Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kQggdxeWuWkJ7CDdou3Uivf-H4c.roa
File: kQggdxeWuWkJ7CDdou3Uivf-H4c.roa (raw, json)
Hash identifier: NjIlU0EdZcR2jTqId9fRn7ToOeKtibXuxU36c1XVvd4=
Subject key identifier: 91:08:20:77:17:96:B9:69:09:EC:20:DD:A2:ED:D4:8A:F7:FE:1F:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187BC666B80D33CA037C4AFF34F713C9930
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kQggdxeWuWkJ7CDdou3Uivf-H4c.roa
Signing time: Wed 26 Apr 2023 07:10:41 +0000
ROA not before: Wed 26 Apr 2023 07:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bc:66:6b:80:d3:3c:a0:37:c4:af:f3:4f:71:3c:99:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 26 07:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=910820771796b96909ec20dda2edd48af7fe1f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:78:af:63:3a:46:54:b2:b1:bc:52:27:57:88:
02:74:f3:11:38:9d:37:32:6c:21:72:bd:eb:e9:27:
1d:ba:b8:6f:d8:90:e4:51:5e:59:2c:f5:e9:d2:bd:
04:f2:7d:0d:25:e4:07:79:63:70:e5:15:86:95:3a:
f1:7b:94:df:d6:c6:19:e0:aa:18:b9:3d:f5:33:b7:
69:6d:d1:fa:22:91:8c:58:72:1a:08:ba:f0:01:56:
a9:8f:e6:a2:6f:ea:7d:3b:f3:cc:22:fb:df:5b:55:
1b:53:91:c3:3b:6b:45:90:ea:f4:f4:9d:69:32:35:
11:fe:3d:8e:0c:42:49:e8:26:9b:42:9c:26:d8:d7:
61:c2:63:5b:24:bf:8b:1f:72:c7:06:17:1f:d1:c8:
6b:ac:41:b1:83:ad:09:de:a6:22:3a:11:52:6e:6a:
e4:7b:f4:7e:e6:64:fc:51:d0:df:de:8a:37:ae:68:
c6:c1:a3:1d:bf:73:14:df:7c:7e:dc:21:0b:f2:f4:
36:15:6f:2e:d7:30:3f:23:22:79:f8:32:1e:24:db:
a7:59:8c:71:70:d4:08:80:cc:12:c6:74:48:99:aa:
52:46:bd:e8:11:69:ef:31:6a:9e:bd:d5:56:24:cb:
d5:a6:46:a9:56:a5:f0:c5:8a:6f:4a:ad:5f:0e:92:
68:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:08:20:77:17:96:B9:69:09:EC:20:DD:A2:ED:D4:8A:F7:FE:1F:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kQggdxeWuWkJ7CDdou3Uivf-H4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:52:1b:62:8d:e9:28:e5:a8:df:02:46:c6:c2:4b:91:81:ad:
39:61:7e:90:14:9f:73:29:66:06:58:47:e9:33:48:f2:c8:21:
de:2e:1a:91:4d:0e:f3:0b:31:39:79:8f:b1:d3:f7:75:a9:80:
25:61:ce:5f:35:9c:83:4e:05:aa:6f:37:e8:34:f2:ca:aa:a0:
f0:e0:bf:ef:30:0c:cd:1f:be:f9:49:96:34:19:96:49:a4:3a:
77:88:a4:ee:20:dc:a2:a4:88:fc:b4:f4:f0:4d:91:4e:e6:88:
a5:df:c5:d2:f0:bd:1d:1e:e1:65:50:33:17:0f:f1:0a:8a:9e:
44:26:63:bc:81:24:cc:6f:19:f5:0d:8e:17:e3:2d:40:00:d2:
56:8c:69:0d:00:ec:52:59:54:51:be:b2:3f:4a:57:a2:f4:76:
5c:d3:f6:03:9f:d1:64:5a:14:0c:93:59:04:f0:3a:d6:20:7b:
59:c8:28:48:1a:12:09:60:3b:c7:7c:fa:df:9a:fc:f5:72:ad:
80:07:45:d5:70:13:10:00:c8:df:1e:6e:36:cb:ec:aa:92:b0:
fa:09:17:a5:a5:a9:40:70:36:b8:a6:9d:bc:bd:fb:61:cf:88:
d7:40:65:1c:7f:5e:a2:9f:bf:5f:36:fc:45:98:60:98:7d:d1:
40:a4:90:31
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYe8ZmuA0zygN8Sv809xPJkwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDI2MDcxMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTA4MjA3NzE3OTZiOTY5MDllYzIwZGRhMmVkZDQ4YWY3ZmUxZjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXivYzpGVLKxvFInV4gCdPMROJ03
Mmwhcr3r6Scdurhv2JDkUV5ZLPXp0r0E8n0NJeQHeWNw5RWGlTrxe5Tf1sYZ4KoY
uT31M7dpbdH6IpGMWHIaCLrwAVapj+aib+p9O/PMIvvfW1UbU5HDO2tFkOr09J1p
MjUR/j2ODEJJ6CabQpwm2NdhwmNbJL+LH3LHBhcf0chrrEGxg60J3qYiOhFSbmrk
e/R+5mT8UdDf3oo3rmjGwaMdv3MU33x+3CEL8vQ2FW8u1zA/IyJ5+DIeJNunWYxx
cNQIgMwSxnRImapSRr3oEWnvMWqevdVWJMvVpkapVqXwxYpvSq1fDpJo9wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJEIIHcXlrlpCewg3aLt1Ir3/h+HMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEva1FnZ2R4ZVd1V2tKN0NEZG91M1VpdmYtSDRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACxSG2KN6SjlqN8CRsbC
S5GBrTlhfpAUn3MpZgZYR+kzSPLIId4uGpFNDvMLMTl5j7HT93WpgCVhzl81nINO
BapvN+g08sqqoPDgv+8wDM0fvvlJljQZlkmkOneIpO4g3KKkiPy09PBNkU7miKXf
xdLwvR0e4WVQMxcP8QqKnkQmY7yBJMxvGfUNjhfjLUAA0laMaQ0A7FJZVFG+sj9K
V6L0dlzT9gOf0WRaFAyTWQTwOtYge1nIKEgaEglgO8d8+t+a/PVyrYAHRdVwExAA
yN8ebjbL7KqSsPoJF6WlqUBwNrimnby9+2HPiNdAZRx/XqKfv182/EWYYJh90UCk
kDE=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:20:48 2025 by rpki-client