Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h5L_TUVfLkusjE_uozEkwl--M6U.roa
File: h5L_TUVfLkusjE_uozEkwl--M6U.roa (raw, json)
Hash identifier: vh+AUGpjtyqEaZuu60SVBuFoGtxkeyhfEGO5pkhTo98=
Subject key identifier: 87:92:FF:4D:45:5F:2E:4B:AC:8C:4F:EE:A3:31:24:C2:5F:BE:33:A5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183719141CF0D4C97C0D4F2B6570FDC9F0D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h5L_TUVfLkusjE_uozEkwl--M6U.roa
Signing time: Sat 24 Sep 2022 22:14:48 +0000
ROA not before: Sat 24 Sep 2022 22:14:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:71:91:41:cf:0d:4c:97:c0:d4:f2:b6:57:0f:dc:9f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 24 22:14:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8792ff4d455f2e4bac8c4feea33124c25fbe33a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:38:d9:6a:b3:b1:cd:33:19:e6:09:bc:95:a1:
71:95:07:c2:23:16:ad:fa:06:d9:8f:c7:64:6a:56:
21:c4:5f:eb:4a:e9:ff:6e:5d:74:2b:77:7b:da:1e:
bc:04:1b:0b:ec:76:1e:db:61:66:d2:58:d4:c0:60:
f2:b9:4e:06:81:bc:00:a3:db:e0:98:00:d0:bc:9f:
ee:75:4c:be:19:2c:2e:64:46:6f:bb:fa:2c:63:46:
b8:e3:6f:2d:b2:e0:7c:9e:46:b6:66:f0:71:d2:7d:
b6:59:8d:98:28:8a:43:ef:fd:91:28:d9:0d:23:98:
6d:2f:8a:8a:45:40:73:17:9d:a1:34:20:e6:cb:6a:
3c:f9:73:9d:e2:20:c9:66:95:12:6f:9e:45:ca:14:
d9:05:a2:89:4a:fd:da:7a:b0:73:6b:90:ae:99:33:
6e:1d:f8:b3:f3:31:3d:b1:d3:25:a7:90:a1:69:07:
60:24:79:68:bb:e2:ff:5d:32:05:32:4e:fb:17:90:
df:89:62:e3:08:d5:e9:f6:73:3f:97:c2:99:e6:57:
78:49:24:ee:8e:42:1f:2c:dd:ef:a8:c5:39:05:1c:
ff:f5:5b:65:68:3f:f5:e9:e1:c9:b7:a2:cc:85:48:
71:ef:71:f4:89:45:d2:39:d7:de:c6:7f:da:9f:fd:
00:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:92:FF:4D:45:5F:2E:4B:AC:8C:4F:EE:A3:31:24:C2:5F:BE:33:A5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h5L_TUVfLkusjE_uozEkwl--M6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:1e:08:a3:33:4c:04:c3:f8:29:de:cb:d2:bb:8b:b0:4c:10:
c9:48:fa:ec:77:84:9b:e4:01:52:20:cd:61:7c:de:fe:7c:ff:
47:cd:6c:9c:44:89:8a:6a:67:59:eb:5e:06:37:b7:2b:54:be:
0e:12:49:5e:23:c8:65:db:32:40:96:ac:e9:39:82:dd:d0:47:
01:5d:92:71:48:a9:49:98:d4:e3:03:a9:1a:f2:38:4e:09:3a:
83:72:5f:58:f0:77:48:d6:f0:bb:a8:86:62:9b:7e:42:77:e5:
ff:7f:f3:f6:09:a7:af:33:8d:5b:e1:eb:c1:92:fb:3c:5b:0b:
df:19:d4:91:aa:2b:39:7e:ba:9c:9d:e2:8a:c5:9c:21:fb:6f:
f3:5f:5b:9f:be:45:02:87:74:c7:d3:bb:32:c7:fd:3c:b5:3f:
46:bf:48:fe:21:e0:eb:1b:b4:ce:10:20:e8:8c:36:9d:39:82:
ee:92:c8:68:f9:4e:4f:55:83:15:94:15:4c:88:ec:17:1f:5b:
9c:64:70:f9:da:0e:17:2f:07:31:39:18:90:b4:d8:8a:18:0e:
db:51:5a:85:1f:3e:22:8d:b7:7a:78:46:1a:65:09:ae:81:35:
3e:ea:02:86:07:6f:60:65:3a:1d:0e:53:05:6a:47:5b:84:d3:
07:51:74:4e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYNxkUHPDUyXwNTytlcP3J8NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTI0MjIxNDQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzkyZmY0ZDQ1NWYyZTRiYWM4YzRmZWVhMzMxMjRjMjVmYmUzM2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTjZarOxzTMZ5gm8laFxlQfCIxat
+gbZj8dkalYhxF/rSun/bl10K3d72h68BBsL7HYe22Fm0ljUwGDyuU4GgbwAo9vg
mADQvJ/udUy+GSwuZEZvu/osY0a4428tsuB8nka2ZvBx0n22WY2YKIpD7/2RKNkN
I5htL4qKRUBzF52hNCDmy2o8+XOd4iDJZpUSb55FyhTZBaKJSv3aerBza5CumTNu
Hfiz8zE9sdMlp5ChaQdgJHlou+L/XTIFMk77F5DfiWLjCNXp9nM/l8KZ5ld4SSTu
jkIfLN3vqMU5BRz/9VtlaD/16eHJt6LMhUhx73H0iUXSOdfexn/an/0AdQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIeS/01FXy5LrIxP7qMxJMJfvjOlMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvaDVMX1RVVmZMa3VzakVfdW96RWt3bC0tTTZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHgeCKMzTATD+Cney9K7
i7BMEMlI+ux3hJvkAVIgzWF83v58/0fNbJxEiYpqZ1nrXgY3tytUvg4SSV4jyGXb
MkCWrOk5gt3QRwFdknFIqUmY1OMDqRryOE4JOoNyX1jwd0jW8LuohmKbfkJ35f9/
8/YJp68zjVvh68GS+zxbC98Z1JGqKzl+upyd4orFnCH7b/NfW5++RQKHdMfTuzLH
/Ty1P0a/SP4h4OsbtM4QIOiMNp05gu6SyGj5Tk9VgxWUFUyI7BcfW5xkcPnaDhcv
BzE5GJC02IoYDttRWoUfPiKNt3p4RhplCa6BNT7qAoYHb2BlOh0OUwVqR1uE0wdR
dE4=
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:53:26 2025 by rpki-client