Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y0Ko2zi-fwlQL0zs4GFA75pNY08.roa
File: y0Ko2zi-fwlQL0zs4GFA75pNY08.roa (raw, json)
Hash identifier: /lsxUMLYxt+fHGtA+vij4i8GMHVwyQS1K9F/dMk1mBI=
Subject key identifier: CB:42:A8:DB:38:BE:7F:09:50:2F:4C:EC:E0:61:40:EF:9A:4D:63:4F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018819F50A856836BCED6A659DDC6A972F7B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y0Ko2zi-fwlQL0zs4GFA75pNY08.roa
Signing time: Sun 14 May 2023 11:11:09 +0000
ROA not before: Sun 14 May 2023 11:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:19:f5:0a:85:68:36:bc:ed:6a:65:9d:dc:6a:97:2f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 14 11:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb42a8db38be7f09502f4cece06140ef9a4d634f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5e:05:ba:c5:a9:23:59:34:3b:31:87:20:24:
f0:fd:49:75:47:45:c9:6e:a2:c0:ae:be:c7:89:fd:
ef:08:27:22:73:25:f5:97:c3:43:63:d4:01:ac:c6:
16:d1:95:a6:f9:18:37:33:03:77:a0:ce:cc:c3:f4:
9a:68:48:ec:d9:97:6b:0d:9e:df:24:c3:e9:16:24:
d3:8f:f8:81:36:06:03:0c:ba:c1:4d:d7:8a:8d:b4:
ea:1b:58:96:e7:c4:72:15:51:a9:5c:63:f5:ad:36:
a8:10:23:b8:86:eb:6d:86:da:df:37:74:ac:d6:03:
3e:98:9d:01:40:3e:70:c0:ff:8c:39:f2:ce:89:68:
42:27:0f:73:1c:19:cf:bc:12:07:aa:36:57:b8:8f:
db:a0:ac:a2:42:ce:87:77:85:0c:d8:ed:3e:e9:4b:
11:2b:eb:83:86:c5:93:c0:8a:3f:91:d5:6c:da:6d:
a3:b4:dc:63:64:1b:3d:c3:99:ed:68:c8:9c:66:b8:
36:a9:ab:39:91:7e:95:0b:88:1a:56:88:d5:8d:fb:
bb:40:08:53:52:44:55:d4:0e:99:56:83:79:25:03:
d0:72:52:33:ce:1d:8f:2a:f1:2f:95:6e:db:de:fb:
b7:f5:85:49:6f:d6:f6:a3:92:50:89:f5:cd:ff:ab:
6c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:42:A8:DB:38:BE:7F:09:50:2F:4C:EC:E0:61:40:EF:9A:4D:63:4F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y0Ko2zi-fwlQL0zs4GFA75pNY08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:9c:11:b8:e1:20:36:fb:7f:08:a9:8f:c5:dd:f4:73:27:7a:
f0:b8:37:74:a3:40:45:69:bf:2a:b8:10:92:62:35:e2:8f:13:
8a:d5:34:cb:13:8b:3e:61:11:76:1e:5c:27:ac:a2:4e:8c:6e:
f1:c9:d4:8d:48:79:d3:f8:f0:1d:62:a0:e8:4f:cb:25:b2:27:
f3:35:ac:51:46:b5:23:9e:59:34:1e:29:20:09:51:34:79:09:
09:f0:56:e5:c1:75:2d:42:7b:6e:0c:ca:fa:de:f2:65:f2:ed:
ea:b9:f2:f6:dc:ba:e8:31:c5:61:9d:1f:cf:50:f7:6c:ca:dc:
fc:4b:ad:74:ea:f5:85:14:5c:1f:a4:36:42:d8:62:e6:56:82:
6b:8c:aa:7c:04:dc:93:0b:fd:85:1e:91:4b:e0:12:f0:8f:9c:
c3:a3:69:44:d3:bb:af:45:01:49:8d:25:4c:e1:71:a7:0c:6c:
99:16:4f:b3:98:9f:43:74:77:fe:a0:c2:3e:bc:b9:54:e9:2a:
4f:3b:b7:28:1f:94:62:b3:cc:9e:f3:7c:dc:96:3f:b6:39:aa:
75:8e:86:53:14:2d:86:cb:9f:d0:61:c6:5a:e0:d6:7d:a4:b1:
d8:34:ca:a4:8c:31:6b:e2:80:c8:6a:7f:4a:73:70:3b:b1:62:
92:0f:23:e4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYgZ9QqFaDa87Wplndxqly97MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTE0MTExMTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjQyYThkYjM4YmU3ZjA5NTAyZjRjZWNlMDYxNDBlZjlhNGQ2MzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl4FusWpI1k0OzGHICTw/Ul1R0XJ
bqLArr7Hif3vCCcicyX1l8NDY9QBrMYW0ZWm+Rg3MwN3oM7Mw/SaaEjs2ZdrDZ7f
JMPpFiTTj/iBNgYDDLrBTdeKjbTqG1iW58RyFVGpXGP1rTaoECO4hutthtrfN3Ss
1gM+mJ0BQD5wwP+MOfLOiWhCJw9zHBnPvBIHqjZXuI/boKyiQs6Hd4UM2O0+6UsR
K+uDhsWTwIo/kdVs2m2jtNxjZBs9w5ntaMicZrg2qas5kX6VC4gaVojVjfu7QAhT
UkRV1A6ZVoN5JQPQclIzzh2PKvEvlW7b3vu39YVJb9b2o5JQifXN/6tscQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMtCqNs4vn8JUC9M7OBhQO+aTWNPMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveTBLbzJ6aS1md2xRTDB6czRHRkE3NXBOWTA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKucEbjhIDb7fwipj8Xd
9HMnevC4N3SjQEVpvyq4EJJiNeKPE4rVNMsTiz5hEXYeXCesok6MbvHJ1I1IedP4
8B1ioOhPyyWyJ/M1rFFGtSOeWTQeKSAJUTR5CQnwVuXBdS1Ce24Myvre8mXy7eq5
8vbcuugxxWGdH89Q92zK3PxLrXTq9YUUXB+kNkLYYuZWgmuMqnwE3JML/YUekUvg
EvCPnMOjaUTTu69FAUmNJUzhcacMbJkWT7OYn0N0d/6gwj68uVTpKk87tygflGKz
zJ7zfNyWP7Y5qnWOhlMULYbLn9Bhxlrg1n2ksdg0yqSMMWvigMhqf0pzcDuxYpIP
I+Q=
-----END CERTIFICATE-----
Generated at Thu May 1 00:40:57 2025 by rpki-client