Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/noAlLImAHlvrc8XkbPfvH8vaLZc.roa
File: noAlLImAHlvrc8XkbPfvH8vaLZc.roa (raw, json)
Hash identifier: s8JXFcLlFrLknk12y5ADkyRuGYBrKE3wZFIagdhIoiU=
Subject key identifier: 9E:80:25:2C:89:80:1E:5B:EB:73:C5:E4:6C:F7:EF:1F:CB:DA:2D:97
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187631D60C2F1860E27163E147B029DBAF9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/noAlLImAHlvrc8XkbPfvH8vaLZc.roa
Signing time: Sat 08 Apr 2023 23:04:42 +0000
ROA not before: Sat 08 Apr 2023 23:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:187:631c:f4bb/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:63:1d:60:c2:f1:86:0e:27:16:3e:14:7b:02:9d:ba:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 8 23:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e80252c89801e5beb73c5e46cf7ef1fcbda2d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:36:a7:28:53:0d:d9:81:b5:e7:22:47:fd:00:
c1:88:31:90:72:bd:96:c5:be:51:4f:7f:77:44:f2:
09:6c:e4:b5:3a:6f:b3:6a:3a:b4:86:d4:2b:40:9b:
c9:a1:60:14:5f:9c:a1:24:a7:bb:e5:6a:ea:a8:17:
ef:dc:26:86:05:29:18:c6:bc:4e:a3:8f:f7:5f:8c:
90:5f:e8:28:4d:9f:5c:7c:1a:40:7a:6f:55:c2:77:
46:c6:25:d0:3e:80:19:f7:8a:44:1c:92:31:72:cf:
84:fa:cb:79:b0:cc:76:d1:55:a4:f9:50:69:71:b7:
7d:21:31:09:34:90:40:92:64:7f:55:b1:fc:b5:63:
42:15:05:8d:ec:eb:ea:16:69:9a:f0:3e:70:04:11:
8e:26:a4:57:6e:82:b8:98:c3:0f:95:49:76:fd:70:
99:24:33:26:d4:86:63:45:c1:7d:fb:91:48:ff:83:
1a:cb:8a:9b:d4:f9:6e:7a:5b:c7:84:5a:ba:e2:5e:
a3:3b:85:4b:6e:29:bf:46:4c:d3:ba:f8:33:6a:a8:
51:5a:1b:dc:59:e5:bf:de:3d:39:73:37:96:2f:eb:
f1:ba:c7:09:d8:6c:fd:19:19:fa:d3:4f:05:85:02:
32:4d:f0:b8:0f:3b:a7:e7:e5:74:24:15:cf:65:50:
fb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:80:25:2C:89:80:1E:5B:EB:73:C5:E4:6C:F7:EF:1F:CB:DA:2D:97
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/noAlLImAHlvrc8XkbPfvH8vaLZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:6e:6e:d6:71:4d:09:28:cf:b9:de:5a:19:5a:c3:10:7d:b2:
ff:f0:ab:a0:ac:66:62:8d:65:0b:38:f6:a1:4c:03:f6:3c:1d:
81:1e:2b:55:ce:7d:37:ab:68:05:2c:4c:55:8f:64:f9:f5:77:
bf:e6:13:15:61:b9:e2:66:de:b2:b8:6b:a3:04:2b:28:34:c5:
68:c2:0e:b1:ca:57:5e:09:2f:3b:64:ed:9f:47:fc:8c:c7:27:
50:cf:65:1e:c7:ca:b5:2e:8a:5d:b1:20:d9:42:46:e5:fa:ac:
8c:66:11:60:68:1d:20:1d:d3:b8:57:be:77:cf:73:fb:99:53:
f0:9f:29:4f:dd:af:53:ef:76:89:7a:2f:cd:84:bf:30:0e:8c:
63:c8:c0:a6:6d:32:c5:f0:51:c3:3b:de:91:89:04:5e:41:81:
e9:51:9a:44:41:b8:5e:e0:4d:09:d0:83:76:fd:bb:42:31:3a:
a4:27:b9:e9:1a:11:29:88:28:23:8a:f5:0c:b0:6d:69:a6:00:
20:89:5d:0a:6f:8e:e7:f2:b3:20:4b:09:64:ed:95:cc:ec:c8:
84:92:eb:6d:14:42:55:14:d2:64:3f:53:bf:3b:f8:9d:4b:a7:
86:4b:13:59:69:25:ac:86:b1:8d:95:dc:06:86:c9:83:6e:b4:
5b:bb:6a:f0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdjHWDC8YYOJxY+FHsCnbr5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDA4MjMwNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTgwMjUyYzg5ODAxZTViZWI3M2M1ZTQ2Y2Y3ZWYxZmNiZGEyZDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjanKFMN2YG15yJH/QDBiDGQcr2W
xb5RT393RPIJbOS1Om+zajq0htQrQJvJoWAUX5yhJKe75WrqqBfv3CaGBSkYxrxO
o4/3X4yQX+goTZ9cfBpAem9VwndGxiXQPoAZ94pEHJIxcs+E+st5sMx20VWk+VBp
cbd9ITEJNJBAkmR/VbH8tWNCFQWN7OvqFmma8D5wBBGOJqRXboK4mMMPlUl2/XCZ
JDMm1IZjRcF9+5FI/4May4qb1PluelvHhFq64l6jO4VLbim/RkzTuvgzaqhRWhvc
WeW/3j05czeWL+vxuscJ2Gz9GRn6008FhQIyTfC4Dzun5+V0JBXPZVD7tQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJ6AJSyJgB5b63PF5Gz37x/L2i2XMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbm9BbExJbUFIbHZyYzhYa2JQZnZIOHZhTFpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJFubtZxTQkoz7neWhla
wxB9sv/wq6CsZmKNZQs49qFMA/Y8HYEeK1XOfTeraAUsTFWPZPn1d7/mExVhueJm
3rK4a6MEKyg0xWjCDrHKV14JLztk7Z9H/IzHJ1DPZR7HyrUuil2xINlCRuX6rIxm
EWBoHSAd07hXvnfPc/uZU/CfKU/dr1Pvdol6L82EvzAOjGPIwKZtMsXwUcM73pGJ
BF5BgelRmkRBuF7gTQnQg3b9u0IxOqQnuekaESmIKCOK9QywbWmmACCJXQpvjufy
syBLCWTtlczsyISS620UQlUU0mQ/U787+J1Lp4ZLE1lpJayGsY2V3AaGyYNutFu7
avA=
-----END CERTIFICATE-----
Generated at Thu May 1 02:59:13 2025 by rpki-client