Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XNnidVEaU4IHrUAkWlG-dZi-A3s.roa
File: XNnidVEaU4IHrUAkWlG-dZi-A3s.roa (raw, json)
Hash identifier: 4tNlXc5rgB9nyAWeV5jYRkaUcdlw6s59oKfu2/CZCNQ=
Subject key identifier: 5C:D9:E2:75:51:1A:53:82:07:AD:40:24:5A:51:BE:75:98:BE:03:7B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188E0A6A0F03BB43922F11C73CAB4BA1D69
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XNnidVEaU4IHrUAkWlG-dZi-A3s.roa
Signing time: Thu 22 Jun 2023 01:09:56 +0000
ROA not before: Thu 22 Jun 2023 01:09:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e0:a6:a0:f0:3b:b4:39:22:f1:1c:73:ca:b4:ba:1d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 22 01:09:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5cd9e275511a538207ad40245a51be7598be037b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:33:c6:89:9e:2c:e4:89:5e:b3:a1:66:4f:9f:
44:54:c2:49:41:4c:1a:6b:eb:a0:21:06:26:b7:69:
65:09:0b:d0:a0:6e:90:be:52:4b:8b:f5:7c:f7:8f:
fd:e8:1b:33:bc:17:03:18:1c:a7:61:b1:4d:f1:9b:
41:69:85:42:1a:47:90:97:6c:74:d3:c1:ee:02:8f:
26:64:f1:57:00:4b:40:ad:d1:a5:98:e5:b0:c0:0c:
6f:d1:23:be:9d:2d:aa:cf:11:b8:72:68:80:76:b3:
a4:15:b7:26:fc:b9:f9:ad:03:82:90:21:02:d8:de:
3c:13:c5:38:14:f0:c7:5f:6d:65:a9:ab:a3:c9:de:
fb:ec:70:b3:05:e9:1a:c1:b3:5d:40:f0:a8:43:42:
98:29:95:d5:1b:76:51:57:02:15:5f:d9:97:e0:2a:
29:96:56:94:20:ba:dd:7b:23:58:12:99:cb:88:ca:
a7:aa:59:b9:5d:60:c4:0c:77:08:20:74:90:4d:a7:
a5:9f:38:dd:4a:ab:cc:57:c2:6b:0b:29:db:2e:a3:
b3:89:14:b7:94:e9:c6:da:97:35:86:3a:c7:d8:de:
bc:c0:fc:30:0d:65:01:53:b0:ac:4d:05:dc:64:b4:
6d:65:81:d5:23:25:48:14:d3:67:3e:a4:7d:0d:ac:
f0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D9:E2:75:51:1A:53:82:07:AD:40:24:5A:51:BE:75:98:BE:03:7B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XNnidVEaU4IHrUAkWlG-dZi-A3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:76:92:a2:5f:54:3b:2b:f0:bc:4b:33:b6:7c:e9:23:f2:35:
02:ce:57:b7:df:de:3a:8d:51:01:22:02:6d:59:db:75:f0:67:
70:e6:82:8f:fb:13:84:43:25:a9:bb:00:86:10:59:f0:c6:26:
54:4e:2d:d4:74:28:37:a5:d0:97:1d:32:42:37:ea:68:26:69:
90:7d:0d:50:4b:8f:f3:23:50:6f:a1:2e:83:3b:eb:7d:b5:cb:
af:56:c5:85:e8:c9:6a:1b:38:b2:c9:fe:a4:11:ed:e0:c8:4c:
2f:8e:32:70:3c:4b:08:32:a4:e8:88:15:d2:83:ce:60:f1:b3:
56:0d:cf:fc:a6:3e:19:8a:01:af:91:c2:8e:c4:3b:30:e0:5d:
b6:f7:c6:97:bc:5e:5d:82:2c:9e:54:c4:1b:33:ce:31:a2:28:
58:17:45:26:1d:ce:f6:0b:3c:d9:12:5a:f1:54:7f:cd:a0:33:
b6:59:a6:68:ea:24:87:8c:73:f3:1c:8f:67:54:44:5b:dd:0d:
89:2c:11:6e:6a:38:2d:44:58:10:b5:30:b9:f6:63:7e:51:a1:
93:53:0c:09:04:cb:33:85:f3:6b:fd:84:a2:3f:cc:85:7e:5d:
56:19:fc:dd:a2:81:1c:14:66:43:ae:9b:d0:c5:ba:4d:ea:f0:
c8:27:6a:32
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYjgpqDwO7Q5IvEcc8q0uh1pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjIyMDEwOTU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2Q5ZTI3NTUxMWE1MzgyMDdhZDQwMjQ1YTUxYmU3NTk4YmUwMzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzPGiZ4s5Iles6FmT59EVMJJQUwa
a+ugIQYmt2llCQvQoG6QvlJLi/V894/96BszvBcDGBynYbFN8ZtBaYVCGkeQl2x0
08HuAo8mZPFXAEtArdGlmOWwwAxv0SO+nS2qzxG4cmiAdrOkFbcm/Ln5rQOCkCEC
2N48E8U4FPDHX21lqaujyd777HCzBekawbNdQPCoQ0KYKZXVG3ZRVwIVX9mX4Cop
llaUILrdeyNYEpnLiMqnqlm5XWDEDHcIIHSQTaelnzjdSqvMV8JrCynbLqOziRS3
lOnG2pc1hjrH2N68wPwwDWUBU7CsTQXcZLRtZYHVIyVIFNNnPqR9DazwKQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFzZ4nVRGlOCB61AJFpRvnWYvgN7MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWE5uaWRWRWFVNElIclVBa1dsRy1kWmktQTNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADh2kqJfVDsr8LxLM7Z8
6SPyNQLOV7ff3jqNUQEiAm1Z23XwZ3Dmgo/7E4RDJam7AIYQWfDGJlROLdR0KDel
0JcdMkI36mgmaZB9DVBLj/MjUG+hLoM76321y69WxYXoyWobOLLJ/qQR7eDITC+O
MnA8SwgypOiIFdKDzmDxs1YNz/ymPhmKAa+Rwo7EOzDgXbb3xpe8Xl2CLJ5UxBsz
zjGiKFgXRSYdzvYLPNkSWvFUf82gM7ZZpmjqJIeMc/Mcj2dURFvdDYksEW5qOC1E
WBC1MLn2Y35RoZNTDAkEyzOF82v9hKI/zIV+XVYZ/N2igRwUZkOum9DFuk3q8Mgn
ajI=
-----END CERTIFICATE-----
Generated at Thu May 1 13:39:51 2025 by rpki-client