Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aMbF9FuoyG2DdRAyZ9U6Cfrk0AU.roa
File: aMbF9FuoyG2DdRAyZ9U6Cfrk0AU.roa (raw, json)
Hash identifier: aTiY1Hw5Hee1A+avhIs8ScqHGVhbaxZEzfrbIEvXqQw=
Subject key identifier: 68:C6:C5:F4:5B:A8:C8:6D:83:75:10:32:67:D5:3A:09:FA:E4:D0:05
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018938A34093D00AF660F334D6FFBD50061A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aMbF9FuoyG2DdRAyZ9U6Cfrk0AU.roa
Signing time: Sun 09 Jul 2023 03:12:50 +0000
ROA not before: Sun 09 Jul 2023 03:12:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:38:a3:40:93:d0:0a:f6:60:f3:34:d6:ff:bd:50:06:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 9 03:12:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68c6c5f45ba8c86d8375103267d53a09fae4d005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:aa:0e:fc:44:74:bf:ee:3d:e3:d5:34:47:9e:
ab:55:d7:57:f7:5e:ba:f2:87:bd:30:4f:2b:d5:a1:
e6:db:c1:36:23:2d:4b:ce:53:4b:29:15:c1:60:57:
8a:4d:83:cd:f3:d3:bd:12:6b:47:19:4b:52:92:cb:
d7:8a:da:a8:ed:0d:ca:e3:b5:fa:2b:4d:d1:3c:47:
8b:c3:68:6f:f0:bf:d3:b7:70:54:4b:58:ac:c4:6d:
05:87:da:3b:08:71:16:6d:32:eb:6c:8f:97:66:7e:
e7:8a:ac:f9:a2:eb:73:c7:6f:37:3e:24:10:80:72:
01:b9:69:df:95:83:d3:28:42:75:aa:ff:48:43:ef:
a1:3d:17:8d:aa:e5:6f:be:c1:78:ce:b1:2f:f7:b7:
eb:a9:68:18:90:c0:ff:e7:70:6c:55:34:30:ca:0e:
68:db:a4:55:e9:31:97:71:56:62:f1:62:7f:d3:16:
23:46:16:20:32:e5:2a:39:c5:4d:c3:39:8b:b6:49:
89:dc:f1:b3:1c:6e:5a:64:2b:b3:e9:19:28:9d:6d:
b7:f7:68:b0:4a:58:a4:6a:96:49:0d:7c:46:4a:c1:
4f:b7:99:64:60:ec:ad:4e:10:b5:52:bf:8b:a0:7d:
85:f9:00:1b:16:70:fb:8a:69:a7:1f:4a:e5:e0:54:
25:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C6:C5:F4:5B:A8:C8:6D:83:75:10:32:67:D5:3A:09:FA:E4:D0:05
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aMbF9FuoyG2DdRAyZ9U6Cfrk0AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:f0:d7:72:8f:00:86:fa:16:16:db:48:db:b1:57:44:cd:4b:
4b:43:6c:7b:e2:57:f0:ff:a4:79:24:e3:d6:86:d6:06:da:45:
f9:ad:2a:4a:17:bc:40:7f:e0:45:d2:a4:4a:86:15:53:2d:c8:
86:9f:44:fb:6f:58:dd:94:86:2b:78:96:bb:b5:ed:d4:2d:d3:
ca:51:07:aa:d0:9e:1b:24:24:57:a9:ad:32:46:c3:49:41:ef:
c8:a2:65:fe:84:0b:80:ba:f3:dd:ed:f5:e2:66:7b:35:6e:b6:
27:4c:b2:a5:64:ef:73:37:cb:61:40:9e:92:96:40:16:a1:55:
3d:b8:b5:a8:f7:05:07:53:17:d6:9c:3e:0d:cf:72:40:2c:80:
70:f1:5d:5e:74:8e:15:f6:b3:e5:b1:1a:2f:84:27:6e:06:a2:
63:ac:58:40:fe:ed:92:d8:9f:eb:8b:62:c2:81:02:a2:43:4f:
4b:4a:ad:9b:f8:db:0e:03:1d:81:ad:3d:77:02:58:e5:86:bf:
fe:3b:de:e8:da:f5:2f:12:51:ce:ae:4b:69:6f:ae:63:db:b3:
24:fc:f4:f0:95:38:73:c6:a0:72:b3:40:cf:ca:ef:fe:a2:bc:
3d:2f:c7:cb:ba:d8:a7:07:ed:c8:4e:1c:f1:a1:d7:2d:0b:03:
ca:c6:28:75
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYk4o0CT0Ar2YPM01v+9UAYaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzA5MDMxMjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGM2YzVmNDViYThjODZkODM3NTEwMzI2N2Q1M2EwOWZhZTRkMDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaoO/ER0v+4949U0R56rVddX9166
8oe9ME8r1aHm28E2Iy1LzlNLKRXBYFeKTYPN89O9EmtHGUtSksvXitqo7Q3K47X6
K03RPEeLw2hv8L/Tt3BUS1isxG0Fh9o7CHEWbTLrbI+XZn7niqz5outzx283PiQQ
gHIBuWnflYPTKEJ1qv9IQ++hPReNquVvvsF4zrEv97frqWgYkMD/53BsVTQwyg5o
26RV6TGXcVZi8WJ/0xYjRhYgMuUqOcVNwzmLtkmJ3PGzHG5aZCuz6RkonW2392iw
SlikapZJDXxGSsFPt5lkYOytThC1Ur+LoH2F+QAbFnD7immnH0rl4FQlSQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGjGxfRbqMhtg3UQMmfVOgn65NAFMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYU1iRjlGdW95RzJEZFJBeVo5VTZDZnJrMEFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAArw13KPAIb6FhbbSNux
V0TNS0tDbHviV/D/pHkk49aG1gbaRfmtKkoXvEB/4EXSpEqGFVMtyIafRPtvWN2U
hit4lru17dQt08pRB6rQnhskJFeprTJGw0lB78iiZf6EC4C6893t9eJmezVutidM
sqVk73M3y2FAnpKWQBahVT24taj3BQdTF9acPg3PckAsgHDxXV50jhX2s+WxGi+E
J24GomOsWED+7ZLYn+uLYsKBAqJDT0tKrZv42w4DHYGtPXcCWOWGv/473uja9S8S
Uc6uS2lvrmPbsyT89PCVOHPGoHKzQM/K7/6ivD0vx8u62KcH7chOHPGh1y0LA8rG
KHU=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:48 2025 by rpki-client