Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fYTPbZS9qce-rGHeci9Kjb63-3I.roa
File: fYTPbZS9qce-rGHeci9Kjb63-3I.roa (raw, json)
Hash identifier: nGcfpGnp7aMtkNEjhtgS57PvhlP015tF+M25cEWwK/0=
Subject key identifier: 7D:84:CF:6D:94:BD:A9:C7:BE:AC:61:DE:72:2F:4A:8D:BE:B7:FB:72
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187759627C44EE17B211CEF72AC63E29B12
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fYTPbZS9qce-rGHeci9Kjb63-3I.roa
Signing time: Wed 12 Apr 2023 13:09:47 +0000
ROA not before: Wed 12 Apr 2023 13:09:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:75:96:27:c4:4e:e1:7b:21:1c:ef:72:ac:63:e2:9b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 12 13:09:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d84cf6d94bda9c7beac61de722f4a8dbeb7fb72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a2:bc:65:5e:90:bd:98:5f:6c:1c:a8:b5:28:
ab:06:ca:ad:23:d2:21:ee:6f:61:e8:05:5c:aa:8f:
3e:ca:02:a3:70:c4:4f:ce:4d:2a:2a:d1:5d:31:02:
b2:c1:f3:7a:63:18:f3:d9:ef:a5:4d:0f:7c:0b:12:
15:12:26:fb:9f:6d:71:06:2d:62:5b:ce:db:1c:26:
30:d2:49:06:e9:70:f3:3e:99:8e:cd:4d:43:c1:e0:
2b:5a:ac:a8:79:de:f8:75:a9:89:60:a6:4c:1c:42:
e3:08:2e:ce:a5:50:0d:62:15:65:84:15:20:3f:39:
4f:28:e9:ba:10:76:36:24:27:a1:33:b1:af:1a:f4:
fb:4b:07:81:36:13:a5:46:7c:de:9f:83:ef:04:43:
02:48:96:ca:97:a4:36:c7:28:2e:fb:0f:4d:f5:9d:
d6:8f:a5:e1:8c:54:36:cd:05:3d:e5:90:1d:02:30:
76:47:99:46:99:f3:5f:bc:9a:ce:e6:87:23:2d:68:
7a:e5:d0:3e:bf:a4:b1:37:78:62:2f:fa:c2:c6:79:
94:43:25:48:91:e3:f7:5f:c6:70:06:45:c9:15:67:
d5:d7:10:af:0a:55:8e:fb:98:73:46:8d:70:41:e5:
5b:95:e1:0b:d0:58:ae:fc:97:96:c1:8f:6a:d6:b6:
86:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:84:CF:6D:94:BD:A9:C7:BE:AC:61:DE:72:2F:4A:8D:BE:B7:FB:72
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fYTPbZS9qce-rGHeci9Kjb63-3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:92:e4:65:8f:95:11:01:d8:26:48:e5:5f:4b:64:03:15:3b:
0d:d1:65:e7:b8:68:e4:a5:a5:c3:45:b7:4c:3c:8d:45:62:35:
76:b5:ad:a2:ff:20:ee:f2:fe:8f:59:2b:a3:e0:f6:41:33:ff:
14:81:62:40:2a:4d:87:86:4c:13:3c:18:e1:fc:88:30:85:fe:
ee:20:1f:88:6d:60:c8:6f:b0:26:1a:9a:5f:fc:cf:4c:a2:99:
1b:67:eb:74:bf:9a:ff:1e:42:1e:77:82:ed:e2:7d:cf:ff:6c:
95:e2:89:f8:4d:87:0a:8d:5d:c2:16:8a:f4:1d:d5:21:e6:e3:
ac:d3:b4:3c:ca:4b:34:47:17:b4:22:d1:fb:11:46:05:48:5b:
ed:1f:38:73:4b:52:aa:81:4e:f2:71:f8:3b:b4:c1:15:ed:2c:
c6:ac:9b:2e:1d:36:00:8d:68:7f:8d:7a:76:2a:a9:52:1b:bb:
55:f9:8f:15:20:a8:d7:eb:0f:87:66:69:3f:2f:2c:78:0b:97:
89:14:4b:dd:74:04:9c:f6:78:21:61:33:01:46:df:5a:16:1e:
56:e0:7b:63:3c:77:1e:b5:6d:77:19:ac:40:10:cd:75:a7:ef:
cd:e9:02:26:15:af:96:3d:56:2e:bb:b8:88:a5:c6:43:45:5b:
c6:0f:62:1b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYd1lifETuF7IRzvcqxj4psSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDEyMTMwOTQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDg0Y2Y2ZDk0YmRhOWM3YmVhYzYxZGU3MjJmNGE4ZGJlYjdmYjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKK8ZV6QvZhfbByotSirBsqtI9Ih
7m9h6AVcqo8+ygKjcMRPzk0qKtFdMQKywfN6Yxjz2e+lTQ98CxIVEib7n21xBi1i
W87bHCYw0kkG6XDzPpmOzU1DweArWqyoed74damJYKZMHELjCC7OpVANYhVlhBUg
PzlPKOm6EHY2JCehM7GvGvT7SweBNhOlRnzen4PvBEMCSJbKl6Q2xygu+w9N9Z3W
j6XhjFQ2zQU95ZAdAjB2R5lGmfNfvJrO5ocjLWh65dA+v6SxN3hiL/rCxnmUQyVI
keP3X8ZwBkXJFWfV1xCvClWO+5hzRo1wQeVbleEL0Fiu/JeWwY9q1raGIwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFH2Ez22UvanHvqxh3nIvSo2+t/tyMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZllUUGJaUzlxY2UtckdIZWNpOUtqYjYzLTNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABGS5GWPlREB2CZI5V9L
ZAMVOw3RZee4aOSlpcNFt0w8jUViNXa1raL/IO7y/o9ZK6Pg9kEz/xSBYkAqTYeG
TBM8GOH8iDCF/u4gH4htYMhvsCYaml/8z0yimRtn63S/mv8eQh53gu3ifc//bJXi
ifhNhwqNXcIWivQd1SHm46zTtDzKSzRHF7Qi0fsRRgVIW+0fOHNLUqqBTvJx+Du0
wRXtLMasmy4dNgCNaH+NenYqqVIbu1X5jxUgqNfrD4dmaT8vLHgLl4kUS910BJz2
eCFhMwFG31oWHlbge2M8dx61bXcZrEAQzXWn783pAiYVr5Y9Vi67uIilxkNFW8YP
Yhs=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:37:38 2025 by rpki-client