Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Sh7MkBbbO4db_cI5D0U6aVufG9A.roa
File: Sh7MkBbbO4db_cI5D0U6aVufG9A.roa (raw, json)
Hash identifier: 7L8JRk0EozEa/+Y65ArbVAcU4bIjyBceeTUvEyealnA=
Subject key identifier: 4A:1E:CC:90:16:DB:3B:87:5B:FD:C2:39:0F:45:3A:69:5B:9F:1B:D0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187BD3CA79673FE72EC03C0994F372D6445
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Sh7MkBbbO4db_cI5D0U6aVufG9A.roa
Signing time: Wed 26 Apr 2023 11:04:41 +0000
ROA not before: Wed 26 Apr 2023 11:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:187:bd3c:4e55/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bd:3c:a7:96:73:fe:72:ec:03:c0:99:4f:37:2d:64:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 26 11:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a1ecc9016db3b875bfdc2390f453a695b9f1bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:55:f0:fc:0e:53:c6:d5:e9:e9:fb:e8:49:
a2:03:3c:99:08:79:93:26:bb:bc:4d:68:77:9e:51:
20:b4:34:c6:0f:61:82:c9:a7:aa:34:a6:c5:9f:9a:
5f:88:ad:b7:c4:1f:80:69:ac:fe:1c:69:fa:2c:ee:
40:37:63:af:4b:e3:cb:48:2c:68:f6:c5:cd:9c:50:
d0:d8:29:36:44:aa:bd:34:fc:30:6c:b1:b8:d3:b9:
08:8e:d4:68:e5:9e:22:be:bb:75:fc:e1:35:5a:df:
4a:f4:d7:27:bd:bd:e1:e9:76:1a:b9:4e:de:b0:ed:
ef:e6:28:49:0b:3f:d0:55:d3:b1:93:0c:50:c7:ac:
b8:6b:9f:0f:01:3f:e7:b3:e0:cf:8a:6a:cb:b6:75:
92:1a:15:e6:91:f7:bf:4b:fe:71:0c:d4:4f:78:63:
1e:ba:9e:2b:02:39:3d:26:75:62:ac:62:e8:ce:a8:
cf:f2:a0:d2:31:aa:db:f3:ba:dd:81:a8:e5:9f:e7:
57:8f:ac:5f:5b:a9:07:53:f7:7d:6b:99:c4:ba:68:
69:07:16:fa:e9:98:c5:c0:d6:2e:ef:cb:d1:a3:fc:
6c:ce:67:38:4e:d8:45:6a:34:1c:f5:64:ce:32:79:
29:cf:4b:b0:1d:35:ac:11:68:9f:05:af:dd:b4:c1:
a1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1E:CC:90:16:DB:3B:87:5B:FD:C2:39:0F:45:3A:69:5B:9F:1B:D0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Sh7MkBbbO4db_cI5D0U6aVufG9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:da:c9:57:59:80:c0:d2:75:45:2f:a0:10:41:94:86:9a:4e:
34:de:87:03:0c:3c:b4:67:99:45:8c:48:da:8b:38:50:a8:08:
d9:2d:a3:70:cf:c1:57:0a:c0:20:6e:19:e2:2d:c6:63:54:32:
cb:04:96:2e:4f:6e:28:bb:0c:4e:33:e1:59:7b:72:18:61:96:
b4:36:45:c4:e6:7b:a0:3b:99:b9:c3:17:d1:65:9e:85:bc:4b:
d9:ea:d7:19:f8:8c:0c:37:05:f3:e4:1a:46:2c:04:0a:75:42:
a9:38:80:66:f2:e5:1d:07:3b:c7:e4:f7:58:20:00:42:03:94:
c5:ab:b1:0f:d7:7f:5e:fb:29:0b:92:9f:8a:6d:3a:07:b3:1d:
a9:2b:f1:b2:4c:5c:b8:12:ae:91:20:84:72:74:ad:a1:8a:bf:
09:27:47:a2:52:49:18:2d:26:30:cd:06:ec:e4:82:7b:87:d0:
4c:3f:7a:a1:65:ec:b8:87:be:54:fd:ce:a3:22:91:a9:71:c8:
41:40:84:81:87:57:be:bb:a2:f6:ed:16:7f:0e:15:d6:63:f9:
4a:e8:98:f5:78:f6:96:f5:03:7c:f7:80:ad:a3:62:5a:7f:db:
45:1e:27:61:56:b3:eb:25:16:81:5f:63:c1:44:c5:7e:33:e4:
ae:3a:f4:7a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYe9PKeWc/5y7APAmU83LWRFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDI2MTEwNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTFlY2M5MDE2ZGIzYjg3NWJmZGMyMzkwZjQ1M2E2OTViOWYxYmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA9V8PwOU8bV6en76EmiAzyZCHmT
Jru8TWh3nlEgtDTGD2GCyaeqNKbFn5pfiK23xB+Aaaz+HGn6LO5AN2OvS+PLSCxo
9sXNnFDQ2Ck2RKq9NPwwbLG407kIjtRo5Z4ivrt1/OE1Wt9K9Ncnvb3h6XYauU7e
sO3v5ihJCz/QVdOxkwxQx6y4a58PAT/ns+DPimrLtnWSGhXmkfe/S/5xDNRPeGMe
up4rAjk9JnVirGLozqjP8qDSMarb87rdgajln+dXj6xfW6kHU/d9a5nEumhpBxb6
6ZjFwNYu78vRo/xszmc4TthFajQc9WTOMnkpz0uwHTWsEWifBa/dtMGhVwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEoezJAW2zuHW/3COQ9FOmlbnxvQMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvU2g3TWtCYmJPNGRiX2NJNUQwVTZhVnVmRzlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE/ayVdZgMDSdUUvoBBB
lIaaTjTehwMMPLRnmUWMSNqLOFCoCNkto3DPwVcKwCBuGeItxmNUMssEli5Pbii7
DE4z4Vl7chhhlrQ2RcTme6A7mbnDF9FlnoW8S9nq1xn4jAw3BfPkGkYsBAp1Qqk4
gGby5R0HO8fk91ggAEIDlMWrsQ/Xf177KQuSn4ptOgezHakr8bJMXLgSrpEghHJ0
raGKvwknR6JSSRgtJjDNBuzkgnuH0Ew/eqFl7LiHvlT9zqMikalxyEFAhIGHV767
ovbtFn8OFdZj+UromPV49pb1A3z3gK2jYlp/20UeJ2FWs+slFoFfY8FExX4z5K46
9Ho=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:28:39 2025 by rpki-client