Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_au5rsEeLkOANq-_XaTNe4uahZA.roa
File: _au5rsEeLkOANq-_XaTNe4uahZA.roa (raw, json)
Hash identifier: ngQcqNxRbdImbwm8byUWZtP5eYtRLCTERZ9HEcrOHjQ=
Subject key identifier: FD:AB:B9:AE:C1:1E:2E:43:80:36:AF:BF:5D:A4:CD:7B:8B:9A:85:90
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01897DBAE4AA7F46849BBC7C34E9C05421C6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_au5rsEeLkOANq-_XaTNe4uahZA.roa
Signing time: Sat 22 Jul 2023 13:12:27 +0000
ROA not before: Sat 22 Jul 2023 13:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7d:ba:e4:aa:7f:46:84:9b:bc:7c:34:e9:c0:54:21:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 22 13:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdabb9aec11e2e438036afbf5da4cd7b8b9a8590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e5:57:c4:fb:0c:49:93:f9:91:c9:0d:d4:3d:
4f:00:55:41:85:0d:6c:e7:12:71:30:d4:2a:7d:b7:
cf:f0:85:71:a5:2a:84:43:0b:45:89:27:c1:7d:8a:
4f:21:d8:00:50:2f:f4:c1:b5:02:ea:bd:53:e9:bd:
e2:43:32:60:8d:71:2a:14:c0:24:1a:48:4e:6c:fb:
01:57:aa:2d:1d:55:5c:81:ba:37:07:c4:55:89:9d:
0f:8f:41:5b:b5:c0:9a:73:06:90:0d:e2:36:f9:9f:
c2:97:21:92:96:eb:1a:3f:7b:1c:5c:a3:e2:59:cb:
43:0e:01:86:03:7d:f8:d9:fb:e7:52:45:ff:cb:ae:
73:58:d5:dd:3a:ef:63:45:89:54:2b:f7:c2:a7:9d:
4a:70:3f:e0:ff:2d:18:47:e4:df:07:cc:1b:2b:eb:
2b:4f:52:f8:c4:1c:f2:1f:ce:26:23:91:f8:21:6e:
4d:16:10:a5:38:81:f7:5d:9a:92:d1:9c:d1:bf:b4:
5b:7e:6d:18:d0:95:f9:8c:89:a1:f0:71:7d:76:0a:
cd:58:00:a0:59:5a:6b:ad:f0:f9:24:d5:90:a8:8f:
18:e4:99:af:67:23:12:84:5d:44:f3:ac:28:71:b8:
0e:53:99:96:cb:f7:a7:2e:2f:6b:68:e2:5b:1f:98:
f9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AB:B9:AE:C1:1E:2E:43:80:36:AF:BF:5D:A4:CD:7B:8B:9A:85:90
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_au5rsEeLkOANq-_XaTNe4uahZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:75:6a:da:98:6f:8b:ff:3c:d0:b6:d6:25:a7:51:8c:08:9b:
77:cd:44:e6:47:d6:dc:32:57:6e:91:04:93:7a:bd:2f:1d:63:
08:2e:95:65:a6:4c:87:3b:88:39:cf:00:d4:e6:93:c8:ef:e1:
e7:f2:3e:ab:12:7a:06:b2:dc:e0:18:9a:66:a8:09:f4:05:90:
03:43:b2:29:cb:a8:1c:a7:04:af:16:f9:d4:05:14:8c:5f:82:
af:4f:dd:ae:38:4e:f1:3c:e8:ba:de:9a:8e:50:1c:39:d2:52:
a6:33:8c:e8:ae:ae:93:61:03:16:44:1b:9e:4a:21:c4:c9:5d:
6f:cd:bc:9e:48:cc:fb:d5:84:11:7f:5b:a9:27:3a:ad:f0:13:
27:89:f6:4d:d1:f9:6e:57:45:f6:ac:28:8e:e5:58:4a:c6:db:
98:84:03:78:0a:de:16:a0:6c:7d:84:3a:09:f4:da:c2:ee:4c:
f6:53:02:80:8e:94:ea:7a:9d:0c:6d:10:2c:e2:08:8b:9b:4b:
41:82:c7:aa:96:f0:19:e3:bc:76:49:1b:c5:01:42:35:cc:8a:
cf:28:82:a1:5e:27:3c:ba:cd:d5:d9:87:fb:d1:08:6f:ef:f8:
d2:5d:36:70:ec:5d:a8:cb:40:28:8a:0c:1c:4a:79:46:b6:e4:
15:d4:70:86
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYl9uuSqf0aEm7x8NOnAVCHGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzIyMTMxMjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGFiYjlhZWMxMWUyZTQzODAzNmFmYmY1ZGE0Y2Q3YjhiOWE4NTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+VXxPsMSZP5kckN1D1PAFVBhQ1s
5xJxMNQqfbfP8IVxpSqEQwtFiSfBfYpPIdgAUC/0wbUC6r1T6b3iQzJgjXEqFMAk
GkhObPsBV6otHVVcgbo3B8RViZ0Pj0FbtcCacwaQDeI2+Z/ClyGSlusaP3scXKPi
WctDDgGGA3342fvnUkX/y65zWNXdOu9jRYlUK/fCp51KcD/g/y0YR+TfB8wbK+sr
T1L4xBzyH84mI5H4IW5NFhClOIH3XZqS0ZzRv7Rbfm0Y0JX5jImh8HF9dgrNWACg
WVprrfD5JNWQqI8Y5JmvZyMShF1E86wocbgOU5mWy/enLi9raOJbH5j5GwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFP2rua7BHi5DgDavv12kzXuLmoWQMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvX2F1NXJzRWVMa09BTnEtX1hhVE5lNHVhaFpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHN1atqYb4v/PNC21iWn
UYwIm3fNROZH1twyV26RBJN6vS8dYwgulWWmTIc7iDnPANTmk8jv4efyPqsSegay
3OAYmmaoCfQFkANDsinLqBynBK8W+dQFFIxfgq9P3a44TvE86Lremo5QHDnSUqYz
jOiurpNhAxZEG55KIcTJXW/NvJ5IzPvVhBF/W6knOq3wEyeJ9k3R+W5XRfasKI7l
WErG25iEA3gK3hagbH2EOgn02sLuTPZTAoCOlOp6nQxtECziCIubS0GCx6qW8Bnj
vHZJG8UBQjXMis8ogqFeJzy6zdXZh/vRCG/v+NJdNnDsXajLQCiKDBxKeUa25BXU
cIY=
-----END CERTIFICATE-----
Generated at Thu May 1 12:06:20 2025 by rpki-client