Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nUP9U75VbEPCxubIoJqvlOCWRAk.roa
File: nUP9U75VbEPCxubIoJqvlOCWRAk.roa (raw, json)
Hash identifier: cl10c00KdeieJ5X0kOD95my+ccyCWFeylEXKZx/3Ozk=
Subject key identifier: 9D:43:FD:53:BE:55:6C:43:C2:C6:E6:C8:A0:9A:AF:94:E0:96:44:09
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01872A479F03AB9A3015BAE0D0ADFE7A5654
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nUP9U75VbEPCxubIoJqvlOCWRAk.roa
Signing time: Tue 28 Mar 2023 22:12:29 +0000
ROA not before: Tue 28 Mar 2023 22:12:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2a:47:9f:03:ab:9a:30:15:ba:e0:d0:ad:fe:7a:56:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 28 22:12:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d43fd53be556c43c2c6e6c8a09aaf94e0964409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:19:85:2c:6f:09:6d:9b:c8:01:3f:f5:17:ee:
c2:a0:33:dc:e3:d4:4f:ad:4a:34:00:51:7e:5d:0e:
f5:80:63:8e:73:f3:d8:98:35:ff:71:da:62:50:cf:
0a:46:a3:c8:cf:c9:b4:ca:99:de:f6:7e:9c:19:20:
68:30:8f:ed:f0:52:65:24:8f:90:50:03:0a:1e:2d:
a5:10:bc:54:9d:23:0f:48:ad:c4:b4:36:a0:fa:a6:
01:38:89:62:38:f5:a3:5a:08:1e:6c:cc:f4:a0:b6:
f9:1c:17:79:13:be:98:59:2c:12:45:5b:1b:7e:38:
51:49:28:e4:fd:5b:19:61:86:01:02:62:ba:51:07:
09:5d:5d:93:3b:47:da:b5:9e:9d:c0:2d:ea:fe:0d:
df:a7:7c:ae:85:01:8b:be:76:26:58:63:f5:b7:3f:
1b:b4:00:7e:f1:4c:35:7f:7c:1f:98:13:63:48:b1:
07:88:67:47:92:54:6e:6d:ef:e8:b6:d9:23:67:4e:
a5:1f:b7:f4:21:bd:6b:b8:c0:8b:42:c4:6e:4f:7d:
e4:fc:00:8d:1c:e7:f9:e2:02:37:cc:c9:8a:1b:6e:
e8:57:a9:3d:58:8a:e8:93:3c:6e:d6:48:70:a6:d2:
c8:85:06:12:9a:26:be:d5:43:df:d8:00:46:78:b6:
4f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:43:FD:53:BE:55:6C:43:C2:C6:E6:C8:A0:9A:AF:94:E0:96:44:09
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nUP9U75VbEPCxubIoJqvlOCWRAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:ce:b5:53:7a:11:43:36:38:9a:56:6b:b6:c4:28:ac:47:88:
55:40:23:a9:5c:84:e8:3e:b1:a8:68:24:f6:5a:0a:04:d9:a2:
98:0a:40:cb:4f:ef:eb:14:e1:5d:dd:d9:9b:f6:8a:40:c8:dc:
b5:39:69:6f:80:4c:2d:ba:f2:3c:54:17:26:86:8b:ab:87:13:
1b:9b:2e:66:4d:7b:bc:6a:ce:5e:d1:f6:ec:3f:54:7f:bc:b7:
8a:f5:5a:e7:f3:49:a6:9f:bc:3b:fc:f4:8d:fc:ad:ac:7c:12:
8f:c0:d3:f1:f2:55:4f:00:21:48:85:fd:88:5c:1f:12:e2:c6:
99:fd:d5:44:23:ce:ea:c8:6e:f0:44:b6:29:df:50:73:3b:38:
8a:5e:55:74:2d:73:73:99:85:9f:a6:68:f8:90:db:26:13:be:
82:24:dd:48:03:fd:8c:f1:90:d7:c6:fb:71:98:60:7c:5d:8b:
97:88:62:45:fb:8c:85:85:28:6b:00:05:4a:b6:8d:6b:7f:2b:
fd:2a:b1:8a:95:7f:ab:e7:28:54:31:ea:26:2d:83:c8:ee:b1:
55:a2:67:b0:61:32:b8:49:ad:7b:c9:63:72:ae:45:9d:3d:8e:
6c:48:3d:42:8d:2e:79:79:07:ea:a1:ce:d5:24:3b:5c:64:38:
bd:38:0a:aa
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYcqR58Dq5owFbrg0K3+elZUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzI4MjIxMjI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDQzZmQ1M2JlNTU2YzQzYzJjNmU2YzhhMDlhYWY5NGUwOTY0NDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhmFLG8JbZvIAT/1F+7CoDPc49RP
rUo0AFF+XQ71gGOOc/PYmDX/cdpiUM8KRqPIz8m0ypne9n6cGSBoMI/t8FJlJI+Q
UAMKHi2lELxUnSMPSK3EtDag+qYBOIliOPWjWggebMz0oLb5HBd5E76YWSwSRVsb
fjhRSSjk/VsZYYYBAmK6UQcJXV2TO0fatZ6dwC3q/g3fp3yuhQGLvnYmWGP1tz8b
tAB+8Uw1f3wfmBNjSLEHiGdHklRube/ottkjZ06lH7f0Ib1ruMCLQsRuT33k/ACN
HOf54gI3zMmKG27oV6k9WIrokzxu1khwptLIhQYSmia+1UPf2ABGeLZPnwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJ1D/VO+VWxDwsbmyKCar5TglkQJMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvblVQOVU3NVZiRVBDeHViSW9KcXZsT0NXUkFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJHOtVN6EUM2OJpWa7bE
KKxHiFVAI6lchOg+sahoJPZaCgTZopgKQMtP7+sU4V3d2Zv2ikDI3LU5aW+ATC26
8jxUFyaGi6uHExubLmZNe7xqzl7R9uw/VH+8t4r1WufzSaafvDv89I38rax8Eo/A
0/HyVU8AIUiF/YhcHxLixpn91UQjzurIbvBEtinfUHM7OIpeVXQtc3OZhZ+maPiQ
2yYTvoIk3UgD/YzxkNfG+3GYYHxdi5eIYkX7jIWFKGsABUq2jWt/K/0qsYqVf6vn
KFQx6iYtg8jusVWiZ7BhMrhJrXvJY3KuRZ09jmxIPUKNLnl5B+qhztUkO1xkOL04
Cqo=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:59 2025 by rpki-client