Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SnRwvOepyUJm0icV-1SH6h_KcPI.roa
File: SnRwvOepyUJm0icV-1SH6h_KcPI.roa (raw, json)
Hash identifier: q8RAlr1K0k1PxATLvB/YshBSnpfF4FEk6X+YNzaYHA4=
Subject key identifier: 4A:74:70:BC:E7:A9:C9:42:66:D2:27:15:FB:54:87:EA:1F:CA:70:F2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018963FA8E2F9B5BD2ED39FFDD34C21700E0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SnRwvOepyUJm0icV-1SH6h_KcPI.roa
Signing time: Mon 17 Jul 2023 13:11:52 +0000
ROA not before: Mon 17 Jul 2023 13:11:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:fa:8e:2f:9b:5b:d2:ed:39:ff:dd:34:c2:17:00:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 17 13:11:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a7470bce7a9c94266d22715fb5487ea1fca70f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:51:14:8e:5a:8c:a6:2e:aa:46:44:b9:22:
22:bd:15:a1:ff:6a:90:fc:05:79:8b:ba:b1:2b:9f:
01:0d:7c:b4:7f:8e:da:6f:b3:59:97:b4:78:6a:a8:
38:a2:50:3c:11:8d:78:8f:be:e5:9e:d3:14:8d:f2:
c9:0e:ae:c1:78:5f:84:1d:b1:70:96:72:e8:ae:44:
a8:a5:8b:29:11:b6:e7:8e:5c:83:a2:82:d2:90:21:
7f:86:d3:0b:71:c0:1a:ce:8b:7d:00:4e:2b:be:29:
b5:28:5a:33:d1:39:99:a6:98:97:8c:04:87:71:bc:
33:5a:75:dc:1c:59:55:0e:7b:1b:c7:da:4f:97:ee:
d1:c2:b6:23:0e:23:b5:e9:ee:d4:b8:19:cd:60:7c:
54:6d:49:87:4c:49:ed:98:e5:81:57:a7:2e:e6:e4:
cc:b7:7a:57:06:ab:ec:55:40:00:af:99:e7:e8:10:
66:5e:f8:13:33:4e:c2:d7:fc:03:ec:44:04:af:0e:
7b:8a:b0:b5:94:b5:5a:b9:20:62:1d:17:75:07:21:
96:11:d1:3d:7a:91:1b:58:bc:fb:78:a1:57:22:be:
3d:b3:09:2c:53:dc:c6:49:24:24:23:5c:31:a8:38:
57:fb:73:5e:b7:28:72:38:31:d1:f5:b1:a6:ed:2a:
e9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:74:70:BC:E7:A9:C9:42:66:D2:27:15:FB:54:87:EA:1F:CA:70:F2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SnRwvOepyUJm0icV-1SH6h_KcPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:4a:41:63:e3:be:55:13:89:32:33:93:69:21:89:53:0b:9a:
87:d4:c6:2f:e1:a7:ad:cf:2b:27:2a:85:53:79:17:67:e2:11:
7d:84:13:7c:e1:fc:80:f9:56:78:2e:5c:a8:2b:c9:6b:be:56:
3d:b4:fe:67:45:25:f6:43:dc:bf:3e:47:c7:17:bf:31:e1:b0:
f1:8f:5f:25:f9:63:8f:7f:ec:7f:3e:ab:db:4d:3c:e6:f9:ef:
76:90:bb:e1:a7:4f:36:54:84:f3:27:00:3a:50:af:20:5f:8f:
19:a5:dc:06:ed:09:e3:a8:00:16:73:36:00:c9:30:37:92:94:
66:4b:91:a5:81:2d:ea:19:90:96:19:f0:c5:61:4c:75:f4:24:
d3:78:2f:ba:1f:dc:1a:75:a1:04:a0:97:c0:f9:86:8a:44:38:
c7:d5:9e:93:f6:c3:c7:88:ac:cb:6d:ea:e4:b7:17:be:d7:55:
df:da:05:cc:8c:42:45:f4:44:6e:52:f4:20:62:2b:dd:af:b8:
f0:ad:7c:0c:d8:73:c9:c0:e8:4d:3e:f4:ca:76:a2:c9:77:71:
26:61:ee:2e:5f:ab:1a:b4:9a:3b:fe:d2:bb:17:dd:ab:cd:83:
d4:19:99:1c:1f:a2:e2:4a:39:5a:ee:bd:3d:39:70:9e:bf:8a:
4e:8e:ff:b3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlj+o4vm1vS7Tn/3TTCFwDgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzE3MTMxMTUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTc0NzBiY2U3YTljOTQyNjZkMjI3MTVmYjU0ODdlYTFmY2E3MGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAdRFI5ajKYuqkZEuSIivRWh/2qQ
/AV5i7qxK58BDXy0f47ab7NZl7R4aqg4olA8EY14j77lntMUjfLJDq7BeF+EHbFw
lnLorkSopYspEbbnjlyDooLSkCF/htMLccAazot9AE4rvim1KFoz0TmZppiXjASH
cbwzWnXcHFlVDnsbx9pPl+7RwrYjDiO16e7UuBnNYHxUbUmHTEntmOWBV6cu5uTM
t3pXBqvsVUAAr5nn6BBmXvgTM07C1/wD7EQErw57irC1lLVauSBiHRd1ByGWEdE9
epEbWLz7eKFXIr49swksU9zGSSQkI1wxqDhX+3NetyhyODHR9bGm7SrpXwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEp0cLznqclCZtInFftUh+ofynDyMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvU25Sd3ZPZXB5VUptMGljVi0xU0g2aF9LY1BJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH9KQWPjvlUTiTIzk2kh
iVMLmofUxi/hp63PKycqhVN5F2fiEX2EE3zh/ID5VnguXKgryWu+Vj20/mdFJfZD
3L8+R8cXvzHhsPGPXyX5Y49/7H8+q9tNPOb573aQu+GnTzZUhPMnADpQryBfjxml
3AbtCeOoABZzNgDJMDeSlGZLkaWBLeoZkJYZ8MVhTHX0JNN4L7of3Bp1oQSgl8D5
hopEOMfVnpP2w8eIrMtt6uS3F77XVd/aBcyMQkX0RG5S9CBiK92vuPCtfAzYc8nA
6E0+9Mp2osl3cSZh7i5fqxq0mjv+0rsX3avNg9QZmRwfouJKOVruvT05cJ6/ik6O
/7M=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:24:49 2025 by rpki-client