Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_JxCGBjRlibadp8NsT0D5nMLfe8.roa
File: _JxCGBjRlibadp8NsT0D5nMLfe8.roa (raw, json)
Hash identifier: zQX7w9NpbbwQ0xA0RIohcLxZW2xTxWa8kA52WdLiMWQ=
Subject key identifier: FC:9C:42:18:18:D1:96:26:DA:76:9F:0D:B1:3D:03:E6:73:0B:7D:EF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188BF65424E3C427AB6C6E50A4A8DB740A3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_JxCGBjRlibadp8NsT0D5nMLfe8.roa
Signing time: Thu 15 Jun 2023 14:11:04 +0000
ROA not before: Thu 15 Jun 2023 14:11:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:65:42:4e:3c:42:7a:b6:c6:e5:0a:4a:8d:b7:40:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 15 14:11:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc9c421818d19626da769f0db13d03e6730b7def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ef:96:21:b5:d5:9c:f8:72:fe:a3:e4:97:6b:
c0:39:0f:df:c0:f8:ba:c7:58:61:f9:28:d4:6a:64:
43:ad:1c:6c:d7:39:2b:c9:ca:55:1a:74:1b:3c:5c:
f5:e8:04:a1:a1:73:16:23:76:6f:4a:86:2a:f2:f2:
d9:43:11:53:9d:dd:56:a0:e5:bc:f3:70:17:82:01:
c0:32:83:90:9c:4f:8d:9b:9b:28:13:7b:70:ea:f8:
7f:fa:0b:65:15:04:9a:2b:59:ff:a0:ec:24:5c:a7:
f0:ad:32:7b:06:1b:b5:65:05:08:39:43:2d:58:4d:
54:13:06:b5:94:10:cc:b2:08:6f:66:5c:2f:85:ec:
b5:9a:b8:8f:f4:a4:97:f6:b9:67:a6:e1:cd:c1:79:
47:d9:0a:ec:b3:51:eb:87:2d:ad:28:ac:01:9a:a6:
d0:63:c3:ef:ac:8d:69:44:82:64:9b:dc:9a:a8:a2:
29:2e:04:12:d3:89:63:25:44:0e:ba:41:50:e7:ab:
62:f2:41:b3:ca:da:16:56:4f:1a:d3:84:48:8f:ff:
46:f9:f5:07:08:59:46:a4:68:9e:ff:c3:35:47:51:
99:15:fa:29:28:f8:fd:e3:b0:99:c6:69:ff:2e:bd:
62:9f:68:8f:da:fa:d2:48:44:94:76:81:d7:4e:67:
39:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9C:42:18:18:D1:96:26:DA:76:9F:0D:B1:3D:03:E6:73:0B:7D:EF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_JxCGBjRlibadp8NsT0D5nMLfe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:9e:fe:56:85:7e:9c:99:b1:62:89:bc:e8:3d:42:0f:8a:df:
ee:45:26:3c:42:b3:9a:ed:4b:52:1e:23:bc:2e:61:d7:e2:f6:
29:d8:db:b7:7e:db:ce:3e:89:6c:73:0d:6f:8a:41:34:79:87:
75:ad:9a:cd:4c:f8:7b:e9:34:5b:99:b1:cb:4a:62:9f:41:27:
d8:f0:22:6b:13:f1:7c:78:a4:db:0e:32:aa:51:b0:22:9f:75:
23:49:a8:88:16:8e:e5:c2:4a:fa:b5:f0:25:c7:b9:b5:2c:17:
27:38:2b:78:08:f4:f3:b4:42:e1:34:33:b5:04:27:b5:ef:21:
e8:7c:80:69:d0:7d:f8:77:2e:86:9a:c3:4e:1d:dd:c0:7e:68:
7c:4b:6b:4b:de:17:4c:6d:b6:88:66:ef:5f:f0:57:3d:c6:27:
96:95:b1:44:74:4e:1d:a1:c6:23:50:69:17:90:10:87:6c:74:
13:e1:3a:24:3e:ca:a9:23:76:7a:b6:e3:5f:bd:ac:21:24:ad:
fb:3c:2f:9e:16:e2:bc:13:1b:f3:2c:3f:e5:e4:17:f3:74:2f:
3f:60:c7:b6:37:cf:ed:e5:c3:43:ce:1c:23:5e:03:b1:20:3d:
5c:d6:43:57:db:e1:a5:78:0d:de:cf:b9:07:3e:45:13:71:51:
dc:f4:db:91
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYi/ZUJOPEJ6tsblCkqNt0CjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjE1MTQxMTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzljNDIxODE4ZDE5NjI2ZGE3NjlmMGRiMTNkMDNlNjczMGI3ZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju+WIbXVnPhy/qPkl2vAOQ/fwPi6
x1hh+SjUamRDrRxs1zkrycpVGnQbPFz16AShoXMWI3ZvSoYq8vLZQxFTnd1WoOW8
83AXggHAMoOQnE+Nm5soE3tw6vh/+gtlFQSaK1n/oOwkXKfwrTJ7Bhu1ZQUIOUMt
WE1UEwa1lBDMsghvZlwvhey1mriP9KSX9rlnpuHNwXlH2Qrss1Hrhy2tKKwBmqbQ
Y8PvrI1pRIJkm9yaqKIpLgQS04ljJUQOukFQ56ti8kGzytoWVk8a04RIj/9G+fUH
CFlGpGie/8M1R1GZFfopKPj947CZxmn/Lr1in2iP2vrSSESUdoHXTmc5NwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPycQhgY0ZYm2nafDbE9A+ZzC33vMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvX0p4Q0dCalJsaWJhZHA4TnNUMEQ1bk1MZmU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIKe/laFfpyZsWKJvOg9
Qg+K3+5FJjxCs5rtS1IeI7wuYdfi9inY27d+284+iWxzDW+KQTR5h3Wtms1M+Hvp
NFuZsctKYp9BJ9jwImsT8Xx4pNsOMqpRsCKfdSNJqIgWjuXCSvq18CXHubUsFyc4
K3gI9PO0QuE0M7UEJ7XvIeh8gGnQffh3Loaaw04d3cB+aHxLa0veF0xttohm71/w
Vz3GJ5aVsUR0Th2hxiNQaReQEIdsdBPhOiQ+yqkjdnq241+9rCEkrfs8L54W4rwT
G/MsP+XkF/N0Lz9gx7Y3z+3lw0POHCNeA7EgPVzWQ1fb4aV4Dd7PuQc+RRNxUdz0
25E=
-----END CERTIFICATE-----
Generated at Wed Apr 30 23:26:38 2025 by rpki-client