Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mPSq1O81vFUJlfIwAlzvDo-PEX0.roa
File: mPSq1O81vFUJlfIwAlzvDo-PEX0.roa (raw, json)
Hash identifier: OxXnNszLNeLEdTuqEnrsW0fE4yZv618MkFupHemxhJw=
Subject key identifier: 98:F4:AA:D4:EF:35:BC:55:09:95:F2:30:02:5C:EF:0E:8F:8F:11:7D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018755EEBEFBCAFF96D12D336F869937422E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mPSq1O81vFUJlfIwAlzvDo-PEX0.roa
Signing time: Thu 06 Apr 2023 09:38:42 +0000
ROA not before: Thu 06 Apr 2023 09:38:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:55:ee:be:fb:ca:ff:96:d1:2d:33:6f:86:99:37:42:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 6 09:38:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98f4aad4ef35bc550995f230025cef0e8f8f117d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:1e:83:6e:75:02:f9:ef:02:c4:6c:b5:1e:
2a:ff:73:d3:d3:41:00:e6:4f:1a:81:24:d8:a3:33:
33:0a:65:27:3d:08:fb:c1:08:27:72:73:50:67:02:
30:de:ef:39:07:e8:b6:f5:36:3e:0b:d7:35:63:03:
77:54:02:84:71:30:62:b8:17:d9:3c:bb:ce:0e:da:
bc:5d:f7:9f:07:42:d7:e4:d1:64:00:d8:f5:a8:1e:
fa:ce:8e:8a:f0:40:a8:5e:b1:aa:55:eb:87:af:88:
98:bd:42:b5:92:20:00:f1:24:b5:ff:ec:01:00:63:
c2:53:94:70:4d:39:14:38:c5:f3:ca:29:15:9e:a8:
fb:32:68:cb:8f:27:86:7b:b4:b1:a3:c3:d4:27:a2:
82:df:66:53:e1:f6:23:68:93:16:25:47:c1:05:e8:
82:9f:38:28:d6:ef:32:65:16:0b:36:da:a2:f1:18:
44:66:c1:9c:0f:c6:9d:f1:53:89:c5:61:88:f6:d6:
bd:c1:a1:b5:67:7f:66:39:22:63:65:2a:3a:c6:9f:
c4:ea:9d:00:7b:08:70:b5:a2:1d:fc:d8:30:0a:79:
1d:c0:3e:1b:fa:ed:cb:56:fd:99:f5:ca:e3:fa:ac:
d0:b7:93:2b:e9:13:2e:f6:ae:c5:fa:fa:9e:aa:63:
8f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F4:AA:D4:EF:35:BC:55:09:95:F2:30:02:5C:EF:0E:8F:8F:11:7D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mPSq1O81vFUJlfIwAlzvDo-PEX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:fb:5a:47:c2:2a:bd:d8:78:60:20:b7:2b:3b:e6:e7:d7:36:
a3:d9:a8:76:7c:e3:9b:08:74:7c:f3:1d:ea:3d:50:ed:05:9d:
1f:84:ef:5e:5d:e4:b0:09:42:43:53:bb:23:1e:6d:52:99:a1:
7a:ab:27:d1:0e:88:7a:ef:3c:f4:88:30:4e:3b:8f:36:cf:46:
23:17:92:56:72:aa:ee:73:c6:69:76:f3:fc:9a:ea:fd:36:17:
42:5a:1e:57:4b:1f:fe:4c:e3:b3:bf:4c:4d:9e:0c:46:33:79:
1f:1e:ec:73:19:87:a3:09:7e:46:9d:b6:01:25:c5:46:95:53:
03:28:43:40:32:e1:2e:dc:0d:af:42:6e:f6:0f:36:b5:65:dd:
ea:de:3f:5f:b1:2a:b1:d9:02:6a:47:40:4e:97:ac:35:17:7d:
70:2f:d0:09:60:62:b2:46:d5:54:0a:01:cc:cb:7f:78:2c:14:
fd:52:10:a9:b3:4a:ca:53:5e:55:ce:1e:0e:d1:35:43:58:ef:
c9:eb:d1:6b:1e:c5:4f:ee:24:18:00:78:2d:2e:28:2a:3f:51:
54:e7:84:4d:53:3c:dc:90:52:8a:e8:4d:29:12:1f:89:c6:35:
a8:e3:be:8e:a3:a6:32:89:58:5c:80:0b:35:2c:43:9f:53:ab:
f7:73:83:ff
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdV7r77yv+W0S0zb4aZN0IuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDA2MDkzODQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGY0YWFkNGVmMzViYzU1MDk5NWYyMzAwMjVjZWYwZThmOGYxMTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszYeg251AvnvAsRstR4q/3PT00EA
5k8agSTYozMzCmUnPQj7wQgncnNQZwIw3u85B+i29TY+C9c1YwN3VAKEcTBiuBfZ
PLvODtq8XfefB0LX5NFkANj1qB76zo6K8ECoXrGqVeuHr4iYvUK1kiAA8SS1/+wB
AGPCU5RwTTkUOMXzyikVnqj7MmjLjyeGe7Sxo8PUJ6KC32ZT4fYjaJMWJUfBBeiC
nzgo1u8yZRYLNtqi8RhEZsGcD8ad8VOJxWGI9ta9waG1Z39mOSJjZSo6xp/E6p0A
ewhwtaId/NgwCnkdwD4b+u3LVv2Z9crj+qzQt5Mr6RMu9q7F+vqeqmOPIwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJj0qtTvNbxVCZXyMAJc7w6PjxF9MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbVBTcTFPODF2RlVKbGZJd0FsenZEby1QRVgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALT7WkfCKr3YeGAgtys7
5ufXNqPZqHZ845sIdHzzHeo9UO0FnR+E715d5LAJQkNTuyMebVKZoXqrJ9EOiHrv
PPSIME47jzbPRiMXklZyqu5zxml28/ya6v02F0JaHldLH/5M47O/TE2eDEYzeR8e
7HMZh6MJfkadtgElxUaVUwMoQ0Ay4S7cDa9CbvYPNrVl3ereP1+xKrHZAmpHQE6X
rDUXfXAv0AlgYrJG1VQKAczLf3gsFP1SEKmzSspTXlXOHg7RNUNY78nr0WsexU/u
JBgAeC0uKCo/UVTnhE1TPNyQUoroTSkSH4nGNajjvo6jpjKJWFyACzUsQ59Tq/dz
g/8=
-----END CERTIFICATE-----
Generated at Thu May 1 11:18:24 2025 by rpki-client