Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p9E1rcj2T3Id3zHDUVgXjgbL4d4.roa
File: p9E1rcj2T3Id3zHDUVgXjgbL4d4.roa (raw, json)
Hash identifier: B+PGz897QrbS5WEZkhZonw8h9UFExm8DMj0O0V47fKc=
Subject key identifier: A7:D1:35:AD:C8:F6:4F:72:1D:DF:31:C3:51:58:17:8E:06:CB:E1:DE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E0021052476881749931AC690AB94E7E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p9E1rcj2T3Id3zHDUVgXjgbL4d4.roa
Signing time: Thu 10 Aug 2023 15:12:58 +0000
ROA not before: Thu 10 Aug 2023 15:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e0:02:10:52:47:68:81:74:99:31:ac:69:0a:b9:4e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 15:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7d135adc8f64f721ddf31c35158178e06cbe1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f4:df:59:a5:64:4b:9f:ad:d7:4c:d0:f3:eb:
3f:81:16:0b:0b:e6:0e:70:09:7e:4a:9b:01:b3:de:
52:82:ba:9d:8b:6a:58:df:bf:ad:50:6c:1e:39:eb:
19:46:9c:49:b3:7f:a0:e9:06:8f:dc:12:77:0e:87:
9f:de:d0:c1:82:c9:fc:c7:27:4c:c7:f8:3a:d9:3c:
ac:9f:f0:73:28:b5:05:17:e1:10:5a:f8:df:a4:0e:
09:d7:87:bf:bb:5d:9a:42:a9:3a:5a:2f:4d:33:ff:
7f:a3:92:de:5b:bf:e3:ec:6b:79:4d:6b:8a:5b:35:
a7:26:8f:48:7e:61:1d:de:42:54:d5:e3:6d:91:e4:
da:bd:54:0a:31:13:20:37:6e:82:95:5c:81:f3:8a:
40:9e:30:2b:ed:42:62:84:9b:e9:a0:e7:0c:be:ae:
51:96:30:70:8c:8e:53:59:67:63:b8:4c:d8:ef:d7:
f1:84:00:87:04:08:da:9d:fc:8e:8f:68:01:a5:6f:
96:ee:83:e1:51:62:a7:d5:5f:1c:a3:5e:fd:81:aa:
a4:e0:8a:d1:17:44:40:9d:70:a5:2b:8d:fb:65:e3:
39:4b:fc:52:63:09:c0:f4:40:de:9d:1a:01:48:74:
de:60:9c:25:83:d8:cd:2c:8a:a3:cb:d5:1c:f1:4e:
27:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D1:35:AD:C8:F6:4F:72:1D:DF:31:C3:51:58:17:8E:06:CB:E1:DE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p9E1rcj2T3Id3zHDUVgXjgbL4d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:a5:bb:f4:cf:4a:3c:d4:0e:41:f0:12:f8:3d:f4:23:af:63:
94:15:21:d8:db:d1:b9:bc:b0:71:c1:29:92:01:f7:c6:ee:7d:
7c:d0:ce:55:82:79:78:2c:7c:ba:3b:b3:97:2e:02:c0:7d:07:
5f:a5:4a:b0:af:ea:09:9c:e4:a3:1b:86:c9:74:f9:d9:88:0d:
bc:ba:b5:50:72:56:11:e6:92:3f:fc:6b:c9:d1:87:88:46:9d:
90:08:c3:79:8a:1b:71:8b:d7:8b:a4:5c:b2:d8:d4:2a:d6:9e:
2a:d0:6f:99:d3:38:36:60:a0:0f:84:31:bb:f6:c4:52:dd:e9:
25:bb:00:05:f4:5d:dc:5e:03:7a:ed:c2:d7:61:88:35:81:3d:
02:d2:a6:3f:52:5f:29:6c:11:b8:0c:20:bf:c6:ff:33:59:58:
87:a9:4e:81:26:10:04:5a:c2:83:50:4c:f0:02:b7:75:23:a5:
5a:83:a9:f9:0f:6d:f1:d2:ef:35:70:d5:86:56:b2:bd:b8:f4:
fc:23:28:96:97:e3:f8:5d:73:55:6f:11:85:1a:43:e3:ab:18:
d8:b4:62:f2:da:db:41:68:ae:e4:75:2e:05:34:1b:10:fa:07:
e5:74:ed:2c:c4:21:c1:5c:4f:93:92:d7:80:aa:d8:4c:d9:12:
2e:84:04:64
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYngAhBSR2iBdJkxrGkKuU5+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODEwMTUxMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2QxMzVhZGM4ZjY0ZjcyMWRkZjMxYzM1MTU4MTc4ZTA2Y2JlMWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfTfWaVkS5+t10zQ8+s/gRYLC+YO
cAl+SpsBs95Sgrqdi2pY37+tUGweOesZRpxJs3+g6QaP3BJ3Doef3tDBgsn8xydM
x/g62Tysn/BzKLUFF+EQWvjfpA4J14e/u12aQqk6Wi9NM/9/o5LeW7/j7Gt5TWuK
WzWnJo9IfmEd3kJU1eNtkeTavVQKMRMgN26ClVyB84pAnjAr7UJihJvpoOcMvq5R
ljBwjI5TWWdjuEzY79fxhACHBAjanfyOj2gBpW+W7oPhUWKn1V8co179gaqk4IrR
F0RAnXClK437ZeM5S/xSYwnA9EDenRoBSHTeYJwlg9jNLIqjy9Uc8U4nqwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKfRNa3I9k9yHd8xw1FYF44Gy+HeMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcDlFMXJjajJUM0lkM3pIRFVWZ1hqZ2JMNGQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEylu/TPSjzUDkHwEvg9
9COvY5QVIdjb0bm8sHHBKZIB98bufXzQzlWCeXgsfLo7s5cuAsB9B1+lSrCv6gmc
5KMbhsl0+dmIDby6tVByVhHmkj/8a8nRh4hGnZAIw3mKG3GL14ukXLLY1CrWnirQ
b5nTODZgoA+EMbv2xFLd6SW7AAX0XdxeA3rtwtdhiDWBPQLSpj9SXylsEbgMIL/G
/zNZWIepToEmEARawoNQTPACt3UjpVqDqfkPbfHS7zVw1YZWsr249PwjKJaX4/hd
c1VvEYUaQ+OrGNi0YvLa20ForuR1LgU0GxD6B+V07SzEIcFcT5OS14Cq2EzZEi6E
BGQ=
-----END CERTIFICATE-----
Generated at Sat May 3 14:40:39 2025 by rpki-client