Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p_4D-At4UHGSFEopcEGCrjETAxk.roa
File: p_4D-At4UHGSFEopcEGCrjETAxk.roa (raw, json)
Hash identifier: NzucEouAnLpdHnL2XNfAErSfTMN+BFW/WHeL82H1D1U=
Subject key identifier: A7:FE:03:F8:0B:78:50:71:92:14:4A:29:70:41:82:AE:31:13:03:19
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188DC9223822433E04169E02C2A8F480939
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p_4D-At4UHGSFEopcEGCrjETAxk.roa
Signing time: Wed 21 Jun 2023 06:09:04 +0000
ROA not before: Wed 21 Jun 2023 06:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dc:92:23:82:24:33:e0:41:69:e0:2c:2a:8f:48:09:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 21 06:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7fe03f80b78507192144a29704182ae31130319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:af:71:7a:d9:1c:bc:8a:fb:16:7d:6e:f7:05:
4e:73:30:f1:fd:59:68:da:bd:d7:c1:7e:03:b9:98:
f9:79:61:94:5f:36:3f:39:7c:9e:dd:30:60:64:66:
e4:ae:79:44:ed:ff:02:fd:82:9f:1f:da:71:40:0c:
6c:2e:23:1e:da:86:12:69:18:a1:29:67:29:2d:a2:
88:94:65:86:02:f7:40:a1:0e:50:79:bf:8a:f2:9f:
c3:e7:16:1f:35:94:7e:01:b3:c9:9b:6a:b2:93:ae:
0d:0e:f0:28:39:c2:8a:41:5d:eb:c1:b2:30:4d:a5:
bd:00:bf:71:d5:6b:99:8a:03:b9:51:94:88:17:53:
02:c3:2d:fb:b2:48:64:f7:32:21:ff:e6:1c:47:a2:
7a:c4:ff:6e:79:c6:35:94:36:5d:d9:8f:1d:50:7f:
4f:bb:b1:fa:34:46:c1:db:7f:f5:c5:e9:3d:52:a6:
c7:57:09:8d:73:f7:35:b9:a0:af:a1:95:97:a8:da:
f4:43:35:0c:d0:85:30:ba:94:27:41:1d:78:42:04:
66:6d:38:aa:c2:a4:d3:a8:f9:ad:38:39:d6:c2:fe:
18:ca:20:b1:34:0b:12:f9:2f:0e:1f:d8:50:59:41:
2a:d3:cf:b2:1e:6c:20:2f:48:e3:94:c9:79:68:4d:
7c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FE:03:F8:0B:78:50:71:92:14:4A:29:70:41:82:AE:31:13:03:19
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p_4D-At4UHGSFEopcEGCrjETAxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:2c:e2:c4:0c:b8:cf:0a:cb:46:e0:5e:59:2e:46:18:f7:07:
24:45:b4:96:99:7e:a1:1f:37:14:67:66:1f:b0:0a:f5:79:cd:
b4:c5:36:ac:dd:7b:08:0d:80:98:98:e7:b8:2a:88:66:40:50:
13:d6:f7:98:4e:99:74:90:0d:09:0f:a0:e4:06:a6:08:86:ce:
85:d1:df:64:13:29:01:65:b6:e3:6e:2a:7b:f7:ed:64:d6:05:
ab:82:d1:7f:10:88:e5:3e:ca:a0:8b:46:8f:6e:92:46:19:41:
2f:eb:07:d3:2e:41:8f:22:5e:fa:77:ac:19:9a:46:d2:6a:bd:
62:49:ed:99:64:a4:ae:45:49:46:5e:70:19:73:c4:9e:c0:28:
2e:28:11:60:4f:9b:21:7f:61:10:68:72:6e:c0:27:49:69:68:
65:3f:5f:3a:c2:63:7c:1e:18:30:59:df:c6:20:6a:df:55:cd:
87:22:52:c4:ed:db:43:cd:a1:ba:12:b3:36:57:18:f8:9b:cd:
a6:bf:13:d2:05:11:45:e1:a7:88:91:77:2c:2f:ff:fc:1f:ce:
61:78:b5:d9:74:9e:cf:60:8f:6c:0c:72:4a:f4:65:78:a8:59:
a0:63:4e:b1:6d:6e:4b:81:05:55:59:58:b1:30:f2:c2:ca:25:
e3:b1:e9:67
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYjckiOCJDPgQWngLCqPSAk5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjIxMDYwOTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2ZlMDNmODBiNzg1MDcxOTIxNDRhMjk3MDQxODJhZTMxMTMwMzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiK9xetkcvIr7Fn1u9wVOczDx/Vlo
2r3XwX4DuZj5eWGUXzY/OXye3TBgZGbkrnlE7f8C/YKfH9pxQAxsLiMe2oYSaRih
KWcpLaKIlGWGAvdAoQ5Qeb+K8p/D5xYfNZR+AbPJm2qyk64NDvAoOcKKQV3rwbIw
TaW9AL9x1WuZigO5UZSIF1MCwy37skhk9zIh/+YcR6J6xP9uecY1lDZd2Y8dUH9P
u7H6NEbB23/1xek9UqbHVwmNc/c1uaCvoZWXqNr0QzUM0IUwupQnQR14QgRmbTiq
wqTTqPmtODnWwv4YyiCxNAsS+S8OH9hQWUEq08+yHmwgL0jjlMl5aE18UwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKf+A/gLeFBxkhRKKXBBgq4xEwMZMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcF80RC1BdDRVSEdTRkVvcGNFR0NyakVUQXhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFEs4sQMuM8Ky0bgXlku
Rhj3ByRFtJaZfqEfNxRnZh+wCvV5zbTFNqzdewgNgJiY57gqiGZAUBPW95hOmXSQ
DQkPoOQGpgiGzoXR32QTKQFltuNuKnv37WTWBauC0X8QiOU+yqCLRo9ukkYZQS/r
B9MuQY8iXvp3rBmaRtJqvWJJ7ZlkpK5FSUZecBlzxJ7AKC4oEWBPmyF/YRBocm7A
J0lpaGU/XzrCY3weGDBZ38Ygat9VzYciUsTt20PNoboSszZXGPibzaa/E9IFEUXh
p4iRdywv//wfzmF4tdl0ns9gj2wMckr0ZXioWaBjTrFtbkuBBVVZWLEw8sLKJeOx
6Wc=
-----END CERTIFICATE-----
Generated at Thu May 1 05:34:13 2025 by rpki-client