Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ipn4ILBT-MqPS6nKK2M26BmRGtc.roa
File: ipn4ILBT-MqPS6nKK2M26BmRGtc.roa (raw, json)
Hash identifier: UAGadbWOacblV6XimwzCVkbOnPzASGvsLg8W7FGqZU4=
Subject key identifier: 8A:99:F8:20:B0:53:F8:CA:8F:4B:A9:CA:2B:63:36:E8:19:91:1A:D7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C93E9E58D7DB1C9CA264E4B29E48CF19
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ipn4ILBT-MqPS6nKK2M26BmRGtc.roa
Signing time: Sat 17 Jun 2023 12:05:04 +0000
ROA not before: Sat 17 Jun 2023 12:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:188:c93d:efbf/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c9:3e:9e:58:d7:db:1c:9c:a2:64:e4:b2:9e:48:cf:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 17 12:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a99f820b053f8ca8f4ba9ca2b6336e819911ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:57:d6:d6:7e:14:1a:75:e9:a4:7a:3b:a8:2b:
8d:3e:39:40:23:84:ea:84:ff:76:80:a2:29:e6:90:
ff:72:1b:2d:85:8e:98:64:4e:e3:57:a0:3d:f5:06:
d0:f8:d6:be:32:86:fc:f0:50:3f:6c:94:d4:54:d2:
02:33:77:d4:11:00:a9:dd:af:e3:7b:88:6a:26:86:
4d:da:34:93:a2:f6:3e:e2:00:38:e6:d8:76:f5:78:
15:6a:57:63:80:12:f7:22:32:5a:e0:50:bb:ef:46:
ef:f8:c8:32:e8:b6:85:2b:00:7d:00:1d:dd:dd:ea:
4c:77:dd:fd:11:65:7c:65:a0:7f:d5:7d:ba:81:f5:
0e:97:95:55:ad:7f:52:86:3f:d4:c4:bf:7b:b6:a6:
b8:5f:2f:bf:7b:42:ef:67:8f:d7:96:fe:2a:6a:ce:
76:ed:7a:ea:f5:89:3a:9a:18:15:08:13:2a:46:b7:
bf:b0:e8:29:f2:7e:62:3f:ea:51:75:fd:4a:b7:db:
cc:08:7b:9f:68:e3:48:c7:34:7b:ec:cc:c0:68:d4:
ff:0f:73:e8:0d:3d:98:ab:0e:d7:dc:e5:24:6c:16:
34:bd:ad:c0:50:b9:9a:20:ce:93:07:11:4d:75:85:
fb:1e:99:b3:e1:b2:be:45:8e:89:46:6c:fd:cc:ff:
3e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:99:F8:20:B0:53:F8:CA:8F:4B:A9:CA:2B:63:36:E8:19:91:1A:D7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ipn4ILBT-MqPS6nKK2M26BmRGtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:bb:f6:71:d3:ad:80:6c:04:ca:66:be:a6:7d:a8:85:89:e9:
64:bb:07:c9:0d:80:e8:4f:0c:02:a7:7f:44:64:43:5c:e9:66:
24:c2:9d:39:70:f0:c1:18:f0:c6:d2:64:65:8c:2d:e3:ae:99:
a2:ca:b2:98:38:81:1a:a3:f0:54:3d:2a:a4:1d:61:10:1a:ec:
54:58:9b:f2:36:ab:56:84:3d:11:fb:de:ab:ab:18:00:22:54:
84:9c:a5:c0:c1:24:91:b8:cd:0b:a0:1d:23:9c:20:e0:4f:90:
ae:ae:ed:5c:74:07:c8:37:12:d4:b6:92:8c:fc:87:7c:0b:d6:
ca:97:47:44:f8:4d:37:52:a6:66:6d:0b:c5:fa:5c:64:4e:b1:
17:6d:0a:41:32:8b:3b:92:e6:ef:cc:06:00:98:66:d0:2c:c5:
6d:09:9e:70:1e:9f:ba:47:84:58:2f:2e:b0:6e:df:da:42:df:
d6:71:2c:37:dc:19:be:d4:26:f7:0d:06:d7:d7:5d:5e:45:4b:
f0:a5:a3:d0:17:b2:ad:f9:d0:ec:9d:9e:a3:ee:77:76:ea:fe:
a5:f4:bc:2a:dd:00:da:6b:0c:4e:fe:eb:4e:66:65:60:f8:a0:
d8:45:d2:0b:e5:12:48:87:80:80:80:46:0f:17:0c:22:e1:4e:
a6:24:0f:df
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYjJPp5Y19scnKJk5LKeSM8ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjE3MTIwNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTk5ZjgyMGIwNTNmOGNhOGY0YmE5Y2EyYjYzMzZlODE5OTExYWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1fW1n4UGnXppHo7qCuNPjlAI4Tq
hP92gKIp5pD/chsthY6YZE7jV6A99QbQ+Na+Mob88FA/bJTUVNICM3fUEQCp3a/j
e4hqJoZN2jSTovY+4gA45th29XgValdjgBL3IjJa4FC770bv+Mgy6LaFKwB9AB3d
3epMd939EWV8ZaB/1X26gfUOl5VVrX9Shj/UxL97tqa4Xy+/e0LvZ4/Xlv4qas52
7Xrq9Yk6mhgVCBMqRre/sOgp8n5iP+pRdf1Kt9vMCHufaONIxzR77MzAaNT/D3Po
DT2Yqw7X3OUkbBY0va3AULmaIM6TBxFNdYX7Hpmz4bK+RY6JRmz9zP8+XQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIqZ+CCwU/jKj0upyitjNugZkRrXMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvaXBuNElMQlQtTXFQUzZuS0syTTI2Qm1SR3RjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAO79nHTrYBsBMpmvqZ9
qIWJ6WS7B8kNgOhPDAKnf0RkQ1zpZiTCnTlw8MEY8MbSZGWMLeOumaLKspg4gRqj
8FQ9KqQdYRAa7FRYm/I2q1aEPRH73qurGAAiVIScpcDBJJG4zQugHSOcIOBPkK6u
7Vx0B8g3EtS2koz8h3wL1sqXR0T4TTdSpmZtC8X6XGROsRdtCkEyizuS5u/MBgCY
ZtAsxW0JnnAen7pHhFgvLrBu39pC39ZxLDfcGb7UJvcNBtfXXV5FS/Clo9AXsq35
0OydnqPud3bq/qX0vCrdANprDE7+605mZWD4oNhF0gvlEkiHgICARg8XDCLhTqYk
D98=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:03 2025 by rpki-client