Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/amlIoUHXsuq3-_WwyEw7-Vbjphw.roa
File: amlIoUHXsuq3-_WwyEw7-Vbjphw.roa (raw, json)
Hash identifier: 8XOs0ZQNcpFuPFvJe3uCcID8VPpB4WaDzECz1BnYolA=
Subject key identifier: 6A:69:48:A1:41:D7:B2:EA:B7:FB:F5:B0:C8:4C:3B:F9:56:E3:A6:1C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018801B4DA1CF7007FC28BF085D25BA5F761
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/amlIoUHXsuq3-_WwyEw7-Vbjphw.roa
Signing time: Tue 09 May 2023 18:10:09 +0000
ROA not before: Tue 09 May 2023 18:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:01:b4:da:1c:f7:00:7f:c2:8b:f0:85:d2:5b:a5:f7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 9 18:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a6948a141d7b2eab7fbf5b0c84c3bf956e3a61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:69:9f:55:e3:5e:7e:c5:18:84:2c:72:9b:5c:
0b:bb:aa:0a:b2:55:18:81:1f:f2:db:a1:f1:26:5c:
7b:71:4d:d0:d1:17:68:22:67:20:69:b0:d8:51:ba:
57:2b:41:18:19:77:59:03:85:e6:0f:59:1b:50:a4:
8a:b7:c3:73:2e:af:08:3e:3b:6f:6e:9f:3b:ce:df:
5a:18:67:1e:69:e7:76:44:5b:d1:3b:18:ff:7f:b2:
40:cf:4c:9d:71:5c:6f:67:b1:3c:55:a8:16:e4:6b:
29:28:96:2c:ce:51:5f:68:e0:68:28:e0:92:bc:7c:
9c:58:2a:23:07:98:49:51:1c:96:4e:dd:dd:d1:54:
d9:aa:48:ce:e5:78:c8:e0:ef:ea:b8:c9:eb:fd:9d:
f8:6f:36:4d:bf:e4:4c:89:53:04:73:6b:9e:55:86:
ef:1d:22:09:1a:9d:d5:ee:39:de:61:c5:95:de:b3:
db:58:6f:db:59:31:f8:a3:9f:76:ba:af:63:6a:4b:
f6:26:22:69:14:5f:ef:1a:c8:15:9d:65:56:d2:30:
00:49:4c:fb:c5:05:70:ed:a0:27:1f:b2:ed:27:02:
c4:ed:e8:14:92:01:8e:7c:8d:61:97:8f:dd:e3:c2:
9c:55:49:3f:76:ab:1d:9c:c4:73:1b:c2:4f:4b:83:
4a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:69:48:A1:41:D7:B2:EA:B7:FB:F5:B0:C8:4C:3B:F9:56:E3:A6:1C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/amlIoUHXsuq3-_WwyEw7-Vbjphw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:0d:50:c2:3f:c0:ad:08:df:cf:8e:39:92:15:70:da:3a:7a:
c2:8d:b4:99:d0:56:97:24:fe:b0:21:e8:03:34:72:07:46:67:
30:63:f6:a8:93:9c:f5:23:58:07:37:09:db:e5:f8:43:03:65:
b4:b0:d4:22:c7:f7:c0:e9:bc:e0:3d:06:90:e6:ac:cb:44:b8:
44:29:23:a3:f5:7b:d3:ee:d5:a6:5c:09:b0:2f:de:af:6e:b5:
88:70:b3:d9:f8:60:f9:f8:25:ff:2b:35:c9:1f:49:16:30:33:
1b:60:fe:38:94:1f:25:82:e1:02:bd:28:38:91:43:c7:45:16:
e6:44:1f:57:15:bc:7f:96:e0:4d:8d:fa:80:5a:0a:f3:e5:fc:
6b:91:d9:12:bd:67:3d:7f:a1:ed:84:ba:74:55:e9:d9:d1:80:
7e:55:c4:d2:18:47:8d:2f:22:21:e7:79:22:c4:d1:7c:ea:6b:
a0:59:ce:ed:0c:0f:78:96:bd:da:1a:7f:0a:70:80:0b:d7:48:
1e:47:71:0f:5c:f4:3a:e8:94:d6:c2:eb:48:29:2c:fc:94:77:
2d:ea:a2:24:18:9b:43:71:06:c0:c1:4f:8a:18:e5:7f:02:ea:
90:ed:7d:38:48:d0:76:99:54:b3:d4:f9:aa:2a:e0:b8:d8:7c:
05:f0:e5:8e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYgBtNoc9wB/wovwhdJbpfdhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTA5MTgxMDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTY5NDhhMTQxZDdiMmVhYjdmYmY1YjBjODRjM2JmOTU2ZTNhNjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2mfVeNefsUYhCxym1wLu6oKslUY
gR/y26HxJlx7cU3Q0RdoImcgabDYUbpXK0EYGXdZA4XmD1kbUKSKt8NzLq8IPjtv
bp87zt9aGGceaed2RFvROxj/f7JAz0ydcVxvZ7E8VagW5GspKJYszlFfaOBoKOCS
vHycWCojB5hJURyWTt3d0VTZqkjO5XjI4O/quMnr/Z34bzZNv+RMiVMEc2ueVYbv
HSIJGp3V7jneYcWV3rPbWG/bWTH4o592uq9jakv2JiJpFF/vGsgVnWVW0jAASUz7
xQVw7aAnH7LtJwLE7egUkgGOfI1hl4/d48KcVUk/dqsdnMRzG8JPS4NK+wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGppSKFB17Lqt/v1sMhMO/lW46YcMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYW1sSW9VSFhzdXEzLV9Xd3lFdzctVmJqcGh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFwNUMI/wK0I38+OOZIV
cNo6esKNtJnQVpck/rAh6AM0cgdGZzBj9qiTnPUjWAc3Cdvl+EMDZbSw1CLH98Dp
vOA9BpDmrMtEuEQpI6P1e9Pu1aZcCbAv3q9utYhws9n4YPn4Jf8rNckfSRYwMxtg
/jiUHyWC4QK9KDiRQ8dFFuZEH1cVvH+W4E2N+oBaCvPl/GuR2RK9Zz1/oe2EunRV
6dnRgH5VxNIYR40vIiHneSLE0Xzqa6BZzu0MD3iWvdoafwpwgAvXSB5HcQ9c9Dro
lNbC60gpLPyUdy3qoiQYm0NxBsDBT4oY5X8C6pDtfThI0HaZVLPU+aoq4LjYfAXw
5Y4=
-----END CERTIFICATE-----
Generated at Thu May 1 18:47:34 2025 by rpki-client