Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rl-P-7CFYMJvmaFEPgu1_LbixYc.roa
File: Rl-P-7CFYMJvmaFEPgu1_LbixYc.roa (raw, json)
Hash identifier: QlzqPYt552hOmWS+5LTPEi6W0l3eWVx769doYnv8Wn8=
Subject key identifier: 46:5F:8F:FB:B0:85:60:C2:6F:99:A1:44:3E:0B:B5:FC:B6:E2:C5:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188AA5C6FBCE7C7AA86F29A803A7C2AF860
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rl-P-7CFYMJvmaFEPgu1_LbixYc.roa
Signing time: Sun 11 Jun 2023 12:09:24 +0000
ROA not before: Sun 11 Jun 2023 12:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:aa:5c:6f:bc:e7:c7:aa:86:f2:9a:80:3a:7c:2a:f8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 11 12:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=465f8ffbb08560c26f99a1443e0bb5fcb6e2c587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c9:f7:fa:e3:7f:27:26:f4:4b:d6:92:e3:6e:
92:e4:4c:94:65:c7:0d:86:49:7d:14:3e:63:2e:0f:
0c:85:49:15:6e:76:8e:59:91:99:82:0b:41:9c:93:
8b:0c:c6:57:2f:c6:8d:48:6f:ad:ae:ff:6e:33:5c:
3d:77:d4:b3:3a:50:37:49:5d:76:c3:9b:9e:0f:72:
da:39:67:4f:72:0e:f4:c3:9b:bd:39:39:a6:5b:9a:
50:e9:c1:57:1a:2a:ce:b0:9c:2c:f1:d8:63:34:b4:
6a:bb:f6:e3:09:7e:ac:a6:b8:7c:6c:e5:df:7c:58:
e6:06:d9:49:8c:3b:97:fe:64:e2:82:bb:73:87:6f:
29:0d:bb:7a:63:33:86:f2:d1:2d:55:74:13:85:61:
14:c6:d5:72:f2:01:8d:49:62:6e:6e:04:98:b4:e9:
a1:6d:1f:ad:77:0b:8b:4e:1a:9c:56:c1:ac:bc:a6:
30:ec:e0:d2:cf:02:97:e1:e4:34:a6:18:ec:10:ed:
c8:e8:8a:64:9a:25:1e:da:2c:5f:3e:8e:8f:bd:9c:
6d:7c:5b:f5:be:f0:dd:5e:8e:73:e1:1b:06:41:de:
eb:34:cb:09:ba:02:3c:65:ab:d0:4c:fa:4d:03:4a:
19:4d:c0:61:d5:7c:5c:1a:c4:48:31:05:9f:20:04:
aa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5F:8F:FB:B0:85:60:C2:6F:99:A1:44:3E:0B:B5:FC:B6:E2:C5:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rl-P-7CFYMJvmaFEPgu1_LbixYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:bb:87:1f:a3:49:a9:5d:51:96:ce:5a:6a:1b:33:fa:b6:41:
97:b7:2b:25:38:b9:54:84:ce:37:bf:1b:b8:82:d3:47:54:24:
f5:7d:eb:4e:dd:2d:7d:ad:11:0a:06:1c:e7:d7:c0:6b:31:a6:
6a:16:22:a9:52:c1:0c:bd:7a:26:80:9e:74:1e:e2:18:cc:98:
b5:52:93:74:91:55:0e:37:bb:6a:de:8e:bd:b6:5a:4b:96:87:
0c:9e:e9:e6:60:93:5f:8d:6b:d0:95:12:08:9b:2d:4b:fa:5c:
6b:1c:9d:a1:04:ed:10:f0:c0:14:87:30:c0:ee:b5:db:4a:46:
c6:73:88:36:1f:ad:78:de:6b:bd:de:fa:3c:cb:cc:96:e3:b1:
60:47:43:7d:58:27:d9:f9:c1:23:fd:62:8f:1d:da:96:17:cf:
e5:bf:da:af:f2:a0:73:a6:34:71:c4:e4:cc:a6:87:75:1c:e2:
fa:34:92:09:6d:3f:4c:db:45:9c:a3:2f:65:d9:64:a4:ed:cd:
ed:63:3d:fd:7b:71:cd:28:49:18:97:82:c7:40:f0:a7:66:0a:
2f:7e:f8:2f:54:6e:3a:36:67:e8:46:c3:36:08:b5:61:51:e6:
b9:02:40:58:fa:93:3f:7f:bb:91:24:d6:a6:22:f3:f3:83:21:
39:7b:ff:b4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYiqXG+858eqhvKagDp8KvhgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjExMTIwOTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjVmOGZmYmIwODU2MGMyNmY5OWExNDQzZTBiYjVmY2I2ZTJjNTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8n3+uN/Jyb0S9aS426S5EyUZccN
hkl9FD5jLg8MhUkVbnaOWZGZggtBnJOLDMZXL8aNSG+trv9uM1w9d9SzOlA3SV12
w5ueD3LaOWdPcg70w5u9OTmmW5pQ6cFXGirOsJws8dhjNLRqu/bjCX6sprh8bOXf
fFjmBtlJjDuX/mTigrtzh28pDbt6YzOG8tEtVXQThWEUxtVy8gGNSWJubgSYtOmh
bR+tdwuLThqcVsGsvKYw7ODSzwKX4eQ0phjsEO3I6IpkmiUe2ixfPo6PvZxtfFv1
vvDdXo5z4RsGQd7rNMsJugI8ZavQTPpNA0oZTcBh1XxcGsRIMQWfIASqUwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEZfj/uwhWDCb5mhRD4Ltfy24sWHMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUmwtUC03Q0ZZTUp2bWFGRVBndTFfTGJpeFljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH67hx+jSaldUZbOWmob
M/q2QZe3KyU4uVSEzje/G7iC00dUJPV9607dLX2tEQoGHOfXwGsxpmoWIqlSwQy9
eiaAnnQe4hjMmLVSk3SRVQ43u2rejr22WkuWhwye6eZgk1+Na9CVEgibLUv6XGsc
naEE7RDwwBSHMMDutdtKRsZziDYfrXjea73e+jzLzJbjsWBHQ31YJ9n5wSP9Yo8d
2pYXz+W/2q/yoHOmNHHE5Mymh3Uc4vo0kgltP0zbRZyjL2XZZKTtze1jPf17cc0o
SRiXgsdA8KdmCi9++C9Ubjo2Z+hGwzYItWFR5rkCQFj6kz9/u5Ek1qYi8/ODITl7
/7Q=
-----END CERTIFICATE-----
Generated at Thu May 1 23:22:13 2025 by rpki-client