Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g9JUjh9ziN0nUme2QbwZO3JUh2E.roa
File: g9JUjh9ziN0nUme2QbwZO3JUh2E.roa (raw, json)
Hash identifier: 4qbC3y50E7PH+gq0hWeWAzIOrFsJflJMDy3gzN9Rz+c=
Subject key identifier: 83:D2:54:8E:1F:73:88:DD:27:52:67:B6:41:BC:19:3B:72:54:87:61
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186DF300ED5C52382F0F59E269611E4A795
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g9JUjh9ziN0nUme2QbwZO3JUh2E.roa
Signing time: Tue 14 Mar 2023 08:15:13 +0000
ROA not before: Tue 14 Mar 2023 08:15:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:df:30:0e:d5:c5:23:82:f0:f5:9e:26:96:11:e4:a7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 14 08:15:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83d2548e1f7388dd275267b641bc193b72548761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e3:f5:a5:f4:01:2e:55:d0:3b:e5:a8:f9:ed:
15:ca:5c:b5:b9:4e:3f:0a:f3:6d:4e:12:e9:77:33:
e8:54:74:ac:c7:f0:26:82:c5:6a:8d:44:07:a3:0e:
c0:0f:39:47:aa:fd:4e:b8:43:ee:88:67:d7:f6:0d:
e6:1e:7d:c8:c6:4c:6f:e1:79:a5:89:94:43:1f:06:
75:51:62:59:e3:ee:70:bf:24:d3:9d:d4:c1:a5:bb:
4b:9b:4f:6b:60:3f:2f:76:7f:4d:1a:f6:a3:25:aa:
18:2a:a1:5e:d7:ae:6b:83:0a:8e:a7:8b:8d:65:78:
88:85:99:a0:42:4b:e9:78:f7:30:23:5e:41:1c:73:
d4:3c:e8:01:0a:6a:5f:be:3d:03:9b:1d:79:e1:39:
9f:f0:01:2f:ce:f3:3b:4d:85:ca:ed:f2:44:25:19:
b4:bc:ee:72:7d:b7:ba:f7:83:e5:66:fb:3f:41:2d:
86:74:be:c7:4c:db:d1:c3:1e:5a:21:3a:9e:63:16:
6e:cb:a0:cc:a0:20:eb:04:28:89:34:06:fb:7d:5f:
11:f9:23:6e:27:f6:6e:91:66:5f:5c:6d:c8:36:ea:
e4:c7:40:5b:b5:9d:b2:3d:58:27:82:aa:d2:0d:b4:
35:6c:88:c2:6f:e5:a3:d1:2b:b2:3b:bf:32:36:9a:
fb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D2:54:8E:1F:73:88:DD:27:52:67:B6:41:BC:19:3B:72:54:87:61
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g9JUjh9ziN0nUme2QbwZO3JUh2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:82:cf:e3:12:a7:c1:46:a9:44:ab:f4:a8:e4:74:e4:cf:da:
39:74:f4:c0:e8:53:49:c9:81:78:de:ce:f5:20:9e:ba:56:bd:
56:f8:7c:7a:e0:65:83:f2:59:16:95:fb:fe:a2:8d:63:9f:fa:
20:f1:83:e3:75:9d:17:19:93:22:65:ab:23:ef:f2:3c:5e:0a:
5b:80:82:31:4c:6a:84:16:05:1a:e6:72:01:99:47:a9:9f:82:
47:73:13:0c:af:02:fc:3c:60:03:fa:25:4e:8c:f4:3d:a4:ce:
b4:11:8c:7c:47:5c:09:f7:1c:9f:0a:8e:b7:1a:3c:d4:ec:c5:
c0:1d:c1:d1:14:96:cb:a5:c7:1c:d1:91:13:46:24:f7:4e:65:
f8:3d:2e:9c:64:61:cb:18:cc:bd:2b:81:84:55:3d:6e:61:3e:
9a:bf:fb:2d:39:de:11:8b:2b:75:da:be:d0:da:f7:a1:0a:23:
ff:13:b2:06:21:5b:cf:a7:5e:ad:dd:e1:8b:33:61:72:3d:5f:
b2:65:12:00:69:d3:d9:6e:b7:41:5a:da:72:41:d8:a0:79:42:
06:27:fb:8d:0c:21:37:eb:96:52:b4:03:1e:0d:6c:74:ae:45:
4a:dd:0a:64:cd:1d:57:3e:25:2c:54:2a:27:6c:b9:d3:8d:6f:
b9:22:fa:18
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbfMA7VxSOC8PWeJpYR5KeVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzE0MDgxNTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2QyNTQ4ZTFmNzM4OGRkMjc1MjY3YjY0MWJjMTkzYjcyNTQ4NzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+P1pfQBLlXQO+Wo+e0Vyly1uU4/
CvNtThLpdzPoVHSsx/AmgsVqjUQHow7ADzlHqv1OuEPuiGfX9g3mHn3Ixkxv4Xml
iZRDHwZ1UWJZ4+5wvyTTndTBpbtLm09rYD8vdn9NGvajJaoYKqFe165rgwqOp4uN
ZXiIhZmgQkvpePcwI15BHHPUPOgBCmpfvj0Dmx154Tmf8AEvzvM7TYXK7fJEJRm0
vO5yfbe694PlZvs/QS2GdL7HTNvRwx5aITqeYxZuy6DMoCDrBCiJNAb7fV8R+SNu
J/ZukWZfXG3INurkx0BbtZ2yPVgngqrSDbQ1bIjCb+Wj0SuyO78yNpr7HQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIPSVI4fc4jdJ1JntkG8GTtyVIdhMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZzlKVWpoOXppTjBuVW1lMlFid1pPM0pVaDJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAuCz+MSp8FGqUSr9Kjk
dOTP2jl09MDoU0nJgXjezvUgnrpWvVb4fHrgZYPyWRaV+/6ijWOf+iDxg+N1nRcZ
kyJlqyPv8jxeCluAgjFMaoQWBRrmcgGZR6mfgkdzEwyvAvw8YAP6JU6M9D2kzrQR
jHxHXAn3HJ8KjrcaPNTsxcAdwdEUlsulxxzRkRNGJPdOZfg9LpxkYcsYzL0rgYRV
PW5hPpq/+y053hGLK3XavtDa96EKI/8TsgYhW8+nXq3d4YszYXI9X7JlEgBp09lu
t0Fa2nJB2KB5QgYn+40MITfrllK0Ax4NbHSuRUrdCmTNHVc+JSxUKidsudONb7ki
+hg=
-----END CERTIFICATE-----
Generated at Fri May 2 08:55:10 2025 by rpki-client