Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cle2KIujoNyaX-xdTK-Mqfh83ME.roa
File: cle2KIujoNyaX-xdTK-Mqfh83ME.roa (raw, json)
Hash identifier: hjpUoM/RMyW2mb+FD/jYOfTIutBFWZTO50a5a2VLzvI=
Subject key identifier: 72:57:B6:28:8B:A3:A0:DC:9A:5F:EC:5D:4C:AF:8C:A9:F8:7C:DC:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187E9E3ED5618534BA9386A9D68708925F0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cle2KIujoNyaX-xdTK-Mqfh83ME.roa
Signing time: Fri 05 May 2023 03:10:41 +0000
ROA not before: Fri 05 May 2023 03:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e9:e3:ed:56:18:53:4b:a9:38:6a:9d:68:70:89:25:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 5 03:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7257b6288ba3a0dc9a5fec5d4caf8ca9f87cdcc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7e:60:8f:18:3a:c0:4a:f6:5f:d7:3c:b5:06:
86:85:13:f5:6b:de:de:b7:bd:20:61:91:44:85:c7:
36:45:fd:36:da:32:1a:77:a2:43:39:77:b4:92:8f:
60:38:d0:7b:0d:ad:00:5f:1e:ef:eb:23:0d:5d:d9:
aa:26:1c:56:e6:74:3c:9c:10:11:fa:e1:e3:54:09:
0f:86:f4:bf:d6:d1:05:26:08:48:9a:38:0f:3a:1c:
9e:87:85:92:86:23:2f:4b:4f:0b:45:3a:b0:ea:89:
bf:e7:7e:6c:96:e6:72:4c:13:84:02:c9:e5:c5:0d:
8b:7c:95:27:34:51:d9:8b:c3:8c:2e:1c:00:9e:14:
ee:29:b5:de:ae:f0:d2:31:fe:98:a2:20:1c:26:23:
6c:1d:bf:8d:d9:c8:69:01:b7:ba:d6:35:9d:ac:8d:
22:a4:6e:e4:42:bb:af:a2:5e:e7:b4:4b:36:9d:ca:
5b:6e:e0:36:a3:0f:6c:08:44:3f:be:d6:4a:7e:5e:
5a:5d:a9:d5:89:d5:45:e2:b0:40:04:54:80:e2:b2:
a3:1e:7a:f3:7b:f7:c1:c9:ee:b6:f1:c0:60:d4:1c:
68:65:ca:64:a5:5f:1f:1a:df:4c:8f:df:b6:20:c8:
92:36:da:d1:30:c8:27:cf:3f:eb:1e:96:74:f9:c3:
20:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:57:B6:28:8B:A3:A0:DC:9A:5F:EC:5D:4C:AF:8C:A9:F8:7C:DC:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cle2KIujoNyaX-xdTK-Mqfh83ME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:a3:4a:91:61:d2:aa:05:ec:45:43:7a:3b:4b:3f:a1:7c:f7:
e0:d0:9d:52:96:52:0c:a3:43:5d:1e:28:99:33:0f:77:e6:08:
24:6c:8a:37:a0:c5:63:fd:ff:cb:73:f7:91:d8:a1:71:37:d2:
ef:6f:98:1b:35:bc:a6:ee:ba:1f:49:0f:f8:a9:25:63:87:df:
0a:9f:80:41:2a:b8:ff:cc:d9:38:f6:66:5a:77:ae:89:91:8c:
8e:64:57:e0:35:6e:69:2e:3c:6c:17:d6:ad:7b:0c:7b:c3:e0:
5e:a0:71:a0:fe:f6:cd:31:6c:cf:be:ac:12:04:bc:8a:bb:28:
f9:91:6c:c3:d6:25:49:2c:2a:f0:87:b8:da:bf:bf:60:68:f4:
3d:5a:6f:4a:cb:d6:5c:a6:86:2f:4d:28:87:56:db:90:24:32:
be:3f:f4:10:09:64:01:6a:dc:3a:05:34:3b:e7:b7:36:13:b8:
fd:d7:61:56:ee:34:c0:0d:6c:f2:f4:13:c4:40:ea:e2:b4:f5:
19:de:ca:32:cd:ae:70:7a:36:97:d4:7b:26:c3:6c:65:87:73:
7b:7d:fa:84:f8:63:75:77:1e:1b:b6:ab:68:32:27:07:ab:ba:
aa:87:90:e7:f6:f0:a4:61:2b:1b:1e:11:bf:04:0b:f9:a4:d8:
8e:b6:58:70
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYfp4+1WGFNLqThqnWhwiSXwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTA1MDMxMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjU3YjYyODhiYTNhMGRjOWE1ZmVjNWQ0Y2FmOGNhOWY4N2NkY2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxX5gjxg6wEr2X9c8tQaGhRP1a97e
t70gYZFEhcc2Rf022jIad6JDOXe0ko9gONB7Da0AXx7v6yMNXdmqJhxW5nQ8nBAR
+uHjVAkPhvS/1tEFJghImjgPOhyeh4WShiMvS08LRTqw6om/535sluZyTBOEAsnl
xQ2LfJUnNFHZi8OMLhwAnhTuKbXervDSMf6YoiAcJiNsHb+N2chpAbe61jWdrI0i
pG7kQruvol7ntEs2ncpbbuA2ow9sCEQ/vtZKfl5aXanVidVF4rBABFSA4rKjHnrz
e/fBye628cBg1BxoZcpkpV8fGt9Mj9+2IMiSNtrRMMgnzz/rHpZ0+cMgUQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHJXtiiLo6Dcml/sXUyvjKn4fNzBMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvY2xlMktJdWpvTnlhWC14ZFRLLU1xZmg4M01FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACKjSpFh0qoF7EVDejtL
P6F89+DQnVKWUgyjQ10eKJkzD3fmCCRsijegxWP9/8tz95HYoXE30u9vmBs1vKbu
uh9JD/ipJWOH3wqfgEEquP/M2Tj2Zlp3romRjI5kV+A1bmkuPGwX1q17DHvD4F6g
caD+9s0xbM++rBIEvIq7KPmRbMPWJUksKvCHuNq/v2Bo9D1ab0rL1lymhi9NKIdW
25AkMr4/9BAJZAFq3DoFNDvntzYTuP3XYVbuNMANbPL0E8RA6uK09RneyjLNrnB6
NpfUeybDbGWHc3t9+oT4Y3V3Hhu2q2gyJweruqqHkOf28KRhKxseEb8EC/mk2I62
WHA=
-----END CERTIFICATE-----
Generated at Thu May 1 02:51:59 2025 by rpki-client