Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ilAP23gWUqd3fgQlMvW-y3yUxYE.roa
File: ilAP23gWUqd3fgQlMvW-y3yUxYE.roa (raw, json)
Hash identifier: Gmqj0wdzyfwESfNuMfGrbQtRcL2zPcYkG5FtO4B4D+Q=
Subject key identifier: 8A:50:0F:DB:78:16:52:A7:77:7E:04:25:32:F5:BE:CB:7C:94:C5:81
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01866F5B910C395AD9F5373E3C1E1A696B0F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ilAP23gWUqd3fgQlMvW-y3yUxYE.roa
Signing time: Mon 20 Feb 2023 15:05:17 +0000
ROA not before: Mon 20 Feb 2023 15:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6f:5b:91:0c:39:5a:d9:f5:37:3e:3c:1e:1a:69:6b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 15:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a500fdb781652a7777e042532f5becb7c94c581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0b:16:df:31:0a:3a:94:5a:01:34:c6:25:cc:
5e:1f:a5:2f:74:b8:9d:e1:35:0a:ee:27:db:b8:d3:
97:1e:83:bb:a3:89:31:0c:4b:49:a7:48:7e:24:5d:
ca:94:8e:83:f7:c1:ba:9e:41:32:59:cd:82:05:8f:
cd:fc:0b:03:be:79:f5:67:3c:ac:89:53:db:ef:62:
ca:4b:c1:e5:9e:be:1d:0a:04:60:3b:99:8b:81:e3:
c7:0d:70:87:bf:5a:ef:dc:b7:16:c5:03:b5:f4:f9:
8a:38:b7:7e:a3:f8:e3:ff:56:1e:de:6e:97:b3:2e:
a8:c8:92:09:48:44:af:dc:cb:8e:94:6d:33:59:48:
75:97:1e:39:a6:6a:aa:91:bd:63:41:c0:69:db:3e:
fc:e1:c0:af:d2:ba:b9:a9:a9:79:46:1f:81:60:0f:
bf:dc:5b:7c:17:e6:23:e0:59:78:33:5e:35:a0:01:
20:36:fa:af:dd:1b:8f:66:9a:4c:45:93:84:07:f9:
f1:45:cd:a1:1b:da:fd:05:b8:55:b8:72:44:85:b1:
cc:a5:7a:bc:ea:7d:80:4b:54:3c:ea:06:06:10:d9:
c0:a7:97:d3:d7:71:c3:55:40:23:a7:a5:47:2b:3e:
9c:9d:1c:2c:41:8b:af:2b:7e:6c:0b:e6:ef:ee:8a:
ca:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:50:0F:DB:78:16:52:A7:77:7E:04:25:32:F5:BE:CB:7C:94:C5:81
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ilAP23gWUqd3fgQlMvW-y3yUxYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:87:a1:72:6f:0c:97:66:a9:40:22:43:7f:96:a7:a0:b4:b2:
39:fb:75:fb:5e:14:ae:45:41:cd:a9:45:5d:86:5f:8d:ae:29:
1d:da:4d:58:93:ce:93:31:ad:8c:7c:dd:e1:42:0d:53:fe:e2:
d4:2e:02:12:8b:54:d7:fd:03:49:f7:28:2e:a6:a2:24:fa:88:
41:a2:ad:e7:77:26:ba:62:58:7c:b3:5a:a3:29:02:80:ff:66:
d2:aa:25:f9:39:10:7a:ba:de:ee:03:38:08:a7:5c:be:5c:d8:
d7:b9:d3:71:ae:2b:eb:89:35:f1:47:e7:a1:04:d8:e3:5d:d1:
0a:52:40:8f:de:be:0c:b7:7a:44:f7:7b:15:f8:5e:e2:ab:46:
df:1a:b7:be:92:2a:40:6e:84:c6:ac:68:19:3a:6f:ed:e3:57:
94:61:98:3e:f0:2d:ea:f8:df:bf:60:41:3f:1b:cc:70:59:39:
e4:49:f8:66:d1:e9:13:db:77:5b:66:f1:39:b3:77:25:ca:9a:
90:cd:70:8e:fe:78:64:d2:dc:3a:66:2f:65:ee:4d:9b:1c:91:
de:68:35:21:22:2d:fe:e6:23:55:94:01:59:23:3e:16:9e:af:
c3:77:ae:40:ce:05:b3:af:08:fc:a0:78:c6:db:ff:5f:25:6b:
19:55:2b:74
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZvW5EMOVrZ9Tc+PB4aaWsPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjIwMTUwNTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTUwMGZkYjc4MTY1MmE3Nzc3ZTA0MjUzMmY1YmVjYjdjOTRjNTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAsW3zEKOpRaATTGJcxeH6UvdLid
4TUK7ifbuNOXHoO7o4kxDEtJp0h+JF3KlI6D98G6nkEyWc2CBY/N/AsDvnn1Zzys
iVPb72LKS8Hlnr4dCgRgO5mLgePHDXCHv1rv3LcWxQO19PmKOLd+o/jj/1Ye3m6X
sy6oyJIJSESv3MuOlG0zWUh1lx45pmqqkb1jQcBp2z784cCv0rq5qal5Rh+BYA+/
3Ft8F+Yj4Fl4M141oAEgNvqv3RuPZppMRZOEB/nxRc2hG9r9BbhVuHJEhbHMpXq8
6n2AS1Q86gYGENnAp5fT13HDVUAjp6VHKz6cnRwsQYuvK35sC+bv7orKyQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIpQD9t4FlKnd34EJTL1vst8lMWBMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvaWxBUDIzZ1dVcWQzZmdRbE12Vy15M3lVeFlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFWHoXJvDJdmqUAiQ3+W
p6C0sjn7dfteFK5FQc2pRV2GX42uKR3aTViTzpMxrYx83eFCDVP+4tQuAhKLVNf9
A0n3KC6moiT6iEGired3JrpiWHyzWqMpAoD/ZtKqJfk5EHq63u4DOAinXL5c2Ne5
03GuK+uJNfFH56EE2ONd0QpSQI/evgy3ekT3exX4XuKrRt8at76SKkBuhMasaBk6
b+3jV5RhmD7wLer4379gQT8bzHBZOeRJ+GbR6RPbd1tm8TmzdyXKmpDNcI7+eGTS
3DpmL2XuTZsckd5oNSEiLf7mI1WUAVkjPhaer8N3rkDOBbOvCPygeMbb/18laxlV
K3Q=
-----END CERTIFICATE-----
Generated at Sat May 3 15:49:48 2025 by rpki-client