Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/urOx5dVkDdtXkd-KYl1ne4prr_Q.roa
File: urOx5dVkDdtXkd-KYl1ne4prr_Q.roa (raw, json)
Hash identifier: O5yv74HJDOcwJui2TAmOvhKhkoVMHUG2lHvL6pmHiDk=
Subject key identifier: BA:B3:B1:E5:D5:64:0D:DB:57:91:DF:8A:62:5D:67:7B:8A:6B:AF:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01877C06EE803C5F64992D6F9BA72C13F679
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/urOx5dVkDdtXkd-KYl1ne4prr_Q.roa
Signing time: Thu 13 Apr 2023 19:10:41 +0000
ROA not before: Thu 13 Apr 2023 19:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7c:06:ee:80:3c:5f:64:99:2d:6f:9b:a7:2c:13:f6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 13 19:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bab3b1e5d5640ddb5791df8a625d677b8a6baff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:12:45:fb:ee:b6:09:86:bc:c8:5b:ca:d7:b0:
70:51:e0:82:e7:06:46:78:d8:3d:b6:be:9e:2c:ac:
18:18:91:20:b6:a1:b3:86:7e:7a:1b:3f:43:a5:e7:
6f:2d:c3:12:77:03:3e:c0:c9:39:c2:30:c8:09:cd:
b4:d7:a0:9e:7d:71:ee:22:d4:95:05:8f:e0:1c:0b:
d1:2c:41:f9:25:ce:dd:2e:9c:a9:e3:50:ed:54:9a:
7c:d0:eb:4a:cf:0c:68:8c:b4:f9:e8:05:ee:a7:f3:
9f:9b:bf:b6:64:fd:f4:ef:90:42:84:5f:5e:87:1e:
81:a6:51:27:0c:33:b4:da:6d:08:fa:df:ee:68:74:
2f:57:5d:b8:ce:05:aa:bd:eb:2c:e1:60:61:38:79:
34:e3:b7:4f:93:31:84:4d:f6:38:f5:39:6c:68:0c:
70:47:b5:f2:cb:be:30:05:47:0d:42:5c:6a:da:f6:
d1:ba:04:18:be:0c:c3:34:44:04:60:8a:24:50:03:
8a:9d:31:ad:14:a2:d8:b5:9c:7b:ed:45:ab:a1:6f:
4c:10:a3:98:45:8a:f8:55:2b:1f:f3:79:43:71:51:
c0:a5:14:6c:74:90:7a:76:e2:f5:a3:a6:0e:2b:fb:
e8:77:c8:58:b8:d1:73:1e:30:e3:bd:ea:69:7f:9c:
3f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B3:B1:E5:D5:64:0D:DB:57:91:DF:8A:62:5D:67:7B:8A:6B:AF:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/urOx5dVkDdtXkd-KYl1ne4prr_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:26:1a:7d:57:d3:a8:1b:d6:ce:9f:5e:7d:de:ad:32:43:16:
0e:be:30:fa:54:7d:82:bb:3e:e8:27:2a:a2:d7:04:8d:90:61:
77:51:6b:b4:28:97:0b:cd:ee:29:b1:cd:2a:ff:e9:c5:8b:9e:
1d:7f:cd:34:ff:c8:6f:6f:fb:ea:fc:f1:b1:28:47:23:c3:0c:
64:5c:ea:46:47:33:f1:47:b6:74:c5:ba:ee:b4:7a:96:0f:5f:
bf:ec:ac:5c:48:a6:d7:fb:93:40:19:fa:28:92:cd:e0:f0:26:
b9:8f:47:df:92:8a:a7:02:40:4d:3e:8c:f2:c4:e8:76:3b:88:
62:08:d5:81:0b:40:80:a7:6e:07:cc:97:59:c1:1e:ce:c6:9c:
eb:6e:d4:a2:e9:aa:f7:77:67:02:38:d9:f6:dd:13:3a:61:80:
45:a6:18:12:3a:d0:b9:74:55:10:99:c4:9b:dc:a0:67:77:e4:
7a:08:36:09:8e:8f:35:f8:46:ff:8a:59:3e:d5:0d:da:51:0b:
e6:07:1a:fd:c5:88:15:87:9d:31:d4:2d:ed:20:8d:10:a7:c8:
5c:d4:16:a1:07:d4:b8:3b:a1:56:39:68:36:f1:92:39:af:0c:
00:36:79:01:e6:48:aa:8d:99:45:e9:d7:4f:76:54:6c:16:61:
99:e4:df:69
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYd8Bu6APF9kmS1vm6csE/Z5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDEzMTkxMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWIzYjFlNWQ1NjQwZGRiNTc5MWRmOGE2MjVkNjc3YjhhNmJhZmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhJF++62CYa8yFvK17BwUeCC5wZG
eNg9tr6eLKwYGJEgtqGzhn56Gz9DpedvLcMSdwM+wMk5wjDICc2016CefXHuItSV
BY/gHAvRLEH5Jc7dLpyp41DtVJp80OtKzwxojLT56AXup/Ofm7+2ZP3075BChF9e
hx6BplEnDDO02m0I+t/uaHQvV124zgWqvess4WBhOHk047dPkzGETfY49TlsaAxw
R7Xyy74wBUcNQlxq2vbRugQYvgzDNEQEYIokUAOKnTGtFKLYtZx77UWroW9MEKOY
RYr4VSsf83lDcVHApRRsdJB6duL1o6YOK/vod8hYuNFzHjDjveppf5w//wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLqzseXVZA3bV5HfimJdZ3uKa6/0MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdXJPeDVkVmtEZHRYa2QtS1lsMW5lNHBycl9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB4mGn1X06gb1s6fXn3e
rTJDFg6+MPpUfYK7PugnKqLXBI2QYXdRa7QolwvN7imxzSr/6cWLnh1/zTT/yG9v
++r88bEoRyPDDGRc6kZHM/FHtnTFuu60epYPX7/srFxIptf7k0AZ+iiSzeDwJrmP
R9+SiqcCQE0+jPLE6HY7iGII1YELQICnbgfMl1nBHs7GnOtu1KLpqvd3ZwI42fbd
EzphgEWmGBI60Ll0VRCZxJvcoGd35HoINgmOjzX4Rv+KWT7VDdpRC+YHGv3FiBWH
nTHULe0gjRCnyFzUFqEH1Lg7oVY5aDbxkjmvDAA2eQHmSKqNmUXp1092VGwWYZnk
32k=
-----END CERTIFICATE-----
Generated at Thu May 1 07:13:34 2025 by rpki-client