Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d9Ih731htb4Hql3-4FwmJxg7jiI.roa
File: d9Ih731htb4Hql3-4FwmJxg7jiI.roa (raw, json)
Hash identifier: xwYUS6ihGWyxnq77DHRxwxo4W+3s4+pmzY9fTcVauKE=
Subject key identifier: 77:D2:21:EF:7D:61:B5:BE:07:AA:5D:FE:E0:5C:26:27:18:3B:8E:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01893DF93A337FB2AFB17C87E67020D4503A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d9Ih731htb4Hql3-4FwmJxg7jiI.roa
Signing time: Mon 10 Jul 2023 04:04:50 +0000
ROA not before: Mon 10 Jul 2023 04:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:189:3df8:f110/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3d:f9:3a:33:7f:b2:af:b1:7c:87:e6:70:20:d4:50:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 10 04:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77d221ef7d61b5be07aa5dfee05c2627183b8e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:59:c9:42:cd:21:64:f9:65:5a:7d:e8:9f:
b9:9b:47:2d:ea:2c:e1:91:45:66:bc:7f:81:21:98:
b1:ea:f7:6e:aa:3a:ee:43:ae:dc:41:6c:d9:54:44:
c2:23:d9:40:b0:e0:fe:29:b8:cf:6b:e9:22:b1:c1:
66:1d:6d:8a:c6:08:ac:53:10:98:80:ce:b5:c0:56:
95:43:26:39:00:d2:e3:bf:8d:6f:78:af:ad:57:1c:
fd:85:ed:f7:7e:f4:82:15:9f:e9:a6:89:43:64:11:
8c:ec:b9:5f:ad:b8:ca:ad:9a:8c:bf:b3:a7:24:80:
88:bf:8c:97:18:31:4a:ec:3e:0f:b0:a0:e8:ef:a1:
26:2b:56:e3:cf:dc:82:08:be:b8:e8:18:50:5c:92:
23:97:71:69:48:de:37:7f:40:f5:3e:99:c4:cb:c9:
50:d6:22:d1:91:95:aa:90:15:0b:da:9d:a8:cc:06:
5b:cd:fa:ed:dd:6d:cd:21:f7:13:dd:52:24:a9:dd:
89:75:13:ef:87:8b:1e:ba:01:35:c0:1d:d7:63:09:
f2:b4:12:13:a7:f3:65:fb:a7:7c:23:c6:ef:06:2c:
a5:d7:a9:16:58:7b:9f:bf:7e:dc:c0:7b:ac:eb:65:
88:18:36:02:86:81:68:31:5d:42:f8:3c:34:c4:a9:
69:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D2:21:EF:7D:61:B5:BE:07:AA:5D:FE:E0:5C:26:27:18:3B:8E:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d9Ih731htb4Hql3-4FwmJxg7jiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:a7:da:aa:54:83:2c:18:f4:17:64:7a:9e:c2:d4:bf:aa:90:
b4:7f:00:40:77:7d:3e:f4:69:e6:7a:14:85:de:d0:4e:89:a0:
6b:11:36:7d:4d:42:00:6e:60:6c:8d:91:55:1c:6a:c9:39:2a:
4f:37:8e:d8:07:29:65:c1:e9:d8:06:d3:68:97:de:2c:57:ef:
34:1d:dc:80:7e:3e:7f:8a:a6:95:84:df:9d:00:9f:c8:45:0c:
fb:c0:49:e6:0f:95:d1:02:7c:f0:d5:a7:38:ea:22:1e:28:c2:
f3:3d:0f:15:4f:37:1a:50:61:4b:7e:71:2d:83:3c:2e:df:82:
18:f5:fd:01:5a:c6:cd:8a:77:d4:98:7a:89:33:84:27:59:ed:
4e:74:ea:b3:f3:80:c3:1d:22:85:6f:d5:cc:44:84:7f:e6:bd:
ec:b2:da:8a:4e:1f:3b:e1:ea:b8:72:8b:44:24:16:18:52:44:
44:56:23:57:7f:cf:cd:f7:7a:13:2a:d4:77:7f:f4:74:df:14:
30:8c:51:e2:bf:92:17:59:7d:53:94:a3:4c:61:e3:02:5d:52:
28:80:e2:b1:2b:83:3a:b1:28:5b:31:da:89:bc:00:6d:a2:8f:
78:5b:83:1a:48:15:9e:b0:8b:9b:8b:80:12:ac:49:32:d1:25:
a3:d7:70:fd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYk9+Tozf7KvsXyH5nAg1FA6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzEwMDQwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2QyMjFlZjdkNjFiNWJlMDdhYTVkZmVlMDVjMjYyNzE4M2I4ZTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLBZyULNIWT5ZVp96J+5m0ct6izh
kUVmvH+BIZix6vduqjruQ67cQWzZVETCI9lAsOD+KbjPa+kiscFmHW2KxgisUxCY
gM61wFaVQyY5ANLjv41veK+tVxz9he33fvSCFZ/ppolDZBGM7LlfrbjKrZqMv7On
JICIv4yXGDFK7D4PsKDo76EmK1bjz9yCCL646BhQXJIjl3FpSN43f0D1PpnEy8lQ
1iLRkZWqkBUL2p2ozAZbzfrt3W3NIfcT3VIkqd2JdRPvh4seugE1wB3XYwnytBIT
p/Nl+6d8I8bvBiyl16kWWHufv37cwHus62WIGDYChoFoMV1C+Dw0xKlpTQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHfSIe99YbW+B6pd/uBcJicYO44iMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZDlJaDczMWh0YjRIcWwzLTRGd21KeGc3amlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH6n2qpUgywY9Bdkep7C
1L+qkLR/AEB3fT70aeZ6FIXe0E6JoGsRNn1NQgBuYGyNkVUcask5Kk83jtgHKWXB
6dgG02iX3ixX7zQd3IB+Pn+KppWE350An8hFDPvASeYPldECfPDVpzjqIh4owvM9
DxVPNxpQYUt+cS2DPC7fghj1/QFaxs2Kd9SYeokzhCdZ7U506rPzgMMdIoVv1cxE
hH/mveyy2opOHzvh6rhyi0QkFhhSRERWI1d/z833ehMq1Hd/9HTfFDCMUeK/khdZ
fVOUo0xh4wJdUiiA4rErgzqxKFsx2om8AG2ij3hbgxpIFZ6wi5uLgBKsSTLRJaPX
cP0=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:45 2025 by rpki-client