Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RlPVHYgji2D5q1Ce1l5LevySAP0.roa
File: RlPVHYgji2D5q1Ce1l5LevySAP0.roa (raw, json)
Hash identifier: YeZAokCeRPvwNVM9hay/RCpS8qWOdhhWa65rszApUgM=
Subject key identifier: 46:53:D5:1D:88:23:8B:60:F9:AB:50:9E:D6:5E:4B:7A:FC:92:00:FD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DF273D94C5D60EAA3CAAF812DCDD797C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RlPVHYgji2D5q1Ce1l5LevySAP0.roa
Signing time: Thu 10 Aug 2023 11:13:58 +0000
ROA not before: Thu 10 Aug 2023 11:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:27:3d:94:c5:d6:0e:aa:3c:aa:f8:12:dc:dd:79:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 11:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4653d51d88238b60f9ab509ed65e4b7afc9200fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:af:ca:1c:35:d8:5e:b9:30:56:f0:69:29:8b:
c1:f0:b9:f1:14:b7:0f:70:75:88:3e:44:55:d9:c9:
92:e2:6f:d2:ba:ed:b7:de:9a:8d:12:1d:dd:a1:28:
2d:b0:e9:1f:36:a9:62:83:2d:c8:08:3b:24:70:99:
6e:73:b4:25:70:34:76:0a:40:19:8d:60:f7:c2:1d:
72:f8:4f:e0:5e:ed:fc:8c:bb:16:fc:12:a9:da:d0:
9a:49:10:fd:0a:43:4d:50:a4:25:a8:90:25:11:2f:
18:08:9f:80:51:5a:e4:04:c4:26:af:0a:6c:aa:5e:
1a:6f:c5:3f:c8:b7:5a:94:52:32:71:ca:7d:75:43:
ca:8f:0f:af:dc:d0:c2:5b:f8:6c:11:fc:2b:7c:06:
ff:67:3b:43:3d:87:e6:c3:f0:14:6f:5e:ee:ca:f2:
59:0f:8a:ae:7d:03:e7:bf:eb:af:7f:b1:a9:ea:90:
82:bc:ad:f9:b4:c3:79:b5:bc:55:ae:bb:91:5c:a9:
36:c6:c8:78:cb:5e:f0:fe:aa:81:7e:c3:f0:10:38:
cf:63:b1:6f:db:4f:58:0b:ed:1b:6f:ec:55:ee:34:
9a:f7:bb:bf:90:4b:e3:e7:69:f0:de:3d:5a:aa:0c:
92:06:3e:24:2b:30:12:b2:67:a4:2a:e9:80:21:3f:
fe:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:53:D5:1D:88:23:8B:60:F9:AB:50:9E:D6:5E:4B:7A:FC:92:00:FD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RlPVHYgji2D5q1Ce1l5LevySAP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:6f:08:72:78:ad:c7:1f:84:31:e5:07:8d:03:9c:a7:2f:5a:
2b:1a:d2:9f:03:18:25:c9:43:16:26:2a:b5:a6:73:66:4c:cc:
a2:cd:13:99:59:d0:f1:bd:9d:85:66:2b:2a:73:b1:f4:3e:60:
0d:ac:81:13:b4:d2:9a:e5:6e:5c:f0:aa:9d:e0:cf:3d:6c:f2:
f2:d2:ed:93:2e:d6:63:0f:6a:00:e5:ec:d8:ba:e6:21:00:70:
0f:eb:4e:84:b6:55:96:cb:ea:1a:cc:ad:98:25:5c:b8:d7:69:
b2:90:30:41:ad:c1:2a:3f:bb:3b:60:34:67:89:e0:6a:48:5c:
f2:bf:26:55:71:76:c3:46:c0:7c:ce:64:0d:d2:0a:69:ae:fd:
9b:e9:46:2b:6a:12:f5:ea:f9:b2:61:4e:15:83:34:80:9f:23:
f5:86:34:93:70:b3:13:c0:68:ab:4f:c1:a8:bf:ab:58:b9:b6:
28:33:97:6a:6b:59:52:e9:71:c7:93:f1:e6:fa:3a:4a:d5:99:
e7:fe:ca:73:20:7a:2e:b0:f3:5e:b1:a5:7c:58:79:44:1a:1b:
1b:0d:24:f8:9b:26:39:e2:80:28:f0:6c:96:68:36:83:e3:78:
4b:5e:63:7d:44:34:51:03:57:f2:31:56:47:fc:79:7d:49:f2:
4b:8a:7a:b6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnfJz2UxdYOqjyq+BLc3Xl8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODEwMTExMzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjUzZDUxZDg4MjM4YjYwZjlhYjUwOWVkNjVlNGI3YWZjOTIwMGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAka/KHDXYXrkwVvBpKYvB8LnxFLcP
cHWIPkRV2cmS4m/Suu233pqNEh3doSgtsOkfNqligy3ICDskcJluc7QlcDR2CkAZ
jWD3wh1y+E/gXu38jLsW/BKp2tCaSRD9CkNNUKQlqJAlES8YCJ+AUVrkBMQmrwps
ql4ab8U/yLdalFIyccp9dUPKjw+v3NDCW/hsEfwrfAb/ZztDPYfmw/AUb17uyvJZ
D4qufQPnv+uvf7Gp6pCCvK35tMN5tbxVrruRXKk2xsh4y17w/qqBfsPwEDjPY7Fv
209YC+0bb+xV7jSa97u/kEvj52nw3j1aqgySBj4kKzASsmekKumAIT/+PQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEZT1R2II4tg+atQntZeS3r8kgD9MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUmxQVkhZZ2ppMkQ1cTFDZTFsNUxldnlTQVAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABdvCHJ4rccfhDHlB40D
nKcvWisa0p8DGCXJQxYmKrWmc2ZMzKLNE5lZ0PG9nYVmKypzsfQ+YA2sgRO00prl
blzwqp3gzz1s8vLS7ZMu1mMPagDl7Ni65iEAcA/rToS2VZbL6hrMrZglXLjXabKQ
MEGtwSo/uztgNGeJ4GpIXPK/JlVxdsNGwHzOZA3SCmmu/ZvpRitqEvXq+bJhThWD
NICfI/WGNJNwsxPAaKtPwai/q1i5tigzl2prWVLpcceT8eb6OkrVmef+ynMgei6w
816xpXxYeUQaGxsNJPibJjnigCjwbJZoNoPjeEteY31ENFEDV/IxVkf8eX1J8kuK
erY=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:59:18 2025 by rpki-client