Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g18nKpNqPBR-WuFF1UP0W8_0nx0.roa
File: g18nKpNqPBR-WuFF1UP0W8_0nx0.roa (raw, json)
Hash identifier: bee3EWRS7p130vkLQ0m42JZvGMFnCJfkbdLskqmGhZc=
Subject key identifier: 83:5F:27:2A:93:6A:3C:14:7E:5A:E1:45:D5:43:F4:5B:CF:F4:9F:1D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885DF9B0F087351F4D0B75BFDACAFDF855
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g18nKpNqPBR-WuFF1UP0W8_0nx0.roa
Signing time: Sat 27 May 2023 16:10:24 +0000
ROA not before: Sat 27 May 2023 16:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5d:f9:b0:f0:87:35:1f:4d:0b:75:bf:da:ca:fd:f8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 27 16:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=835f272a936a3c147e5ae145d543f45bcff49f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7d:2e:5e:d5:e4:70:81:b8:4f:5d:5c:9d:a6:
aa:5f:87:76:3d:fc:04:2e:f1:ef:39:fa:6b:49:c6:
64:4a:92:9e:ff:a5:9c:60:90:57:8e:75:22:0f:5e:
96:92:57:95:ad:8d:52:73:ec:dd:fe:e1:08:cd:be:
cd:48:b3:a0:6f:d8:45:fc:9b:ff:f6:c5:26:1a:da:
63:b1:1a:6f:3f:16:c4:d2:90:b9:c1:d1:96:a1:e6:
0a:54:2b:5d:e0:58:ec:ec:56:f3:57:f5:df:68:24:
9e:f3:53:3e:0d:ab:3a:fe:50:3f:f6:5b:a3:07:c4:
bc:2c:9b:3d:52:26:ae:fd:42:0d:f5:a1:b4:f8:28:
86:a9:54:0d:4a:9c:b4:52:09:9f:13:1c:41:47:be:
8a:cb:86:98:69:12:b8:fe:3e:d6:58:1d:6d:16:30:
fc:22:5b:ce:cc:4d:21:bb:f9:62:dc:33:ad:d0:1f:
56:04:8c:1f:94:e8:48:b2:5b:c9:d0:b1:c6:fb:0a:
12:f4:1b:58:ac:f3:f8:00:16:c9:00:9e:5c:a7:96:
b8:b3:db:c4:43:aa:6d:0e:51:e4:e9:b6:db:7d:c9:
88:c6:a0:fd:52:ee:94:37:94:9c:e3:04:5e:1c:ac:
ec:79:47:b1:ef:ef:9c:11:43:3b:53:69:11:a1:75:
05:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5F:27:2A:93:6A:3C:14:7E:5A:E1:45:D5:43:F4:5B:CF:F4:9F:1D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g18nKpNqPBR-WuFF1UP0W8_0nx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:d6:3a:63:b1:5c:c0:ba:8e:a5:ea:9b:40:1d:69:e9:30:58:
c3:1a:0a:99:ef:8e:32:f1:37:d8:7c:b2:31:8a:d6:fa:55:77:
a8:d9:83:62:1c:fa:87:81:99:2d:f7:16:4a:2a:9c:d2:b4:0f:
9e:fb:78:5d:b0:eb:33:27:0c:97:25:9d:cc:e7:6f:d4:45:fa:
00:8f:02:e6:80:99:77:59:9f:0b:55:ae:d9:a8:65:6f:51:90:
b9:81:a4:98:bc:a0:4e:81:65:43:5e:ed:58:51:20:fe:50:7c:
cf:ff:c6:cf:65:1d:02:d0:3b:6e:d4:8a:35:b2:23:3b:08:ef:
34:88:dc:9b:f8:c6:6d:42:31:1c:b5:b1:67:0e:66:f1:f3:68:
b6:2b:00:1b:36:dc:fc:85:b6:01:7a:f7:1f:56:1f:1a:3c:90:
10:03:76:98:3d:3b:03:3c:e8:12:b0:6e:6f:2c:f4:f4:c8:19:
a7:11:f6:cc:bd:a8:ba:45:9b:ea:52:83:21:3b:5b:9b:7f:87:
db:f8:bb:dc:fb:11:25:20:3e:af:00:55:5e:1d:a9:43:ab:1c:
5c:4b:32:be:a8:47:c3:aa:d7:73:f0:5a:50:22:3e:4a:6f:a3:
3f:f5:9d:e0:1d:12:b2:b7:a5:83:51:d7:b2:c1:97:d8:58:6a:
19:e1:8c:33
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhd+bDwhzUfTQt1v9rK/fhVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTI3MTYxMDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzVmMjcyYTkzNmEzYzE0N2U1YWUxNDVkNTQzZjQ1YmNmZjQ5ZjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn0uXtXkcIG4T11cnaaqX4d2PfwE
LvHvOfprScZkSpKe/6WcYJBXjnUiD16WkleVrY1Sc+zd/uEIzb7NSLOgb9hF/Jv/
9sUmGtpjsRpvPxbE0pC5wdGWoeYKVCtd4Fjs7FbzV/XfaCSe81M+Das6/lA/9luj
B8S8LJs9Uiau/UIN9aG0+CiGqVQNSpy0UgmfExxBR76Ky4aYaRK4/j7WWB1tFjD8
IlvOzE0hu/li3DOt0B9WBIwflOhIslvJ0LHG+woS9BtYrPP4ABbJAJ5cp5a4s9vE
Q6ptDlHk6bbbfcmIxqD9Uu6UN5Sc4wReHKzseUex7++cEUM7U2kRoXUFpwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFINfJyqTajwUflrhRdVD9FvP9J8dMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZzE4bktwTnFQQlItV3VGRjFVUDBXOF8wbngwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKPWOmOxXMC6jqXqm0Ad
aekwWMMaCpnvjjLxN9h8sjGK1vpVd6jZg2Ic+oeBmS33FkoqnNK0D577eF2w6zMn
DJclncznb9RF+gCPAuaAmXdZnwtVrtmoZW9RkLmBpJi8oE6BZUNe7VhRIP5QfM//
xs9lHQLQO27UijWyIzsI7zSI3Jv4xm1CMRy1sWcOZvHzaLYrABs23PyFtgF69x9W
Hxo8kBADdpg9OwM86BKwbm8s9PTIGacR9sy9qLpFm+pSgyE7W5t/h9v4u9z7ESUg
Pq8AVV4dqUOrHFxLMr6oR8Oq13PwWlAiPkpvoz/1neAdErK3pYNR17LBl9hYahnh
jDM=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:21 2025 by rpki-client