be:80:da:
b8:50:f2:89:c7:3a:c6:c5:bc:11:b3:21:03:46:5a:
c4:ff:be:6c:34:b4:35:5d:e3:26:1e:c6:2d:f4:5b:
a0:ed:39:22:34:1f:a7:ed:72:0d:e0:33:35:71:12:
d7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9F:45:28:69:49:D7:68:1E:84:B8:6B:D2:C8:1F:E0:2A:E1:1B:D5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/O59FKGlJ12gehLhr0sgf4CrhG9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:bf:fc:d9:eb:2d:56:5a:45:70:db:ef:cd:cd:a4:cb:c5:62:
f0:3a:ec:29:0a:a4:e0:5f:42:43:44:db:11:5e:09:fc:25:a3:
b5:b6:3d:97:1b:db:1a:5b:4c:67:1b:5b:61:43:59:5f:3e:b7:
5f:ee:4d:5e:26:58:4b:0b:b7:0b:d7:10:a9:f2:3a:51:2b:a0:
67:7c:56:80:d4:12:3e:a5:db:fc:b7:d2:4e:b0:31:cf:cb:3f:
a3:0e:a7:9c:8f:ff:02:f7:7a:92:86:65:f9:d9:f9:96:fd:05:
71:10:80:83:f4:79:9a:94:14:ef:19:8e:45:4b:3f:b4:92:99:
28:fd:8c:66:45:dc:a3:2a:b7:ca:cb:37:62:5a:2e:c2:2d:f1:
cc:48:8d:4e:d5:de:24:91:59:dd:ce:07:d1:68:ed:3d:d2:ae:
98:2e:ae:7f:41:58:a3:1a:52:10:84:eb:5e:f7:eb:ba:51:8c:
34:80:4a:32:f3:ee:1c:96:1a:66:4f:94:67:bd:09:53:37:17:
7c:35:00:5e:3c:7b:4e:d6:a7:5d:af:8c:c2:75:75:f0:69:3f:
00:99:fc:78:00:34:0d:d4:0e:c5:6a:f7:84:61:90:92:24:7b:
1e:0e:5a:36:1e:40:b8:1b:ba:2c:5e:e8:aa:57:b1:1d:f7:cf:
91:2c:29:98
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhNAYMqgSUk0wkOXM3gTcFtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTI0MDkwNTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjlmNDUyODY5NDlkNzY4MWU4NGI4NmJkMmM4MWZlMDJhZTExYmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDN6LdM56E1DCAquEGPbCmUKnwwA
Oqq1enQHrdKkoXqdv/Yc+kbATvXyuE+JcF/XAk0XLnM23z7VCRUBBtn5VKnHnBg9
JmdLkInLLfpT9y8AcUUvsLC59r7uqNYrVKR3cz7EQ5a2C9MckOkGzGBhWOCQVV9N
Ozh92NE4GZzppTShYSNtAt1yGP3f6sstUxI6iv1vLJEqrvHlfRROxkHfnhesSj2R
YC3XFRFu8vnV4hiJNEsOuTcaLw25M4I8HrYAMQhuJiqWaNEL/9Vh7xm+gNq4UPKJ
xzrGxbwRsyEDRlrE/75sNLQ1XeMmHsYt9Fug7TkiNB+n7XIN4DM1cRLXxwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDufRShpSddoHoS4a9LIH+Aq4RvVMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTzU5RktHbEoxMmdlaExocjBzZ2Y0Q3JoRzlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACe//NnrLVZaRXDb783N
pMvFYvA67CkKpOBfQkNE2xFeCfwlo7W2PZcb2xpbTGcbW2FDWV8+t1/uTV4mWEsL
twvXEKnyOlEroGd8VoDUEj6l2/y30k6wMc/LP6MOp5yP/wL3epKGZfnZ+Zb9BXEQ
gIP0eZqUFO8ZjkVLP7SSmSj9jGZF3KMqt8rLN2JaLsIt8cxIjU7V3iSRWd3OB9Fo
7T3Srpgurn9BWKMaUhCE617367pRjDSASjLz7hyWGmZPlGe9CVM3F3w1AF48e07W
p12vjMJ1dfBpPwCZ/HgANA3UDsVq94RhkJIkex4OWjYeQLgbuixe6KpXsR33z5Es
KZg=
-----END CERTIFICATE-----
Generated at Fri May 2 10:54:50 2025 by rpki-client