Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h2mF_T9-mYZqq9t17Thz0k6EeT4.roa
File: h2mF_T9-mYZqq9t17Thz0k6EeT4.roa (raw, json)
Hash identifier: pgjkajSSWyqSadnGyLGNqrCK80OzV1dKJxQI6blUIMg=
Subject key identifier: 87:69:85:FD:3F:7E:99:86:6A:AB:DB:75:ED:38:73:D2:4E:84:79:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01878C26AE8E53A5FBBF305B99E54F237C08
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h2mF_T9-mYZqq9t17Thz0k6EeT4.roa
Signing time: Sun 16 Apr 2023 22:19:17 +0000
ROA not before: Sun 16 Apr 2023 22:19:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8c:26:ae:8e:53:a5:fb:bf:30:5b:99:e5:4f:23:7c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 16 22:19:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=876985fd3f7e99866aabdb75ed3873d24e84793e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b6:4c:2e:d5:44:94:c9:3c:d6:cd:38:89:25:
d3:40:a0:cc:81:55:d3:a1:8e:ef:38:9b:a9:4a:9e:
e2:1f:c8:37:c9:87:8e:86:76:89:c6:aa:ef:b0:01:
13:11:ea:10:86:ba:2c:53:c6:8e:9b:42:dc:64:70:
1f:21:ab:2e:a4:b2:cf:70:1a:6d:56:da:18:91:87:
64:5e:01:ca:48:8d:6e:97:bd:d7:ee:0c:48:af:83:
09:0b:32:31:16:63:f4:77:2a:d8:22:db:29:35:b8:
06:65:64:a4:01:87:b5:72:a3:61:1b:38:f3:b5:f0:
8a:83:79:ea:04:0e:fc:d9:77:63:b0:cb:e1:cf:f4:
ca:27:09:b5:4c:1c:bc:a0:36:3d:4a:ff:f0:b7:aa:
22:ac:a0:46:47:22:50:0f:26:97:eb:2e:8b:13:e2:
a2:12:c7:21:a2:ec:f2:56:ae:d2:c1:45:bd:84:92:
74:09:f6:97:73:ea:b1:8c:c0:45:ad:31:0a:d4:35:
d4:8a:38:30:92:d2:b1:b4:9e:01:39:b8:94:34:c9:
1d:b0:a3:55:f2:61:41:b4:7e:96:9f:e1:f3:bf:7d:
4d:24:63:2e:fa:41:df:48:55:0a:df:79:55:60:3e:
79:53:3a:77:27:09:a2:ea:69:ca:4a:63:45:65:ae:
72:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:69:85:FD:3F:7E:99:86:6A:AB:DB:75:ED:38:73:D2:4E:84:79:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h2mF_T9-mYZqq9t17Thz0k6EeT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:e0:a3:26:b0:3e:a4:c7:e9:96:2a:b1:7c:25:ae:49:92:60:
26:8e:a3:74:09:37:14:54:0e:40:2f:ae:d8:c3:f3:54:cd:8b:
9d:06:cb:03:f8:2a:02:19:ae:e9:ee:ca:b0:e2:a6:96:f9:4b:
6b:3b:ca:f9:ea:31:b0:f5:5e:d4:2d:b8:5c:f8:3d:78:38:37:
30:c4:55:23:5a:fe:70:4d:55:73:bf:e5:f8:dc:4a:fd:7c:e4:
cc:10:f6:f5:26:4e:b3:c6:fc:9e:18:86:07:d6:18:14:dd:9f:
ac:37:0e:ea:b0:ea:08:cf:ce:2c:da:e2:b9:77:60:ce:9d:a3:
e1:b7:dd:12:0e:da:87:e4:bf:ea:20:b4:9b:89:14:89:2f:84:
8a:90:41:f6:50:7d:0d:0a:40:92:d8:63:21:69:93:fa:05:49:
b3:eb:2a:d7:df:4a:f1:3e:07:91:98:48:ca:95:d8:62:ce:8b:
95:db:85:0d:c8:ca:bb:a2:be:2b:4b:b7:5d:aa:29:17:85:f4:
b1:13:1e:a8:96:11:53:88:e4:fd:23:eb:d7:60:43:91:bb:70:
a8:69:b3:52:25:35:19:19:16:fe:39:59:1b:68:a8:f2:e7:c3:
2c:47:f2:6d:25:4d:8f:94:b7:f9:b2:5a:55:72:cf:51:5b:bf:
ed:22:0a:70
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYeMJq6OU6X7vzBbmeVPI3wIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDE2MjIxOTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzY5ODVmZDNmN2U5OTg2NmFhYmRiNzVlZDM4NzNkMjRlODQ3OTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7ZMLtVElMk81s04iSXTQKDMgVXT
oY7vOJupSp7iH8g3yYeOhnaJxqrvsAETEeoQhrosU8aOm0LcZHAfIasupLLPcBpt
VtoYkYdkXgHKSI1ul73X7gxIr4MJCzIxFmP0dyrYItspNbgGZWSkAYe1cqNhGzjz
tfCKg3nqBA782XdjsMvhz/TKJwm1TBy8oDY9Sv/wt6oirKBGRyJQDyaX6y6LE+Ki
EschouzyVq7SwUW9hJJ0CfaXc+qxjMBFrTEK1DXUijgwktKxtJ4BObiUNMkdsKNV
8mFBtH6Wn+Hzv31NJGMu+kHfSFUK33lVYD55Uzp3Jwmi6mnKSmNFZa5yewIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIdphf0/fpmGaqvbde04c9JOhHk+MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvaDJtRl9UOS1tWVpxcTl0MTdUaHowazZFZVQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIzgoyawPqTH6ZYqsXwl
rkmSYCaOo3QJNxRUDkAvrtjD81TNi50GywP4KgIZrunuyrDippb5S2s7yvnqMbD1
XtQtuFz4PXg4NzDEVSNa/nBNVXO/5fjcSv185MwQ9vUmTrPG/J4YhgfWGBTdn6w3
Duqw6gjPziza4rl3YM6do+G33RIO2ofkv+ogtJuJFIkvhIqQQfZQfQ0KQJLYYyFp
k/oFSbPrKtffSvE+B5GYSMqV2GLOi5XbhQ3IyruivitLt12qKReF9LETHqiWEVOI
5P0j69dgQ5G7cKhps1IlNRkZFv45WRtoqPLnwyxH8m0lTY+Ut/myWlVyz1Fbv+0i
CnA=
-----END CERTIFICATE-----
Generated at Thu May 1 14:59:49 2025 by rpki-client