Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hJpPDPu2d9hoKVv1LAzh66lIRY4.roa
File: hJpPDPu2d9hoKVv1LAzh66lIRY4.roa (raw, json)
Hash identifier: Iaevt9YGrq0m9R6yNIJtkow5OYkm12fuMbdZgRi5hbM=
Subject key identifier: 84:9A:4F:0C:FB:B6:77:D8:68:29:5B:F5:2C:0C:E1:EB:A9:48:45:8E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01878B7DAAD0342441A2BDF69C99D24C4DF6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hJpPDPu2d9hoKVv1LAzh66lIRY4.roa
Signing time: Sun 16 Apr 2023 19:14:41 +0000
ROA not before: Sun 16 Apr 2023 19:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8b:7d:aa:d0:34:24:41:a2:bd:f6:9c:99:d2:4c:4d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 16 19:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=849a4f0cfbb677d868295bf52c0ce1eba948458e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:0a:02:07:cb:52:32:89:4e:48:d7:33:10:
a4:67:6e:7c:76:05:fd:86:f4:e4:2f:34:c8:d5:ab:
34:1b:66:a3:09:aa:a5:7d:f8:ac:46:63:25:94:04:
72:70:e2:b3:18:89:b0:7f:1f:ba:7b:52:61:0e:89:
52:83:92:68:c8:a2:8e:6a:b0:dc:ed:37:98:c0:de:
b5:18:52:6f:3c:ac:c3:c6:f6:cb:d2:37:13:8d:79:
92:8d:d9:6a:40:c1:a1:c0:76:f8:61:c1:fd:f1:e5:
2f:bc:b2:37:34:71:4c:76:59:e1:ba:cf:a0:5a:d1:
87:dc:c9:6e:9d:cf:f2:78:51:1f:10:6a:fa:05:2f:
a0:97:d8:75:95:6a:58:8d:eb:9f:a2:6c:ea:6d:c4:
7b:24:a1:30:09:fd:e7:22:1a:03:d0:62:79:e4:5d:
63:8b:e7:bd:d0:0d:d7:92:5e:2a:2d:43:0c:d0:2e:
c4:5e:ad:9c:63:9c:f0:13:b2:d0:de:a2:90:a0:f7:
27:51:7d:a6:6c:e7:80:75:2e:b8:85:e0:4a:63:95:
21:32:8c:fe:60:a5:98:5e:4c:d9:4f:6b:1a:ec:d4:
54:26:e3:21:95:3c:e6:bf:9c:ba:99:72:4b:54:5b:
cf:02:f7:91:30:42:df:f9:ca:13:b7:83:6c:51:ff:
f2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9A:4F:0C:FB:B6:77:D8:68:29:5B:F5:2C:0C:E1:EB:A9:48:45:8E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hJpPDPu2d9hoKVv1LAzh66lIRY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:e7:ce:ae:cb:64:47:8a:3b:fc:d0:62:26:5f:a5:c8:7a:65:
47:aa:c2:3c:aa:c3:95:90:a5:0b:da:e1:58:84:aa:cf:97:2a:
9e:7d:a1:6d:23:e0:7a:50:35:de:30:48:01:8a:d1:b0:f0:5a:
8a:79:6d:a9:3a:78:17:3b:0a:31:ba:96:8e:51:47:24:70:60:
9f:ef:ee:b8:dc:3f:7a:2e:c8:d9:6c:d0:d4:74:3f:bd:e6:e3:
77:a0:25:cc:4e:4b:11:60:a6:0a:65:aa:05:1d:23:e9:9d:cd:
9f:13:cd:f9:7d:a5:1c:cf:e9:54:9e:06:50:a5:eb:79:a9:cf:
c3:af:e3:9d:cc:6f:16:45:7e:e3:77:a9:77:d5:50:80:b9:1b:
01:9b:0b:63:37:89:ff:8a:8c:01:ca:9d:24:4c:83:2b:70:76:
61:57:2f:57:c3:dc:f7:d2:ef:ab:78:ce:e0:3e:4d:5b:7c:74:
57:27:d1:0c:1c:7f:6f:8e:73:cb:ad:d4:d0:61:7e:26:2d:df:
cf:17:00:6c:95:2e:e6:07:a1:63:57:93:28:a2:bf:75:e7:63:
91:0b:35:07:04:5f:68:2d:6a:cf:4a:59:6d:24:22:7e:11:50:
3e:20:fd:f8:39:c6:f5:67:ea:cb:18:a6:c0:4c:7e:67:5d:7a:
b0:42:ba:8a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYeLfarQNCRBor32nJnSTE32MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDE2MTkxNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDlhNGYwY2ZiYjY3N2Q4NjgyOTViZjUyYzBjZTFlYmE5NDg0NThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBkKAgfLUjKJTkjXMxCkZ258dgX9
hvTkLzTI1as0G2ajCaqlffisRmMllARycOKzGImwfx+6e1JhDolSg5JoyKKOarDc
7TeYwN61GFJvPKzDxvbL0jcTjXmSjdlqQMGhwHb4YcH98eUvvLI3NHFMdlnhus+g
WtGH3Mlunc/yeFEfEGr6BS+gl9h1lWpYjeufomzqbcR7JKEwCf3nIhoD0GJ55F1j
i+e90A3Xkl4qLUMM0C7EXq2cY5zwE7LQ3qKQoPcnUX2mbOeAdS64heBKY5UhMoz+
YKWYXkzZT2sa7NRUJuMhlTzmv5y6mXJLVFvPAveRMELf+coTt4NsUf/ylQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFISaTwz7tnfYaClb9SwM4eupSEWOMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvaEpwUERQdTJkOWhvS1Z2MUxBemg2NmxJUlk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFnnzq7LZEeKO/zQYiZf
pch6ZUeqwjyqw5WQpQva4ViEqs+XKp59oW0j4HpQNd4wSAGK0bDwWop5bak6eBc7
CjG6lo5RRyRwYJ/v7rjcP3ouyNls0NR0P73m43egJcxOSxFgpgplqgUdI+mdzZ8T
zfl9pRzP6VSeBlCl63mpz8Ov453MbxZFfuN3qXfVUIC5GwGbC2M3if+KjAHKnSRM
gytwdmFXL1fD3PfS76t4zuA+TVt8dFcn0Qwcf2+Oc8ut1NBhfiYt388XAGyVLuYH
oWNXkyiiv3XnY5ELNQcEX2gtas9KWW0kIn4RUD4g/fg5xvVn6ssYpsBMfmdderBC
uoo=
-----END CERTIFICATE-----
Generated at Thu May 1 06:59:47 2025 by rpki-client