Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d9P4ptstNcNgLTX3cy02Y9Mlj0A.roa
File: d9P4ptstNcNgLTX3cy02Y9Mlj0A.roa (raw, json)
Hash identifier: DmWeUdaX1QLBHGMUNxCo0kBCcaDRRQY31tQ9TjJnVy0=
Subject key identifier: 77:D3:F8:A6:DB:2D:35:C3:60:2D:35:F7:73:2D:36:63:D3:25:8F:40
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01896F1C3860EA6C024C81CB2FFC9928DFA1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d9P4ptstNcNgLTX3cy02Y9Mlj0A.roa
Signing time: Wed 19 Jul 2023 17:04:27 +0000
ROA not before: Wed 19 Jul 2023 17:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:189:6f1c:77d/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6f:1c:38:60:ea:6c:02:4c:81:cb:2f:fc:99:28:df:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 19 17:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77d3f8a6db2d35c3602d35f7732d3663d3258f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:50:f7:9e:af:7a:bb:ec:3f:51:df:e8:0d:
f2:4c:61:38:db:58:a1:61:07:54:99:e0:ff:43:f3:
49:0b:ad:32:b4:8c:25:4f:68:b1:0d:8a:9c:ca:d6:
f5:ea:f1:dd:1e:60:d2:c3:b6:02:7d:f8:b4:cd:d5:
57:b5:b9:ce:97:62:fa:86:ee:6f:3b:d4:95:77:99:
b2:95:26:6a:8c:e7:8a:57:ec:46:69:98:e5:52:66:
5b:29:e5:84:ca:d8:e5:6c:1c:b6:f1:b5:3f:fd:ee:
f3:4e:49:61:16:aa:2e:c7:d6:bf:01:26:3b:99:8e:
d8:1c:c9:70:1a:e5:2f:1f:2f:c6:67:64:93:b6:3d:
67:26:c8:e0:3c:fd:c2:94:51:70:cc:83:79:a9:87:
c2:bd:50:b6:90:82:2a:2a:3b:2b:00:84:26:79:03:
69:7e:ce:55:43:8c:0a:08:ee:b4:b5:82:56:a5:12:
ea:8f:35:6b:e7:df:72:b9:1a:f7:59:a1:3c:ac:9e:
92:f4:ca:ab:ae:2e:e5:89:1b:f3:28:ff:d4:1a:74:
e7:3c:fb:4e:13:97:43:57:e8:c0:e8:81:d6:36:9b:
f1:e1:b6:91:7f:25:29:be:f6:f8:e5:f2:a7:5d:85:
30:2d:d6:9f:70:1b:c5:25:5d:44:49:4c:eb:8c:f4:
5b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D3:F8:A6:DB:2D:35:C3:60:2D:35:F7:73:2D:36:63:D3:25:8F:40
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d9P4ptstNcNgLTX3cy02Y9Mlj0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:cf:01:e5:f8:54:66:5e:9a:9b:f8:7f:65:f4:5a:cb:3f:a0:
34:d8:e3:dc:00:aa:69:11:80:e1:a8:6b:06:8b:6d:cc:d5:c8:
ba:23:a2:99:2f:48:65:ea:d1:20:f2:61:5d:1c:46:19:e1:96:
e8:96:d0:f2:62:82:eb:a3:f6:e8:de:0f:3b:19:4c:71:06:f7:
a1:ad:96:ef:2e:b2:93:bd:66:81:d9:72:fb:e2:77:c2:f8:fa:
06:ab:fa:23:af:22:31:3a:bb:b3:e1:21:cb:53:fd:e6:31:e8:
40:51:69:a6:a6:2f:ab:f2:cb:2f:bd:01:13:13:fe:06:70:48:
51:77:a5:bf:3b:33:4b:86:2f:25:e3:1f:d2:62:e1:3a:8f:c6:
1f:0a:a3:bf:05:df:49:53:d3:c1:53:3a:63:9a:38:e0:a6:fc:
86:1b:72:3e:92:d4:83:01:46:79:3d:23:ed:fe:d8:0c:b2:35:
ff:ab:05:07:94:4b:f1:91:43:f2:0c:b0:88:88:e7:bd:6f:b7:
42:6a:19:b0:75:2b:2b:66:bb:87:5c:cc:bd:8e:17:ce:13:ed:
f0:87:75:87:13:f1:51:82:07:9b:c2:31:89:11:93:9e:87:ba:
f1:f6:cc:e5:0a:0c:f0:09:08:ab:1d:c3:ee:52:6b:44:5b:30:
98:fb:20:15
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlvHDhg6mwCTIHLL/yZKN+hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzE5MTcwNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2QzZjhhNmRiMmQzNWMzNjAyZDM1Zjc3MzJkMzY2M2QzMjU4ZjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7pQ956vervsP1Hf6A3yTGE421ih
YQdUmeD/Q/NJC60ytIwlT2ixDYqcytb16vHdHmDSw7YCffi0zdVXtbnOl2L6hu5v
O9SVd5mylSZqjOeKV+xGaZjlUmZbKeWEytjlbBy28bU//e7zTklhFqoux9a/ASY7
mY7YHMlwGuUvHy/GZ2STtj1nJsjgPP3ClFFwzIN5qYfCvVC2kIIqKjsrAIQmeQNp
fs5VQ4wKCO60tYJWpRLqjzVr599yuRr3WaE8rJ6S9Mqrri7liRvzKP/UGnTnPPtO
E5dDV+jA6IHWNpvx4baRfyUpvvb45fKnXYUwLdafcBvFJV1ESUzrjPRbsQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHfT+KbbLTXDYC0193MtNmPTJY9AMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZDlQNHB0c3ROY05nTFRYM2N5MDJZOU1sajBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE3PAeX4VGZempv4f2X0
Wss/oDTY49wAqmkRgOGoawaLbczVyLojopkvSGXq0SDyYV0cRhnhluiW0PJiguuj
9ujeDzsZTHEG96Gtlu8uspO9ZoHZcvvid8L4+gar+iOvIjE6u7PhIctT/eYx6EBR
aaamL6vyyy+9ARMT/gZwSFF3pb87M0uGLyXjH9Ji4TqPxh8Ko78F30lT08FTOmOa
OOCm/IYbcj6S1IMBRnk9I+3+2AyyNf+rBQeUS/GRQ/IMsIiI571vt0JqGbB1Kytm
u4dczL2OF84T7fCHdYcT8VGCB5vCMYkRk56HuvH2zOUKDPAJCKsdw+5Sa0RbMJj7
IBU=
-----END CERTIFICATE-----
Generated at Fri May 2 16:26:13 2025 by rpki-client