Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h1O01DvjiNaSMBAFgg5OKLZThZk.roa
File: h1O01DvjiNaSMBAFgg5OKLZThZk.roa (raw, json)
Hash identifier: 8fvlx/k895H/eDD5UFDvduz9DmfigDbUVHc/QA12BAg=
Subject key identifier: 87:53:B4:D4:3B:E3:88:D6:92:30:10:05:82:0E:4E:28:B6:53:85:99
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01895752824689AF6FA519966D689FEEFD78
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h1O01DvjiNaSMBAFgg5OKLZThZk.roa
Signing time: Sat 15 Jul 2023 02:12:52 +0000
ROA not before: Sat 15 Jul 2023 02:12:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:57:52:82:46:89:af:6f:a5:19:96:6d:68:9f:ee:fd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 15 02:12:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8753b4d43be388d692301005820e4e28b6538599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:47:9a:64:4d:65:41:62:ca:76:32:a4:c1:33:
b8:f7:2d:e7:b2:42:12:72:f2:c9:bd:e8:39:d4:f7:
58:22:87:da:45:46:ef:0a:42:18:2a:d5:c2:0c:a5:
00:1a:e0:8a:fe:0d:eb:27:95:81:07:83:29:19:4f:
db:fb:25:88:11:16:e4:5c:4a:ac:32:d8:40:f8:3c:
d5:38:96:20:21:08:44:33:75:0a:65:47:0f:d2:c1:
ad:b6:02:2e:44:6c:b5:5a:db:d8:02:1c:81:67:9a:
47:be:d2:21:9c:ec:91:de:79:fe:0c:51:35:6c:53:
11:ca:fa:c4:28:a9:d9:af:c4:6c:fc:3b:ee:f8:d2:
4c:1e:30:09:cf:d5:74:33:02:9b:2c:1c:10:5d:08:
f3:b9:c5:f9:5f:d4:48:ad:c5:d1:8a:da:f4:99:f2:
31:77:ce:9c:09:a3:a0:6f:6d:32:0b:9b:31:ed:db:
8d:8d:9c:12:db:8e:b0:7a:2a:37:a7:22:26:9f:43:
94:52:e4:8f:a9:34:7a:c8:c4:ef:20:3e:59:bb:8a:
88:92:6b:21:55:0e:7a:5a:20:3d:45:7a:74:39:3e:
a1:4f:49:56:af:af:e3:df:67:34:03:ab:db:7a:4e:
7b:1d:42:c1:0d:e4:4a:53:9c:48:8f:bf:c8:2d:20:
9a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:53:B4:D4:3B:E3:88:D6:92:30:10:05:82:0E:4E:28:B6:53:85:99
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h1O01DvjiNaSMBAFgg5OKLZThZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:9c:22:80:3d:e2:52:03:b1:4e:45:dd:36:b6:8c:31:24:5b:
38:0a:26:6d:bc:9d:11:e7:bd:97:07:3f:fa:da:e4:26:8e:65:
4c:a3:96:9b:58:01:5e:28:d8:5c:41:26:61:51:ab:fb:32:12:
98:73:17:a3:4d:e8:ec:ce:53:e2:82:01:77:df:b4:6c:d3:06:
cb:d7:3e:39:c0:3d:0f:af:c2:74:e7:42:75:09:19:3d:0e:f4:
09:7f:6c:22:29:b3:f8:b7:10:ee:11:7d:53:99:3d:a9:54:89:
a8:0d:36:8e:35:9e:cf:27:b4:d3:1b:2e:2e:d4:12:3e:9b:86:
ac:d7:c1:41:69:5f:19:3c:e0:e8:36:10:0b:33:b5:fe:f5:b9:
0e:69:4e:e8:a0:73:00:e5:c3:52:34:df:8f:c2:61:8e:4c:e6:
a6:16:76:61:2c:c1:75:09:f4:40:2c:b5:32:e5:4e:5d:bf:db:
fb:75:93:28:5f:de:f6:10:e4:ee:af:0c:a3:31:17:b4:05:e6:
09:02:cf:a1:dc:33:cc:27:f6:ee:03:26:55:88:e1:70:3c:ca:
2e:4a:af:ca:d7:3a:ed:03:a3:e2:20:4c:8e:54:18:ef:e5:b8:
80:01:97:73:b6:df:a6:98:27:10:19:06:85:5e:5e:19:9c:1c:
03:56:4d:03
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlXUoJGia9vpRmWbWif7v14MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzE1MDIxMjUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzUzYjRkNDNiZTM4OGQ2OTIzMDEwMDU4MjBlNGUyOGI2NTM4NTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUeaZE1lQWLKdjKkwTO49y3nskIS
cvLJveg51PdYIofaRUbvCkIYKtXCDKUAGuCK/g3rJ5WBB4MpGU/b+yWIERbkXEqs
MthA+DzVOJYgIQhEM3UKZUcP0sGttgIuRGy1WtvYAhyBZ5pHvtIhnOyR3nn+DFE1
bFMRyvrEKKnZr8Rs/Dvu+NJMHjAJz9V0MwKbLBwQXQjzucX5X9RIrcXRitr0mfIx
d86cCaOgb20yC5sx7duNjZwS246weio3pyImn0OUUuSPqTR6yMTvID5Zu4qIkmsh
VQ56WiA9RXp0OT6hT0lWr6/j32c0A6vbek57HULBDeRKU5xIj7/ILSCaJwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIdTtNQ744jWkjAQBYIOTii2U4WZMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvaDFPMDFEdmppTmFTTUJBRmdnNU9LTFpUaFprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABicIoA94lIDsU5F3Ta2
jDEkWzgKJm28nRHnvZcHP/ra5CaOZUyjlptYAV4o2FxBJmFRq/syEphzF6NN6OzO
U+KCAXfftGzTBsvXPjnAPQ+vwnTnQnUJGT0O9Al/bCIps/i3EO4RfVOZPalUiagN
No41ns8ntNMbLi7UEj6bhqzXwUFpXxk84Og2EAsztf71uQ5pTuigcwDlw1I034/C
YY5M5qYWdmEswXUJ9EAstTLlTl2/2/t1kyhf3vYQ5O6vDKMxF7QF5gkCz6HcM8wn
9u4DJlWI4XA8yi5Kr8rXOu0Do+IgTI5UGO/luIABl3O236aYJxAZBoVeXhmcHANW
TQM=
-----END CERTIFICATE-----
Generated at Thu May 1 06:30:44 2025 by rpki-client