Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S_hGXctuWyFmE7swB7Mr3jnoAvs.roa
File: S_hGXctuWyFmE7swB7Mr3jnoAvs.roa (raw, json)
Hash identifier: RL66aeEnXnw0C5SlZaIikMR73T+iTg2ujLoq9GS1HTo=
Subject key identifier: 4B:F8:46:5D:CB:6E:5B:21:66:13:BB:30:07:B3:2B:DE:39:E8:02:FB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01896CC747B35829069DFA8EDB984F5FF472
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S_hGXctuWyFmE7swB7Mr3jnoAvs.roa
Signing time: Wed 19 Jul 2023 06:12:26 +0000
ROA not before: Wed 19 Jul 2023 06:12:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6c:c7:47:b3:58:29:06:9d:fa:8e:db:98:4f:5f:f4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 19 06:12:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bf8465dcb6e5b216613bb3007b32bde39e802fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1c:25:3b:7d:98:04:26:3d:0c:9c:71:ec:91:
a5:5e:4b:f3:ba:0e:c2:b5:57:d1:91:ca:73:1f:49:
c0:3e:6d:46:28:a9:34:40:87:a9:b5:54:93:b9:ba:
21:52:84:a5:bb:b2:56:d6:d1:d0:02:80:32:8e:1d:
62:af:99:a0:87:ef:27:95:5f:74:aa:f4:56:f1:54:
95:a9:62:d7:0f:55:63:d5:29:8d:ef:1d:19:40:f5:
53:25:8d:39:07:c4:27:e5:1d:59:34:17:37:73:1c:
e1:aa:b8:2a:ed:55:c0:69:7d:20:e8:55:6b:5c:5a:
6b:c0:6d:9d:71:d0:cd:fe:5d:01:5b:84:34:da:a2:
3f:ed:c0:ac:3c:71:4a:56:82:be:2d:5d:d9:ce:52:
c2:e1:23:02:42:86:31:0c:7a:0c:0d:70:99:f7:31:
be:17:9e:a5:a7:00:32:c7:d9:a5:40:d6:98:5b:56:
54:c1:1f:0f:9b:85:c6:dd:9e:d1:e9:b6:42:eb:af:
65:99:3a:19:c4:7e:04:8d:16:a0:fa:ea:70:2c:fa:
16:51:8a:4d:83:6f:5c:67:6e:9b:3a:fe:12:13:95:
aa:33:cf:e2:9f:aa:70:25:a0:3b:e5:bd:5d:98:21:
5f:ad:e8:66:11:31:62:87:76:98:7d:d8:08:1e:ed:
84:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F8:46:5D:CB:6E:5B:21:66:13:BB:30:07:B3:2B:DE:39:E8:02:FB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S_hGXctuWyFmE7swB7Mr3jnoAvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:40:c7:09:44:52:cd:b5:be:2c:8b:e9:ed:85:fb:2a:f6:62:
8b:f7:e9:0a:8f:cc:e7:2f:c1:07:76:79:4e:7d:26:fd:5d:6d:
c4:ce:1e:db:a1:8e:c0:2c:08:76:7a:63:a4:e7:27:9d:1c:52:
ad:68:7f:bb:b4:cc:22:65:86:f5:63:59:30:d6:57:c7:1b:e7:
7e:f7:9d:4a:6b:23:82:5f:9a:cd:f9:80:61:62:fd:34:7a:0b:
ff:6b:b5:52:c0:2f:ec:a5:76:72:5d:7a:c6:8d:da:16:92:97:
09:68:6c:df:8e:08:6b:4c:d0:51:a4:2b:f9:91:9d:99:69:1f:
60:22:f1:d9:2a:b0:e7:c6:a6:96:7a:75:44:50:93:4d:8e:f4:
47:6a:7d:be:13:b8:18:cd:c3:79:6f:b3:54:d6:80:ec:de:f5:
3e:9e:32:94:f9:c6:fc:06:44:fa:c5:1c:cb:ea:34:18:3a:20:
fe:bc:8b:62:71:01:34:33:36:59:16:3b:25:cb:54:66:7b:27:
47:ec:58:70:ba:87:01:0d:1e:ec:90:e8:46:fe:f2:63:40:28:
34:04:51:e1:c6:5f:04:90:de:42:2e:76:89:1d:3f:69:52:13:
cf:c7:3d:4d:25:73:d6:86:94:1e:40:f5:65:64:24:9d:55:a2:
3c:a3:79:33
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlsx0ezWCkGnfqO25hPX/RyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzE5MDYxMjI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmY4NDY1ZGNiNmU1YjIxNjYxM2JiMzAwN2IzMmJkZTM5ZTgwMmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRwlO32YBCY9DJxx7JGlXkvzug7C
tVfRkcpzH0nAPm1GKKk0QIeptVSTubohUoSlu7JW1tHQAoAyjh1ir5mgh+8nlV90
qvRW8VSVqWLXD1Vj1SmN7x0ZQPVTJY05B8Qn5R1ZNBc3cxzhqrgq7VXAaX0g6FVr
XFprwG2dcdDN/l0BW4Q02qI/7cCsPHFKVoK+LV3ZzlLC4SMCQoYxDHoMDXCZ9zG+
F56lpwAyx9mlQNaYW1ZUwR8Pm4XG3Z7R6bZC669lmToZxH4EjRag+upwLPoWUYpN
g29cZ26bOv4SE5WqM8/in6pwJaA75b1dmCFfrehmETFih3aYfdgIHu2EJQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEv4Rl3LblshZhO7MAezK9456AL7MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvU19oR1hjdHVXeUZtRTdzd0I3TXIzam5vQXZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGZAxwlEUs21viyL6e2F
+yr2Yov36QqPzOcvwQd2eU59Jv1dbcTOHtuhjsAsCHZ6Y6TnJ50cUq1of7u0zCJl
hvVjWTDWV8cb5373nUprI4Jfms35gGFi/TR6C/9rtVLAL+yldnJdesaN2haSlwlo
bN+OCGtM0FGkK/mRnZlpH2Ai8dkqsOfGppZ6dURQk02O9Edqfb4TuBjNw3lvs1TW
gOze9T6eMpT5xvwGRPrFHMvqNBg6IP68i2JxATQzNlkWOyXLVGZ7J0fsWHC6hwEN
HuyQ6Eb+8mNAKDQEUeHGXwSQ3kIudokdP2lSE8/HPU0lc9aGlB5A9WVkJJ1Vojyj
eTM=
-----END CERTIFICATE-----
Generated at Wed Apr 30 23:11:41 2025 by rpki-client