Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l9DK27jkj79KfRqdL22XjAsKYJo.roa
File: l9DK27jkj79KfRqdL22XjAsKYJo.roa (raw, json)
Hash identifier: rFm7TUgN385gWbu5u6INRA/pDy1GfUNKaQY8X1EVR/A=
Subject key identifier: 97:D0:CA:DB:B8:E4:8F:BF:4A:7D:1A:9D:2F:6D:97:8C:0B:0A:60:9A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868E80DDB5203E2F86E7538A8423F66D2E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l9DK27jkj79KfRqdL22XjAsKYJo.roa
Signing time: Sun 26 Feb 2023 16:14:15 +0000
ROA not before: Sun 26 Feb 2023 16:14:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8e:80:dd:b5:20:3e:2f:86:e7:53:8a:84:23:f6:6d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 16:14:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97d0cadbb8e48fbf4a7d1a9d2f6d978c0b0a609a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2e:b7:58:6b:3e:97:37:7b:3f:36:f7:3f:45:
64:90:cd:6f:6f:4e:8d:62:19:9b:0c:89:df:8a:61:
f5:ff:c5:d3:fb:03:7f:6c:f7:d1:c5:1f:81:9c:aa:
c9:93:90:27:0b:71:49:03:be:9b:df:a3:d0:67:00:
5e:df:d8:6d:54:7e:5e:7f:d7:77:4b:c0:17:a6:79:
a1:ea:12:ba:37:99:34:90:4f:06:5d:27:60:5e:a6:
9e:9b:95:57:2d:2b:18:bd:c1:c4:eb:0a:f6:31:42:
1a:60:e5:12:45:b9:7c:c5:5f:76:e2:93:86:2e:89:
9c:a6:f1:ec:ad:38:5d:2b:db:c3:ea:ae:aa:c4:a6:
6d:1d:3d:57:3a:89:80:c5:4f:6e:7a:47:74:75:45:
23:51:4e:ca:e2:74:67:12:31:1d:55:93:7c:81:a1:
74:9f:8e:ab:8d:b4:9c:c4:70:08:19:d2:fe:19:10:
f7:2b:bd:a3:71:73:db:3d:75:70:2c:b8:83:27:f7:
50:bb:f1:74:c8:f7:10:1c:50:5a:9d:e6:d4:af:8d:
bd:e2:63:f5:a7:ce:47:fa:66:71:71:04:c7:3e:1f:
e5:a4:11:e2:03:fc:2b:fc:cf:06:14:bc:3b:15:8e:
91:fd:10:90:3a:90:39:4a:2e:6f:77:7d:c9:00:e3:
c8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D0:CA:DB:B8:E4:8F:BF:4A:7D:1A:9D:2F:6D:97:8C:0B:0A:60:9A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l9DK27jkj79KfRqdL22XjAsKYJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b2:d3:9c:8b:2d:c0:75:b0:f4:9a:b4:d4:55:46:08:fb:8b:f9:
04:d9:e9:d4:78:38:66:38:91:f3:b2:a7:64:09:e1:6c:b8:17:
88:20:f8:8b:5a:f7:99:05:79:4b:46:68:55:e6:0d:84:82:af:
11:8d:a8:18:0f:e6:1d:1a:52:35:f9:bc:7c:da:86:ba:24:41:
9d:2c:7a:b6:e0:e5:bc:16:4d:0d:9f:cd:53:72:41:15:d9:c6:
db:5c:21:70:4e:d3:41:c5:ca:78:39:b4:c5:f7:21:23:7b:e0:
b6:2a:9c:5d:7e:33:10:09:bb:8c:23:c3:b9:10:41:9d:4e:d0:
1e:e1:3d:a0:b2:41:d0:13:84:f2:3e:66:ab:31:90:e0:df:8d:
02:1f:80:78:c5:ad:4e:59:b1:db:ac:c3:11:a2:7a:42:71:0f:
5b:f0:df:d1:49:f7:10:12:b3:d6:20:5c:85:0a:11:3c:e3:b4:
ce:97:e9:e0:8f:ae:bc:3b:ca:47:3d:84:4c:6c:d3:b3:ca:3f:
ab:be:df:00:70:24:eb:aa:fe:b2:2a:7f:e3:51:59:e9:ab:aa:
7c:2f:ca:ab:c0:0d:6a:0b:e9:3a:4f:5c:26:ed:ae:82:8d:06:
17:c6:34:36:be:17:73:d4:bd:2b:9f:4d:d0:24:60:73:50:89:
ba:8f:72:da
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaOgN21ID4vhudTioQj9m0uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjI2MTYxNDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2QwY2FkYmI4ZTQ4ZmJmNGE3ZDFhOWQyZjZkOTc4YzBiMGE2MDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS63WGs+lzd7Pzb3P0VkkM1vb06N
YhmbDInfimH1/8XT+wN/bPfRxR+BnKrJk5AnC3FJA76b36PQZwBe39htVH5ef9d3
S8AXpnmh6hK6N5k0kE8GXSdgXqaem5VXLSsYvcHE6wr2MUIaYOUSRbl8xV924pOG
LomcpvHsrThdK9vD6q6qxKZtHT1XOomAxU9uekd0dUUjUU7K4nRnEjEdVZN8gaF0
n46rjbScxHAIGdL+GRD3K72jcXPbPXVwLLiDJ/dQu/F0yPcQHFBanebUr4294mP1
p85H+mZxcQTHPh/lpBHiA/wr/M8GFLw7FY6R/RCQOpA5Si5vd33JAOPINQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJfQytu45I+/Sn0anS9tl4wLCmCaMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbDlESzI3amtqNzlLZlJxZEwyMlhqQXNLWUpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALLTnIstwHWw9Jq01FVG
CPuL+QTZ6dR4OGY4kfOyp2QJ4Wy4F4gg+Ita95kFeUtGaFXmDYSCrxGNqBgP5h0a
UjX5vHzahrokQZ0serbg5bwWTQ2fzVNyQRXZxttcIXBO00HFyng5tMX3ISN74LYq
nF1+MxAJu4wjw7kQQZ1O0B7hPaCyQdAThPI+ZqsxkODfjQIfgHjFrU5ZsduswxGi
ekJxD1vw39FJ9xASs9YgXIUKETzjtM6X6eCPrrw7ykc9hExs07PKP6u+3wBwJOuq
/rIqf+NRWemrqnwvyqvADWoL6TpPXCbtroKNBhfGNDa+F3PUvSufTdAkYHNQibqP
cto=
-----END CERTIFICATE-----
Generated at Sat May 3 04:04:04 2025 by rpki-client