Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UDfm5s9hQOf4k3Eg6KaU-EJTbHs.roa
File: UDfm5s9hQOf4k3Eg6KaU-EJTbHs.roa (raw, json)
Hash identifier: ErdiRRACY8E/2Vcm9VypxO4rDWYtoYjfzGqtdKnNXxE=
Subject key identifier: 50:37:E6:E6:CF:61:40:E7:F8:93:71:20:E8:A6:94:F8:42:53:6C:7B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018725C7141B59AFF561CDD527E2F3590C43
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UDfm5s9hQOf4k3Eg6KaU-EJTbHs.roa
Signing time: Tue 28 Mar 2023 01:13:36 +0000
ROA not before: Tue 28 Mar 2023 01:13:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:25:c7:14:1b:59:af:f5:61:cd:d5:27:e2:f3:59:0c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 28 01:13:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5037e6e6cf6140e7f8937120e8a694f842536c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:d3:d6:df:32:8c:b9:4e:0e:4b:48:89:1d:
c9:09:a6:d1:7d:f7:06:fe:5a:d6:ad:d3:0f:58:f9:
a3:18:ec:f3:3a:25:27:1d:e7:bc:ec:4e:9f:09:43:
47:e0:d2:64:43:4e:b2:69:17:28:b8:06:27:e6:5d:
c8:f7:8f:c4:f3:f6:49:22:41:d5:6f:b7:fe:ff:6c:
d7:d5:55:0c:41:97:fd:a2:33:b8:f6:2c:60:57:d9:
9c:b9:32:00:da:bd:d6:6c:ad:c9:65:49:b1:2c:ea:
f6:a6:7a:03:60:44:07:56:18:64:62:3d:48:7c:0b:
fd:e4:a8:b3:9a:32:45:13:9b:a4:3a:3a:3d:1d:64:
f1:1b:87:1f:a4:ea:e6:46:d8:60:6f:9c:10:6a:28:
0f:91:22:14:15:a8:4d:98:6f:8c:d0:e0:c5:6e:fd:
da:5c:ac:70:89:fd:e4:c6:3e:fa:1b:78:5a:c0:19:
4e:e7:8a:b9:d2:54:ad:75:25:9a:90:71:52:bd:eb:
35:c9:d8:b4:a0:fa:6e:5b:da:51:c8:d9:dc:d0:c2:
8b:04:f2:f9:79:e6:ea:da:34:4a:30:c3:aa:49:b9:
ad:85:b2:05:31:22:e4:d3:dd:61:12:82:0c:39:76:
53:ef:a3:53:85:a2:28:b5:47:38:7b:63:73:44:93:
32:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:37:E6:E6:CF:61:40:E7:F8:93:71:20:E8:A6:94:F8:42:53:6C:7B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UDfm5s9hQOf4k3Eg6KaU-EJTbHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:f4:6b:99:cd:a3:c6:08:3c:9a:f1:f1:0f:ce:84:d3:44:a1:
b5:c0:ba:05:32:cf:9b:46:29:50:9b:9b:8d:51:e9:ec:9a:2d:
f8:ae:2c:d2:91:f1:97:82:2c:c7:3a:be:97:e8:7c:50:0a:8e:
65:4c:88:04:b1:c7:53:b1:93:12:cb:28:b0:97:af:70:cc:9b:
93:80:49:48:a8:24:d6:17:a3:0d:f1:63:d6:2a:2f:13:c2:28:
6d:8b:9b:54:dc:03:38:6d:b3:26:4f:1e:3f:ad:21:ee:c2:f7:
21:34:3a:61:01:54:0a:35:2f:8a:88:0b:ed:cb:c9:4b:79:42:
61:f1:0c:db:d9:a7:88:30:06:18:45:dc:66:d0:d3:dd:ad:26:
09:18:ec:36:ab:86:f1:cb:03:82:95:b6:1c:02:c4:76:5d:b1:
2f:a6:6b:2e:f7:3a:ae:61:a0:37:e7:79:fd:dc:ed:24:31:71:
60:68:58:49:64:a5:0c:25:ef:5e:e5:2c:37:64:f5:7f:98:69:
fe:02:da:2a:4d:40:5d:c8:3c:bf:94:2c:52:a7:03:9e:3e:6b:
ba:79:91:ee:71:06:48:f5:a3:da:ba:f3:2d:8e:28:22:c1:d9:
dc:b0:7c:f2:4f:eb:b4:8a:76:03:93:94:8b:d1:7e:d8:30:3f:
9a:fe:ba:9e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYclxxQbWa/1Yc3VJ+LzWQxDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzI4MDExMzM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDM3ZTZlNmNmNjE0MGU3Zjg5MzcxMjBlOGE2OTRmODQyNTM2YzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNDT1t8yjLlODktIiR3JCabRffcG
/lrWrdMPWPmjGOzzOiUnHee87E6fCUNH4NJkQ06yaRcouAYn5l3I94/E8/ZJIkHV
b7f+/2zX1VUMQZf9ojO49ixgV9mcuTIA2r3WbK3JZUmxLOr2pnoDYEQHVhhkYj1I
fAv95KizmjJFE5ukOjo9HWTxG4cfpOrmRthgb5wQaigPkSIUFahNmG+M0ODFbv3a
XKxwif3kxj76G3hawBlO54q50lStdSWakHFSves1ydi0oPpuW9pRyNnc0MKLBPL5
eebq2jRKMMOqSbmthbIFMSLk091hEoIMOXZT76NThaIotUc4e2NzRJMyIwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFA35ubPYUDn+JNxIOimlPhCU2x7MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVURmbTVzOWhRT2Y0azNFZzZLYVUtRUpUYkhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAD0a5nNo8YIPJrx8Q/O
hNNEobXAugUyz5tGKVCbm41R6eyaLfiuLNKR8ZeCLMc6vpfofFAKjmVMiASxx1Ox
kxLLKLCXr3DMm5OASUioJNYXow3xY9YqLxPCKG2Lm1TcAzhtsyZPHj+tIe7C9yE0
OmEBVAo1L4qIC+3LyUt5QmHxDNvZp4gwBhhF3GbQ092tJgkY7DarhvHLA4KVthwC
xHZdsS+may73Oq5hoDfnef3c7SQxcWBoWElkpQwl717lLDdk9X+Yaf4C2ipNQF3I
PL+ULFKnA54+a7p5ke5xBkj1o9q68y2OKCLB2dywfPJP67SKdgOTlIvRftgwP5r+
up4=
-----END CERTIFICATE-----
Generated at Sat May 3 23:07:17 2025 by rpki-client