Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ReLqDK3zCpeveeCW2oP9TcBKUIY.roa
File: ReLqDK3zCpeveeCW2oP9TcBKUIY.roa (raw, json)
Hash identifier: knvp/4IAU+Nbl5muVliiLHktfI2ZWTlaiTRUPXstAY0=
Subject key identifier: 45:E2:EA:0C:AD:F3:0A:97:AF:79:E0:96:DA:83:FD:4D:C0:4A:50:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869DF7D27BB3EB8A8BE3EAA0F3CBE2865C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ReLqDK3zCpeveeCW2oP9TcBKUIY.roa
Signing time: Wed 01 Mar 2023 16:18:29 +0000
ROA not before: Wed 01 Mar 2023 16:18:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:f7:d2:7b:b3:eb:8a:8b:e3:ea:a0:f3:cb:e2:86:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 1 16:18:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45e2ea0cadf30a97af79e096da83fd4dc04a5086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:98:c0:b2:cb:62:cf:4a:5d:70:b1:83:e7:d0:
41:bd:eb:ac:25:9e:4b:ce:64:a7:a0:9f:52:12:02:
51:97:63:fe:b0:0f:b9:8c:5c:3d:d4:e7:7c:2d:b8:
46:89:db:2a:35:3c:49:ea:bf:c4:83:b0:a8:81:c5:
80:61:fb:e0:67:51:97:bb:b0:b3:5a:db:b3:9d:9f:
33:91:36:06:df:72:d9:7f:29:43:4f:4f:dd:52:3b:
f8:8e:66:cc:55:5a:6d:b8:7f:64:d5:fe:bd:ae:34:
7c:8d:4d:44:4b:67:e3:e8:b3:fa:0e:bc:a1:53:4c:
ba:6d:0e:a0:f1:4b:65:15:4f:c9:74:31:71:9a:3c:
08:e2:00:e1:3f:9e:41:6b:ea:46:2d:f1:54:ac:13:
a8:b6:a8:b8:7e:b6:18:81:d7:58:4b:7d:18:17:ad:
a9:64:92:ef:9b:90:05:55:a7:3a:43:2c:34:82:86:
b6:80:76:b4:99:f0:75:0f:fb:8e:ca:b6:b4:f7:ad:
52:5e:4d:7e:61:bd:4c:38:5b:94:8f:06:4b:05:0c:
ea:ed:70:7d:c8:fd:16:6b:29:a8:23:c3:89:2b:53:
9f:e7:0a:5f:8d:23:49:d2:bd:dd:a4:e3:0b:4e:1e:
3a:78:d4:08:35:cd:b7:ff:ae:b8:c4:ec:17:ef:ef:
f9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E2:EA:0C:AD:F3:0A:97:AF:79:E0:96:DA:83:FD:4D:C0:4A:50:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ReLqDK3zCpeveeCW2oP9TcBKUIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:eb:19:86:04:b4:cf:eb:a1:88:dd:da:e1:56:44:a4:d8:45:
a7:7d:a6:95:89:f1:0d:d1:be:1c:af:1d:63:48:b3:9c:29:c8:
9a:66:8a:d2:7a:36:45:32:8e:01:ed:0c:fc:94:52:e8:70:ca:
2c:3a:37:a5:ff:2c:27:0c:bb:13:be:a1:57:3d:00:97:0a:16:
8f:65:9d:50:13:0f:9e:ae:c9:b3:28:e2:21:47:74:8e:6f:f8:
49:36:61:9b:cf:60:5a:45:38:a3:63:e5:2c:53:a4:75:ad:2e:
53:e3:b0:aa:dd:f1:fe:3a:af:54:9b:89:de:e5:5a:6c:6b:e2:
1a:1c:fa:9b:47:05:d0:23:41:17:4a:a9:b8:de:0f:31:cd:d2:
2e:e7:bb:82:c1:40:71:40:10:21:08:76:37:e8:68:5c:9d:71:
15:5a:2d:36:52:be:de:08:a9:99:2e:2d:a2:c1:35:e2:65:ce:
b8:de:06:77:b5:0d:de:47:51:b9:05:25:34:ce:59:86:3e:34:
63:6d:ea:de:51:1c:c0:9e:35:82:69:12:7d:6b:3b:e2:92:96:
53:c6:98:77:97:cf:9c:61:b3:cc:b9:c0:41:4b:5a:b8:cf:3d:
97:19:fd:29:95:fd:d3:2e:50:96:b6:e4:03:04:2f:92:cb:0e:
4c:c8:95:f9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYad99J7s+uKi+PqoPPL4oZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzAxMTYxODI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWUyZWEwY2FkZjMwYTk3YWY3OWUwOTZkYTgzZmQ0ZGMwNGE1MDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJjAsstiz0pdcLGD59BBveusJZ5L
zmSnoJ9SEgJRl2P+sA+5jFw91Od8LbhGidsqNTxJ6r/Eg7CogcWAYfvgZ1GXu7Cz
WtuznZ8zkTYG33LZfylDT0/dUjv4jmbMVVptuH9k1f69rjR8jU1ES2fj6LP6Dryh
U0y6bQ6g8UtlFU/JdDFxmjwI4gDhP55Ba+pGLfFUrBOotqi4frYYgddYS30YF62p
ZJLvm5AFVac6Qyw0goa2gHa0mfB1D/uOyra0961SXk1+Yb1MOFuUjwZLBQzq7XB9
yP0WaymoI8OJK1Of5wpfjSNJ0r3dpOMLTh46eNQINc23/664xOwX7+/5UQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEXi6gyt8wqXr3ngltqD/U3ASlCGMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUmVMcURLM3pDcGV2ZWVDVzJvUDlUY0JLVUlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALXrGYYEtM/roYjd2uFW
RKTYRad9ppWJ8Q3RvhyvHWNIs5wpyJpmitJ6NkUyjgHtDPyUUuhwyiw6N6X/LCcM
uxO+oVc9AJcKFo9lnVATD56uybMo4iFHdI5v+Ek2YZvPYFpFOKNj5SxTpHWtLlPj
sKrd8f46r1Sbid7lWmxr4hoc+ptHBdAjQRdKqbjeDzHN0i7nu4LBQHFAECEIdjfo
aFydcRVaLTZSvt4IqZkuLaLBNeJlzrjeBne1Dd5HUbkFJTTOWYY+NGNt6t5RHMCe
NYJpEn1rO+KSllPGmHeXz5xhs8y5wEFLWrjPPZcZ/SmV/dMuUJa25AMEL5LLDkzI
lfk=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:46:15 2025 by rpki-client