Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t1wZe5EB3NFLJUgDfy2reL7gCek.roa
File: t1wZe5EB3NFLJUgDfy2reL7gCek.roa (raw, json)
Hash identifier: bg9lnaPCYSL+PC9sm9l8fBr6I1uFyOEzN7VhwVdH1xM=
Subject key identifier: B7:5C:19:7B:91:01:DC:D1:4B:25:48:03:7F:2D:AB:78:BE:E0:09:E9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885789BE33F1B3B8C69EF6995545D8E28C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t1wZe5EB3NFLJUgDfy2reL7gCek.roa
Signing time: Fri 26 May 2023 10:10:24 +0000
ROA not before: Fri 26 May 2023 10:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:57:89:be:33:f1:b3:b8:c6:9e:f6:99:55:45:d8:e2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 26 10:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b75c197b9101dcd14b2548037f2dab78bee009e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:68:67:40:ac:90:a9:fa:ef:60:61:ba:d9:
77:b8:ec:69:32:8f:29:6b:b7:76:89:b8:66:d0:90:
0b:08:ff:95:e2:85:36:b5:56:2e:a2:b6:66:a4:c3:
a8:32:1f:9f:12:b7:d3:55:d1:3c:9a:3d:f3:80:58:
96:5f:18:b1:a8:2b:e3:26:ff:fd:50:af:e8:45:63:
72:d6:79:09:38:a6:3e:94:22:fa:27:e3:88:7c:92:
21:55:64:61:02:63:a0:06:61:35:fe:07:cf:a7:82:
6e:7c:fe:11:a6:0c:84:1a:9e:7c:7e:2c:61:c1:52:
e9:0a:4a:03:31:2a:6d:a7:0d:22:e9:3c:19:ad:c9:
b0:f0:d7:8b:4a:40:fd:8c:db:a9:b6:28:90:ce:5f:
9f:ec:18:e4:88:6c:1e:e4:e1:02:ff:84:e5:c6:eb:
2d:f8:f7:bf:0e:03:b7:30:e5:c2:d4:f1:41:6f:b9:
d4:4f:d8:a7:7c:2e:89:13:ff:9a:0f:38:a1:b5:7b:
c4:fc:24:15:f5:4c:a7:0f:49:47:ab:c2:6e:72:82:
a0:4e:13:25:37:1b:af:b8:37:f2:92:c7:ff:a6:53:
15:5a:5b:1e:2d:c7:d7:86:51:a5:5c:bd:a2:43:3d:
b0:14:cb:07:9d:af:ba:66:a2:a5:4e:c7:66:db:87:
94:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5C:19:7B:91:01:DC:D1:4B:25:48:03:7F:2D:AB:78:BE:E0:09:E9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t1wZe5EB3NFLJUgDfy2reL7gCek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:79:9d:8c:02:52:3e:11:6b:2c:e3:08:8c:9d:dc:cf:6d:4e:
b2:9e:f1:12:39:39:54:06:f4:9f:92:61:87:e2:e7:89:81:5f:
da:82:21:15:bc:9b:62:c9:4c:33:51:d3:4c:d7:cd:67:17:53:
a8:b5:99:42:c0:4e:c0:86:39:36:14:f3:69:11:b4:c5:07:5b:
65:e8:ee:fd:cf:07:64:f7:f4:09:11:47:5e:59:3d:76:e5:23:
81:5a:93:ca:56:59:21:7c:09:10:eb:7e:83:81:ce:2e:e5:89:
8d:60:8a:aa:2a:b7:07:be:8b:67:92:31:6b:25:2a:6f:8b:dd:
b7:57:bc:8b:5a:fc:2e:a3:5b:87:80:fb:8b:6f:bd:fe:bd:eb:
b1:b4:c2:58:7a:8f:3c:b4:b7:fe:ed:4e:62:cd:87:eb:bb:e1:
a4:f5:5b:69:f1:39:93:51:94:4a:58:53:10:da:df:ad:6b:7e:
b5:38:64:f3:ae:58:21:1b:c6:aa:db:52:27:32:e5:ca:42:4b:
4b:f7:a6:16:02:b6:71:ae:df:ba:3c:32:8a:6a:a3:3e:38:3f:
df:f6:06:d7:db:91:f7:08:24:3f:81:ac:54:2c:cf:e2:4f:13:
35:6f:9f:2b:9f:94:d3:22:89:0d:b1:e3:20:3a:6c:63:e2:ec:
01:8a:60:44
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhXib4z8bO4xp72mVVF2OKMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTI2MTAxMDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzVjMTk3YjkxMDFkY2QxNGIyNTQ4MDM3ZjJkYWI3OGJlZTAwOWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv39oZ0CskKn672Bhutl3uOxpMo8p
a7d2ibhm0JALCP+V4oU2tVYuorZmpMOoMh+fErfTVdE8mj3zgFiWXxixqCvjJv/9
UK/oRWNy1nkJOKY+lCL6J+OIfJIhVWRhAmOgBmE1/gfPp4JufP4RpgyEGp58fixh
wVLpCkoDMSptpw0i6TwZrcmw8NeLSkD9jNuptiiQzl+f7BjkiGwe5OEC/4Tlxust
+Pe/DgO3MOXC1PFBb7nUT9infC6JE/+aDzihtXvE/CQV9UynD0lHq8JucoKgThMl
NxuvuDfyksf/plMVWlseLcfXhlGlXL2iQz2wFMsHna+6ZqKlTsdm24eUUwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLdcGXuRAdzRSyVIA38tq3i+4AnpMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdDF3WmU1RUIzTkZMSlVnRGZ5MnJlTDdnQ2VrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIt5nYwCUj4RayzjCIyd
3M9tTrKe8RI5OVQG9J+SYYfi54mBX9qCIRW8m2LJTDNR00zXzWcXU6i1mULATsCG
OTYU82kRtMUHW2Xo7v3PB2T39AkRR15ZPXblI4Fak8pWWSF8CRDrfoOBzi7liY1g
iqoqtwe+i2eSMWslKm+L3bdXvIta/C6jW4eA+4tvvf6967G0wlh6jzy0t/7tTmLN
h+u74aT1W2nxOZNRlEpYUxDa361rfrU4ZPOuWCEbxqrbUicy5cpCS0v3phYCtnGu
37o8Mopqoz44P9/2BtfbkfcIJD+BrFQsz+JPEzVvnyuflNMiiQ2x4yA6bGPi7AGK
YEQ=
-----END CERTIFICATE-----
Generated at Thu May 1 16:04:58 2025 by rpki-client