Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/be2aUb_oHNbOU94YYA_2QyyN0Bw.roa
File: be2aUb_oHNbOU94YYA_2QyyN0Bw.roa (raw, json)
Hash identifier: yvOP4771nwL4xJPbRAfbeBdaIxBmNd3EbpR3+Eve7AM=
Subject key identifier: 6D:ED:9A:51:BF:E8:1C:D6:CE:53:DE:18:60:0F:F6:43:2C:8D:D0:1C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018951F621C3619793C70888FFE76E1FE572
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/be2aUb_oHNbOU94YYA_2QyyN0Bw.roa
Signing time: Fri 14 Jul 2023 01:13:52 +0000
ROA not before: Fri 14 Jul 2023 01:13:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:51:f6:21:c3:61:97:93:c7:08:88:ff:e7:6e:1f:e5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 14 01:13:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ded9a51bfe81cd6ce53de18600ff6432c8dd01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6c:8c:a7:47:79:97:b3:c6:61:8b:90:fc:5b:
eb:04:42:f5:51:8c:09:97:cd:87:37:24:d3:75:da:
4a:f3:ba:91:79:4d:ad:1b:ac:04:ee:b7:4a:4b:0b:
7c:0c:5c:7d:4a:72:31:43:7e:c6:1d:fb:a6:7a:60:
c7:d2:6b:04:a6:b1:17:c2:53:8d:d9:0f:4a:b9:91:
c7:de:2b:43:c2:86:f8:ea:32:72:d6:90:67:b6:e1:
af:77:1a:5c:08:a7:ca:be:33:a4:67:51:f9:71:4b:
c5:4d:dd:6f:7b:82:59:94:73:c8:8a:b0:1d:8a:c8:
e3:78:68:4b:39:12:23:28:a2:64:41:9a:c9:21:09:
cd:e2:1b:89:f3:df:e8:28:7e:cc:8b:1f:a1:3a:af:
33:5d:94:9d:62:03:66:c6:d9:da:29:b8:54:24:94:
4c:d3:0e:78:52:23:34:76:79:6e:00:77:61:75:ba:
56:a6:c8:49:3b:eb:81:18:2c:49:f5:08:b0:e3:1d:
35:05:50:7a:fd:a3:ff:a9:85:cb:5c:ec:72:e6:3e:
09:f7:2b:41:01:8d:69:5b:ff:57:3a:c0:c7:0e:9c:
eb:4c:a0:08:1a:7e:8d:c6:59:98:0d:04:17:bb:29:
c6:ce:e7:5a:12:c4:9d:f2:01:92:0b:07:f0:9d:9b:
2a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:ED:9A:51:BF:E8:1C:D6:CE:53:DE:18:60:0F:F6:43:2C:8D:D0:1C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/be2aUb_oHNbOU94YYA_2QyyN0Bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:03:b1:87:18:08:b1:7f:7e:72:f2:fe:35:28:06:40:c0:ed:
15:88:a5:16:c6:57:42:68:c4:82:4a:d6:44:38:37:a7:92:2f:
3f:b5:10:a2:1f:c2:58:ce:fe:2c:1e:e6:19:c7:72:7f:f0:f6:
0b:7e:a4:fb:0d:cc:3b:c7:c9:eb:6e:a1:2e:d3:0f:0e:de:78:
52:ec:dc:55:3c:bc:a5:34:3b:dd:a2:1c:b9:8a:1c:9a:5a:8e:
56:42:d0:58:26:5e:ac:c1:ac:c1:db:4a:9a:fb:87:12:1a:da:
bb:07:87:86:8b:63:85:d6:c5:9a:a2:fe:6b:4a:f4:47:32:5c:
a0:a2:6b:ff:78:ce:8e:2a:b4:56:90:dc:45:1b:a6:a5:5c:1e:
12:9d:9b:95:2a:d9:57:13:ae:7b:e7:04:18:2e:62:b8:ea:72:
4a:7c:10:d2:27:3b:13:cf:46:a6:a8:07:04:df:ec:4c:aa:17:
38:b5:30:2b:1a:60:25:99:43:8f:6f:97:e9:a9:ea:de:ba:2c:
72:a9:bb:01:8d:d6:3a:19:ab:ca:91:8d:3f:40:59:d1:72:24:
5d:1a:a6:72:75:30:e8:ec:39:3f:d1:58:85:14:57:27:62:12:
2d:99:3f:50:c4:19:41:ab:63:55:29:81:ff:12:79:1a:ec:f0:
12:d2:0e:e1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlR9iHDYZeTxwiI/+duH+VyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzE0MDExMzUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGVkOWE1MWJmZTgxY2Q2Y2U1M2RlMTg2MDBmZjY0MzJjOGRkMDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GyMp0d5l7PGYYuQ/FvrBEL1UYwJ
l82HNyTTddpK87qReU2tG6wE7rdKSwt8DFx9SnIxQ37GHfumemDH0msEprEXwlON
2Q9KuZHH3itDwob46jJy1pBntuGvdxpcCKfKvjOkZ1H5cUvFTd1ve4JZlHPIirAd
isjjeGhLORIjKKJkQZrJIQnN4huJ89/oKH7Mix+hOq8zXZSdYgNmxtnaKbhUJJRM
0w54UiM0dnluAHdhdbpWpshJO+uBGCxJ9Qiw4x01BVB6/aP/qYXLXOxy5j4J9ytB
AY1pW/9XOsDHDpzrTKAIGn6NxlmYDQQXuynGzudaEsSd8gGSCwfwnZsqFwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFG3tmlG/6BzWzlPeGGAP9kMsjdAcMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYmUyYVViX29ITmJPVTk0WVlBXzJReXlOMEJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFEDsYcYCLF/fnLy/jUo
BkDA7RWIpRbGV0JoxIJK1kQ4N6eSLz+1EKIfwljO/iwe5hnHcn/w9gt+pPsNzDvH
yetuoS7TDw7eeFLs3FU8vKU0O92iHLmKHJpajlZC0FgmXqzBrMHbSpr7hxIa2rsH
h4aLY4XWxZqi/mtK9EcyXKCia/94zo4qtFaQ3EUbpqVcHhKdm5Uq2VcTrnvnBBgu
Yrjqckp8ENInOxPPRqaoBwTf7EyqFzi1MCsaYCWZQ49vl+mp6t66LHKpuwGN1joZ
q8qRjT9AWdFyJF0apnJ1MOjsOT/RWIUUVydiEi2ZP1DEGUGrY1Upgf8SeRrs8BLS
DuE=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:38 2025 by rpki-client