Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/neXwM_jwmQ7N4fGKLjqvwOAxd9s.roa
File: neXwM_jwmQ7N4fGKLjqvwOAxd9s.roa (raw, json)
Hash identifier: 8lWOCqaqdpAv/fKKjEHAU2y+akq8tBCmDTHaWLEaets=
Subject key identifier: 9D:E5:F0:33:F8:F0:99:0E:CD:E1:F1:8A:2E:3A:AF:C0:E0:31:77:DB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A054123359CF06642847139804ECD7CC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/neXwM_jwmQ7N4fGKLjqvwOAxd9s.roa
Signing time: Thu 02 Mar 2023 03:18:29 +0000
ROA not before: Thu 02 Mar 2023 03:18:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a0:54:12:33:59:cf:06:64:28:47:13:98:04:ec:d7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 2 03:18:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9de5f033f8f0990ecde1f18a2e3aafc0e03177db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f9:8a:60:e9:5d:b6:f9:00:cd:b0:32:f4:f8:
cb:6b:a7:21:e8:4a:5e:fc:47:9c:1c:9e:6d:b4:df:
65:f9:8c:93:28:8d:8b:95:ef:32:f7:a5:60:e7:9d:
81:03:b3:12:99:f7:f2:1d:09:62:b6:cb:37:c8:67:
cf:3c:01:9a:42:85:80:a9:a8:57:2a:57:85:85:b5:
e6:91:28:c2:dd:82:3a:52:ad:9e:c4:5a:09:bf:0c:
6a:8f:4d:d0:5f:c9:4c:05:1e:bd:cb:87:49:86:39:
d8:b9:2e:23:63:c4:ed:01:82:15:df:5b:b5:e2:56:
be:66:b7:5c:ca:e6:e2:ab:c6:a4:2b:89:2a:75:9a:
5a:f3:29:7e:34:46:1e:3a:dd:cb:bd:3b:a1:37:83:
fc:ef:71:27:b2:ca:4c:e6:78:a8:f4:88:49:d1:89:
08:12:f8:ad:af:56:7e:ff:50:3b:a5:6c:bc:da:b4:
bc:cd:b6:95:28:c9:f6:6b:db:9c:50:61:4e:40:d0:
33:ec:d1:89:76:ed:f0:cb:8f:89:e3:a0:39:18:77:
2e:86:4f:b1:e0:b6:ee:1a:83:04:8d:76:0a:ed:69:
b0:92:25:fd:79:cb:a0:38:18:95:fc:39:72:9a:ec:
55:ce:a9:b9:8e:a6:b1:44:b0:59:f9:54:94:a4:b8:
92:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E5:F0:33:F8:F0:99:0E:CD:E1:F1:8A:2E:3A:AF:C0:E0:31:77:DB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/neXwM_jwmQ7N4fGKLjqvwOAxd9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:b3:46:a4:71:72:ca:53:5e:5e:fe:7a:6d:59:46:d6:5c:71:
90:49:17:42:9e:a5:f1:79:95:de:fe:7d:0a:64:32:a6:c5:8f:
e2:a3:1d:50:05:c3:4a:cb:41:88:17:51:35:d9:c7:3f:d2:ed:
5b:9d:2e:07:dc:de:8c:ab:22:e2:eb:0e:a9:52:46:ba:30:d4:
dd:5f:21:5c:22:1e:e9:4b:f0:5e:22:55:f6:9f:57:a5:47:e6:
6e:90:cd:b7:de:30:50:ae:d7:56:05:05:51:de:5c:b7:12:e4:
c2:1a:a2:65:20:cc:dd:e9:68:c7:78:66:1d:d8:8e:93:7f:3c:
21:e9:5f:56:69:f8:b7:61:07:7c:37:e3:a1:a7:d1:67:28:b3:
a5:79:20:cc:91:dc:7d:b7:dd:03:9c:6e:9d:b7:69:d9:e7:10:
ec:df:59:e7:44:28:91:5c:c5:1c:17:9f:75:a3:c3:c3:45:fb:
be:9d:35:3b:a5:ff:f2:01:b3:ba:d1:a8:0d:59:5d:ae:38:7b:
4f:28:a5:5a:d2:c9:46:e0:4f:13:21:70:3d:48:37:17:13:cc:
fb:0d:ee:33:b9:87:5e:ae:67:c0:2f:62:90:18:ef:0c:95:96:
a4:f2:ed:9b:dc:e8:f0:b6:ae:38:d0:be:5f:d5:15:b5:4a:5d:
e1:da:0c:00
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYagVBIzWc8GZChHE5gE7NfMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzAyMDMxODI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGU1ZjAzM2Y4ZjA5OTBlY2RlMWYxOGEyZTNhYWZjMGUwMzE3N2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvmKYOldtvkAzbAy9PjLa6ch6Epe
/EecHJ5ttN9l+YyTKI2Lle8y96Vg552BA7MSmffyHQlitss3yGfPPAGaQoWAqahX
KleFhbXmkSjC3YI6Uq2exFoJvwxqj03QX8lMBR69y4dJhjnYuS4jY8TtAYIV31u1
4la+Zrdcyubiq8akK4kqdZpa8yl+NEYeOt3LvTuhN4P873EnsspM5nio9IhJ0YkI
Evitr1Z+/1A7pWy82rS8zbaVKMn2a9ucUGFOQNAz7NGJdu3wy4+J46A5GHcuhk+x
4LbuGoMEjXYK7WmwkiX9ecugOBiV/DlymuxVzqm5jqaxRLBZ+VSUpLiSewIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJ3l8DP48JkOzeHxii46r8DgMXfbMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbmVYd01fandtUTdONGZHS0xqcXZ3T0F4ZDlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIOzRqRxcspTXl7+em1Z
RtZccZBJF0KepfF5ld7+fQpkMqbFj+KjHVAFw0rLQYgXUTXZxz/S7VudLgfc3oyr
IuLrDqlSRrow1N1fIVwiHulL8F4iVfafV6VH5m6QzbfeMFCu11YFBVHeXLcS5MIa
omUgzN3paMd4Zh3YjpN/PCHpX1Zp+LdhB3w346Gn0Wcos6V5IMyR3H233QOcbp23
adnnEOzfWedEKJFcxRwXn3Wjw8NF+76dNTul//IBs7rRqA1ZXa44e08opVrSyUbg
TxMhcD1INxcTzPsN7jO5h16uZ8AvYpAY7wyVlqTy7Zvc6PC2rjjQvl/VFbVKXeHa
DAA=
-----END CERTIFICATE-----
Generated at Thu May 1 03:33:58 2025 by rpki-client