Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/__yTmkbk0ylDa28lujVZ6p2tOeU.roa
File: __yTmkbk0ylDa28lujVZ6p2tOeU.roa (raw, json)
Hash identifier: kxy1NgNlKPKsRBEl51hv3n+up7T35n+Ww+nWQd8Vf6U=
Subject key identifier: FF:FC:93:9A:46:E4:D3:29:43:6B:6F:25:BA:35:59:EA:9D:AD:39:E5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188560A220EF4969189DE598782E3429B5D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/__yTmkbk0ylDa28lujVZ6p2tOeU.roa
Signing time: Fri 26 May 2023 03:11:24 +0000
ROA not before: Fri 26 May 2023 03:11:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:56:0a:22:0e:f4:96:91:89:de:59:87:82:e3:42:9b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 26 03:11:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fffc939a46e4d329436b6f25ba3559ea9dad39e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cb:c3:ec:36:80:0c:df:d5:80:a4:9a:0e:1f:
84:9e:2a:21:ad:34:92:86:ce:74:74:d2:e6:22:65:
e7:80:fe:2d:3e:27:1e:75:f1:12:59:ae:4e:65:c3:
1b:fb:c4:08:05:ba:15:1d:66:2f:b4:0a:ac:e7:c3:
c0:0f:10:da:07:1c:dd:a2:c9:de:8f:6b:ab:5f:f2:
af:fd:ec:3d:eb:01:ad:0d:2b:ac:b2:79:f7:e5:b0:
86:59:22:33:b3:d4:de:29:b7:2e:b7:08:62:f6:80:
75:f1:4a:d0:b7:d7:9d:2f:82:d4:36:f1:27:b6:32:
91:c0:ed:54:24:e3:a7:a9:c6:27:c7:d7:9a:6f:43:
cd:ab:ee:35:c6:14:f5:3d:b5:ac:3d:f7:e6:57:7e:
52:4a:6e:c8:ef:df:67:e3:fc:b2:db:f2:65:94:1b:
97:ed:6a:c1:e7:42:fe:26:01:84:1c:88:7c:d0:d8:
f0:9b:e4:32:69:30:ff:54:a5:3e:f5:09:27:37:44:
3e:51:ee:b4:00:fc:44:be:56:57:7f:00:d6:20:07:
5e:01:d8:fc:c6:0d:b1:99:12:a4:ef:e8:d1:fc:98:
b8:8a:d5:ba:ea:af:7d:c9:b6:67:f6:c4:f3:1e:c6:
2a:ab:25:e2:0a:aa:56:d5:44:b7:e7:81:c4:61:a2:
58:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FC:93:9A:46:E4:D3:29:43:6B:6F:25:BA:35:59:EA:9D:AD:39:E5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/__yTmkbk0ylDa28lujVZ6p2tOeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:c2:4a:82:3b:d9:12:e6:2d:44:b2:cf:29:ea:33:35:d3:9b:
e6:c2:5f:9b:17:89:40:73:5a:95:96:a1:7b:e2:a8:d1:75:5d:
f3:ee:e5:22:19:61:20:d4:da:24:76:5f:fb:8a:ca:5b:25:bd:
51:b9:ba:e4:f4:00:3b:51:f9:d8:8b:52:dc:18:0e:2d:81:ab:
32:9d:b5:8a:fb:55:dc:f8:3e:6a:74:76:49:ae:76:87:be:fb:
56:61:ee:6a:d9:0d:be:51:7d:f9:ae:86:d8:0d:4f:39:2d:43:
d6:52:4c:63:d9:ca:da:84:ca:f4:e2:cf:59:0e:09:95:6b:91:
3d:63:97:b3:c2:8a:91:de:34:73:ae:ec:39:fc:ce:13:5e:04:
7e:e2:16:db:0f:e9:f9:02:61:51:cb:3c:7a:7f:93:1e:d0:97:
1e:4a:17:4e:29:98:cc:2b:4b:0f:e8:f4:a1:17:63:90:86:fb:
12:03:46:0b:94:d5:6a:2f:6c:23:c9:94:7a:c6:69:a2:ef:e5:
ad:69:19:9a:1a:17:25:3a:f9:c3:b7:e6:83:f6:d6:89:68:6b:
e1:81:38:4f:3f:23:fb:dd:28:79:c2:f5:ff:90:14:93:08:06:
de:a9:d5:fd:f4:65:1e:e3:5f:f4:c4:7b:f7:99:8d:53:f5:a8:
4c:85:9e:89
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhWCiIO9JaRid5Zh4LjQptdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTI2MDMxMTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmZjOTM5YTQ2ZTRkMzI5NDM2YjZmMjViYTM1NTllYTlkYWQzOWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cvD7DaADN/VgKSaDh+EniohrTSS
hs50dNLmImXngP4tPicedfESWa5OZcMb+8QIBboVHWYvtAqs58PADxDaBxzdosne
j2urX/Kv/ew96wGtDSussnn35bCGWSIzs9TeKbcutwhi9oB18UrQt9edL4LUNvEn
tjKRwO1UJOOnqcYnx9eab0PNq+41xhT1PbWsPffmV35SSm7I799n4/yy2/JllBuX
7WrB50L+JgGEHIh80Njwm+QyaTD/VKU+9QknN0Q+Ue60APxEvlZXfwDWIAdeAdj8
xg2xmRKk7+jR/Ji4itW66q99ybZn9sTzHsYqqyXiCqpW1US354HEYaJYAwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFP/8k5pG5NMpQ2tvJbo1WeqdrTnlMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvX195VG1rYmsweWxEYTI4bHVqVlo2cDJ0T2VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHrCSoI72RLmLUSyzynq
MzXTm+bCX5sXiUBzWpWWoXviqNF1XfPu5SIZYSDU2iR2X/uKylslvVG5uuT0ADtR
+diLUtwYDi2BqzKdtYr7Vdz4Pmp0dkmudoe++1Zh7mrZDb5RffmuhtgNTzktQ9ZS
TGPZytqEyvTiz1kOCZVrkT1jl7PCipHeNHOu7Dn8zhNeBH7iFtsP6fkCYVHLPHp/
kx7Qlx5KF04pmMwrSw/o9KEXY5CG+xIDRguU1WovbCPJlHrGaaLv5a1pGZoaFyU6
+cO35oP21oloa+GBOE8/I/vdKHnC9f+QFJMIBt6p1f30ZR7jX/TEe/eZjVP1qEyF
nok=
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:01:31 2025 by rpki-client