Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fNxi3A5o_OlPvoKiGtyceI6g_X4.roa
File: fNxi3A5o_OlPvoKiGtyceI6g_X4.roa (raw, json)
Hash identifier: OVginWVMLoCVvaRxaoZDRiHWy6aRwtYQCBRu3ZJkXMw=
Subject key identifier: 7C:DC:62:DC:0E:68:FC:E9:4F:BE:82:A2:1A:DC:9C:78:8E:A0:FD:7E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01896A63B67932741BA40672ADEE63492D1A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fNxi3A5o_OlPvoKiGtyceI6g_X4.roa
Signing time: Tue 18 Jul 2023 19:04:26 +0000
ROA not before: Tue 18 Jul 2023 19:04:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:189:6a63:a57f/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6a:63:b6:79:32:74:1b:a4:06:72:ad:ee:63:49:2d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 18 19:04:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cdc62dc0e68fce94fbe82a21adc9c788ea0fd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:52:c5:aa:3f:c7:22:7d:4a:66:a9:43:bb:90:
74:d4:d7:19:1e:d7:98:a5:18:1f:d7:e2:56:c3:ba:
35:94:65:33:37:51:4c:22:3d:67:f3:5e:ad:1e:18:
3f:30:2d:71:fb:08:e2:10:d1:f0:bf:06:92:b2:45:
74:e1:0e:24:44:24:85:1d:06:3a:a1:75:d8:13:2f:
ca:23:8f:29:90:bd:60:81:3f:ab:43:3d:ac:33:4e:
b8:59:df:a7:05:8d:4d:5e:e9:43:48:c6:a2:28:29:
03:94:47:9d:3d:09:f3:59:c1:47:15:e1:43:12:26:
54:85:a2:2b:f9:f6:57:80:36:fe:b8:ec:67:af:9b:
0b:3f:8f:9b:75:15:1d:f0:25:84:1b:8f:22:be:14:
48:12:fa:16:e0:f3:4f:22:af:5d:5e:8d:a1:f8:09:
06:7d:6a:7e:cf:9c:d2:03:3f:44:db:21:c7:05:bc:
85:94:e0:bd:8a:ef:80:15:1f:15:98:9a:34:b2:4b:
96:04:01:66:f8:46:15:07:d0:0a:99:bf:dd:c4:90:
44:1f:4d:5c:e1:f9:23:da:ea:2a:5d:4a:1b:08:b9:
4a:ab:8f:91:ff:a8:e8:64:80:14:cb:88:00:f4:8d:
66:77:a8:03:2c:0d:bb:18:24:1a:b7:d6:04:c2:9d:
b1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DC:62:DC:0E:68:FC:E9:4F:BE:82:A2:1A:DC:9C:78:8E:A0:FD:7E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fNxi3A5o_OlPvoKiGtyceI6g_X4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:a0:8c:45:a1:3c:a8:68:a6:07:75:8b:6d:a5:5b:f1:18:c4:
d2:fa:c4:b1:b1:f6:b3:88:f5:3a:fe:17:e9:06:02:fb:4a:da:
33:75:fa:2d:72:cb:91:d5:0d:e7:66:af:67:10:c6:5a:b6:e3:
6d:f0:2b:48:9f:de:43:c7:17:cc:2e:64:59:b5:c7:32:04:30:
0c:ff:b2:37:77:5b:cb:d6:34:d8:ea:83:bc:51:b9:1a:63:4e:
c0:e1:7c:c8:76:0e:9b:9e:33:0e:8a:21:4f:57:64:bb:1c:04:
b5:c0:9b:4a:8e:c1:fe:cf:04:61:a2:98:93:7c:21:53:d4:3f:
89:5b:fa:56:95:2c:cc:4f:3a:10:9d:c0:af:c6:65:7c:09:61:
b3:6c:cc:3b:03:6a:92:35:37:1e:15:c2:dd:93:2b:86:e0:14:
cb:d4:38:a0:8d:a0:ae:6f:3c:e5:51:10:3c:f5:93:5c:be:f9:
89:2d:19:79:48:d5:4c:88:00:64:13:0c:19:26:15:a8:85:2b:
66:a2:ce:14:8b:e5:c8:3e:f5:40:7e:0f:de:b4:37:fe:2a:44:
3d:3a:95:19:ca:25:ac:74:99:ce:f8:61:65:71:cc:7f:cb:28:
e1:73:9d:04:ee:c2:a4:aa:29:7f:93:10:21:31:34:39:dc:31:
8e:7f:fd:04
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlqY7Z5MnQbpAZyre5jSS0aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzE4MTkwNDI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2RjNjJkYzBlNjhmY2U5NGZiZTgyYTIxYWRjOWM3ODhlYTBmZDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFLFqj/HIn1KZqlDu5B01NcZHteY
pRgf1+JWw7o1lGUzN1FMIj1n816tHhg/MC1x+wjiENHwvwaSskV04Q4kRCSFHQY6
oXXYEy/KI48pkL1ggT+rQz2sM064Wd+nBY1NXulDSMaiKCkDlEedPQnzWcFHFeFD
EiZUhaIr+fZXgDb+uOxnr5sLP4+bdRUd8CWEG48ivhRIEvoW4PNPIq9dXo2h+AkG
fWp+z5zSAz9E2yHHBbyFlOC9iu+AFR8VmJo0skuWBAFm+EYVB9AKmb/dxJBEH01c
4fkj2uoqXUobCLlKq4+R/6joZIAUy4gA9I1md6gDLA27GCQat9YEwp2x1QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHzcYtwOaPzpT76CohrcnHiOoP1+MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZk54aTNBNW9fT2xQdm9LaUd0eWNlSTZnX1g0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHCgjEWhPKhopgd1i22l
W/EYxNL6xLGx9rOI9Tr+F+kGAvtK2jN1+i1yy5HVDedmr2cQxlq2423wK0if3kPH
F8wuZFm1xzIEMAz/sjd3W8vWNNjqg7xRuRpjTsDhfMh2DpueMw6KIU9XZLscBLXA
m0qOwf7PBGGimJN8IVPUP4lb+laVLMxPOhCdwK/GZXwJYbNszDsDapI1Nx4Vwt2T
K4bgFMvUOKCNoK5vPOVREDz1k1y++YktGXlI1UyIAGQTDBkmFaiFK2aizhSL5cg+
9UB+D960N/4qRD06lRnKJax0mc74YWVxzH/LKOFznQTuwqSqKX+TECExNDncMY5/
/QQ=
-----END CERTIFICATE-----
Generated at Thu May 1 12:06:58 2025 by rpki-client