Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c-IPu7abgi06SEpS-zRg1ryvZ-c.roa
File: c-IPu7abgi06SEpS-zRg1ryvZ-c.roa (raw, json)
Hash identifier: 3phxxXvIKHrwNzyiUlrkIcPN2ZKN4raTyKHAMlxsXpc=
Subject key identifier: 73:E2:0F:BB:B6:9B:82:2D:3A:48:4A:52:FB:34:60:D6:BC:AF:67:E7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B9D0980621C97A392EC2108D6A9AC717
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c-IPu7abgi06SEpS-zRg1ryvZ-c.roa
Signing time: Tue 07 Mar 2023 02:05:00 +0000
ROA not before: Tue 07 Mar 2023 02:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:b9d0:d71/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b9:d0:98:06:21:c9:7a:39:2e:c2:10:8d:6a:9a:c7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 7 02:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73e20fbbb69b822d3a484a52fb3460d6bcaf67e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:76:e1:56:9f:c0:09:b7:d5:a8:b1:2b:f3:27:
2e:48:01:d7:bc:b8:16:f7:b6:32:1d:dd:b8:ec:3b:
42:8a:b0:ca:8e:4f:26:d4:57:85:8a:b8:9a:17:aa:
2b:43:74:d9:0b:2e:b3:05:ca:8b:e5:26:d1:5d:67:
a3:c9:72:dc:d9:e7:eb:9e:78:4d:b3:e3:7a:f2:d9:
ca:4f:c9:f0:8f:f6:31:85:36:ba:ab:97:be:69:40:
5e:b5:94:bb:db:c3:87:f9:a5:da:bc:7f:1c:ec:3f:
b4:7f:30:98:10:81:46:1b:b0:bc:b9:3e:dd:6e:fa:
27:1f:f0:4a:65:f1:6f:cd:c6:c1:ce:18:10:d9:e2:
39:9d:4d:be:a6:1e:1c:45:c2:c2:09:1e:13:ce:af:
ec:6d:39:99:49:fd:83:82:9c:8f:5e:0b:48:c7:ae:
50:01:b5:07:a2:d2:70:ad:68:54:ad:db:75:47:0b:
9c:22:dc:6a:91:48:13:ec:c8:23:0e:a9:ee:59:b1:
e6:9f:59:fb:aa:da:f7:10:6e:49:df:2c:48:66:86:
cd:ec:33:c1:75:5f:61:0c:2a:fd:aa:1c:d4:e1:08:
16:c3:bd:17:54:56:2f:c3:b0:07:ff:cf:b3:1c:19:
df:e8:f0:24:80:73:21:86:49:b3:d5:4b:94:a1:46:
4b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E2:0F:BB:B6:9B:82:2D:3A:48:4A:52:FB:34:60:D6:BC:AF:67:E7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c-IPu7abgi06SEpS-zRg1ryvZ-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:ad:c8:93:37:e1:cd:b8:c5:7b:d2:67:07:c6:18:bb:1c:e5:
1b:18:25:60:96:f9:87:5c:2d:03:f3:b9:86:45:ea:65:87:bf:
b3:18:ac:d3:d6:03:f3:80:ad:ed:17:d3:fc:be:3d:ee:54:e3:
37:b9:47:f2:7a:d3:7d:e4:b1:ff:ad:0d:6c:c1:d6:12:32:3b:
b7:f7:7c:e1:2e:2a:db:b9:4f:c8:66:51:c0:bd:f9:4c:3b:26:
ae:b1:b1:08:ae:90:9f:64:5d:f9:1b:90:a6:1e:cd:6c:2c:4b:
c5:53:70:a2:aa:9b:c0:bc:aa:65:c8:3e:be:d1:81:1a:5f:83:
91:07:6e:88:1e:9d:67:67:af:fc:b0:9e:90:2a:95:b4:fc:31:
3f:9d:cf:b4:ca:a5:d6:cd:4e:51:7d:89:b5:a0:1e:47:05:0c:
b8:05:bb:49:a0:6d:67:f4:02:27:51:51:bf:54:e9:3c:b3:88:
6e:e0:61:ad:97:53:2d:d4:50:24:bf:38:83:94:04:0e:e6:5e:
83:18:05:3f:33:b6:4e:cf:f2:38:1d:ee:1d:e6:01:aa:20:b3:
76:0b:fd:c0:d7:78:00:d7:89:33:fe:1b:51:23:0e:aa:ae:b9:
22:7c:6c:47:05:f6:d8:8c:8f:9c:2c:1c:3a:06:5f:e6:ab:36:
4b:21:bf:b0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYa50JgGIcl6OS7CEI1qmscXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzA3MDIwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2UyMGZiYmI2OWI4MjJkM2E0ODRhNTJmYjM0NjBkNmJjYWY2N2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXbhVp/ACbfVqLEr8ycuSAHXvLgW
97YyHd247DtCirDKjk8m1FeFiriaF6orQ3TZCy6zBcqL5SbRXWejyXLc2efrnnhN
s+N68tnKT8nwj/YxhTa6q5e+aUBetZS728OH+aXavH8c7D+0fzCYEIFGG7C8uT7d
bvonH/BKZfFvzcbBzhgQ2eI5nU2+ph4cRcLCCR4Tzq/sbTmZSf2DgpyPXgtIx65Q
AbUHotJwrWhUrdt1RwucItxqkUgT7MgjDqnuWbHmn1n7qtr3EG5J3yxIZobN7DPB
dV9hDCr9qhzU4QgWw70XVFYvw7AH/8+zHBnf6PAkgHMhhkmz1UuUoUZLEQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHPiD7u2m4ItOkhKUvs0YNa8r2fnMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYy1JUHU3YWJnaTA2U0VwUy16Umcxcnl2Wi1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADOtyJM34c24xXvSZwfG
GLsc5RsYJWCW+YdcLQPzuYZF6mWHv7MYrNPWA/OAre0X0/y+Pe5U4ze5R/J6033k
sf+tDWzB1hIyO7f3fOEuKtu5T8hmUcC9+Uw7Jq6xsQiukJ9kXfkbkKYezWwsS8VT
cKKqm8C8qmXIPr7RgRpfg5EHbogenWdnr/ywnpAqlbT8MT+dz7TKpdbNTlF9ibWg
HkcFDLgFu0mgbWf0AidRUb9U6TyziG7gYa2XUy3UUCS/OIOUBA7mXoMYBT8ztk7P
8jgd7h3mAaogs3YL/cDXeADXiTP+G1EjDqquuSJ8bEcF9tiMj5wsHDoGX+arNksh
v7A=
-----END CERTIFICATE-----
Generated at Thu May 1 08:01:57 2025 by rpki-client