Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l-I6glxo0dt0cTpIcgnB6RmGxWA.roa
File: l-I6glxo0dt0cTpIcgnB6RmGxWA.roa (raw, json)
Hash identifier: VuirUCX/cS73zVNCCm9+r2ABedMtHbglmbZgVKBuOqA=
Subject key identifier: 97:E2:3A:82:5C:68:D1:DB:74:71:3A:48:72:09:C1:E9:19:86:C5:60
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01874696675F77DC369A1101800ACE680A3E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l-I6glxo0dt0cTpIcgnB6RmGxWA.roa
Signing time: Mon 03 Apr 2023 10:07:54 +0000
ROA not before: Mon 03 Apr 2023 10:07:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:96:67:5f:77:dc:36:9a:11:01:80:0a:ce:68:0a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 3 10:07:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97e23a825c68d1db74713a487209c1e91986c560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:ed:bb:63:f7:8f:7a:0e:ec:17:a4:2e:41:
8a:f2:d6:16:5d:47:00:d4:82:2c:11:43:82:d8:50:
25:2f:75:a9:97:6c:7c:85:33:9f:1c:1f:31:d9:17:
f1:e0:9c:5b:6c:ec:f0:83:a0:00:4a:f6:30:be:99:
9c:96:f9:04:cc:2e:ef:f7:13:e5:db:78:ad:e2:aa:
82:16:22:78:be:ae:0e:6f:4e:04:bc:4b:d7:f6:64:
68:16:d4:38:ed:e7:a0:56:37:f4:57:7d:e5:6a:b6:
54:91:44:75:7a:a6:74:aa:26:5a:04:c4:c4:f7:eb:
9f:8e:e3:98:86:7b:2a:e0:3c:92:c6:d5:e2:9c:0b:
7c:7c:b6:9a:5f:3a:93:6d:61:66:55:d0:1e:9f:6f:
a3:bf:15:40:ab:e8:4f:b9:a0:71:d3:2f:8a:52:e3:
63:33:9d:2d:5d:71:2f:a6:7e:83:42:f1:3b:27:a9:
59:27:2b:20:5e:82:6f:51:bc:5a:23:0d:a4:a5:35:
b4:eb:d7:41:c6:07:f6:17:75:dc:18:9a:5b:24:b9:
64:2c:19:6e:7d:c7:fd:15:2c:4d:6e:96:a3:71:e5:
6d:d6:53:a7:5b:69:4d:7f:38:18:a4:cb:d2:a1:f8:
28:1e:f6:be:d6:92:7f:bb:5d:14:b0:c9:7c:2a:27:
e2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E2:3A:82:5C:68:D1:DB:74:71:3A:48:72:09:C1:E9:19:86:C5:60
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l-I6glxo0dt0cTpIcgnB6RmGxWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:7e:33:67:87:e0:b9:5b:93:93:42:17:0d:05:fb:1d:48:c6:
cb:a0:62:8b:30:52:62:bf:5b:cf:fb:32:c0:c8:48:c4:49:26:
f7:b5:be:33:58:b8:42:11:ae:b7:4b:7b:e7:5e:ff:90:4e:a7:
17:d1:7a:fb:d6:b6:76:25:44:95:dd:98:55:0d:ec:3f:58:f8:
9e:6c:6c:08:f4:73:f1:c7:32:d2:28:8f:af:28:d3:33:3e:f9:
69:5b:3d:e5:df:29:d2:07:43:a8:17:48:bc:68:e1:b6:4f:43:
8f:31:7c:b1:33:c4:5f:06:0e:78:f4:b1:c3:0f:dd:bd:8f:66:
5d:1b:34:3a:4f:22:e8:9b:89:4d:ed:d3:c7:9f:2b:97:f2:68:
d5:de:d2:1c:4f:1b:1c:c5:55:28:c1:9e:70:dc:b6:45:71:c7:
5f:9d:3f:af:b1:d0:5f:ef:40:9a:76:38:03:41:0b:4b:ba:33:
e4:19:d6:83:3d:21:cb:1d:83:cb:00:54:32:94:b7:b9:64:08:
d0:97:3e:5f:ad:3d:7b:ae:a8:92:dc:60:51:f7:e8:d7:76:0e:
8e:a0:66:30:3d:9f:55:ac:f3:73:76:64:77:e6:be:1b:ec:f4:
e9:59:9b:4b:c8:a6:e4:96:f4:e5:00:3f:f0:5f:aa:12:dd:af:
fb:c7:75:bf
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdGlmdfd9w2mhEBgArOaAo+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDAzMTAwNzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2UyM2E4MjVjNjhkMWRiNzQ3MTNhNDg3MjA5YzFlOTE5ODZjNTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfrtu2P3j3oO7BekLkGK8tYWXUcA
1IIsEUOC2FAlL3Wpl2x8hTOfHB8x2Rfx4JxbbOzwg6AASvYwvpmclvkEzC7v9xPl
23it4qqCFiJ4vq4Ob04EvEvX9mRoFtQ47eegVjf0V33larZUkUR1eqZ0qiZaBMTE
9+ufjuOYhnsq4DySxtXinAt8fLaaXzqTbWFmVdAen2+jvxVAq+hPuaBx0y+KUuNj
M50tXXEvpn6DQvE7J6lZJysgXoJvUbxaIw2kpTW069dBxgf2F3XcGJpbJLlkLBlu
fcf9FSxNbpajceVt1lOnW2lNfzgYpMvSofgoHva+1pJ/u10UsMl8KifiDQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJfiOoJcaNHbdHE6SHIJwekZhsVgMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbC1JNmdseG8wZHQwY1RwSWNnbkI2Um1HeFdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAER+M2eH4Llbk5NCFw0F
+x1IxsugYoswUmK/W8/7MsDISMRJJve1vjNYuEIRrrdLe+de/5BOpxfRevvWtnYl
RJXdmFUN7D9Y+J5sbAj0c/HHMtIoj68o0zM++WlbPeXfKdIHQ6gXSLxo4bZPQ48x
fLEzxF8GDnj0scMP3b2PZl0bNDpPIuibiU3t08efK5fyaNXe0hxPGxzFVSjBnnDc
tkVxx1+dP6+x0F/vQJp2OANBC0u6M+QZ1oM9Icsdg8sAVDKUt7lkCNCXPl+tPXuu
qJLcYFH36Nd2Do6gZjA9n1Ws83N2ZHfmvhvs9OlZm0vIpuSW9OUAP/BfqhLdr/vH
db8=
-----END CERTIFICATE-----
Generated at Fri May 2 14:43:35 2025 by rpki-client