Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0sZx95F1UtFIlKlzj6_X6uUuZSo.roa
File: 0sZx95F1UtFIlKlzj6_X6uUuZSo.roa (raw, json)
Hash identifier: 0uFr47p0Dvxz0tr/6uJv6NSbFrqF0skSVQDIFj0IA9c=
Subject key identifier: D2:C6:71:F7:91:75:52:D1:48:94:A9:73:8F:AF:D7:EA:E5:2E:65:2A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018973DB1D0B70A6FF909D50CE71F78A3BAB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0sZx95F1UtFIlKlzj6_X6uUuZSo.roa
Signing time: Thu 20 Jul 2023 15:11:26 +0000
ROA not before: Thu 20 Jul 2023 15:11:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:73:db:1d:0b:70:a6:ff:90:9d:50:ce:71:f7:8a:3b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 15:11:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2c671f7917552d14894a9738fafd7eae52e652a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:08:fa:cf:15:97:6b:ab:3b:75:74:3e:f5:
8e:e4:37:cc:22:a0:e2:b4:e6:be:bc:ad:84:51:e2:
3a:a7:7d:e5:e6:5c:b9:c6:1a:a7:e7:85:03:f2:79:
03:53:d5:6d:69:2d:d6:93:b6:70:4f:57:a0:13:01:
90:c2:da:e4:2f:39:a0:45:7e:08:73:b6:e3:02:87:
b8:2e:89:15:35:81:f5:63:bb:20:a8:a5:90:3c:cd:
37:bc:22:d5:d4:bc:8c:8d:6c:67:4f:77:f3:33:d8:
97:ee:00:95:a9:66:35:04:5a:67:0b:23:38:83:6f:
70:36:d1:9b:9d:58:35:33:3c:cf:cf:fb:bd:19:73:
22:22:39:ed:ef:85:a4:c0:b6:ce:cf:96:44:05:f5:
5b:4a:39:3b:58:77:d9:48:d6:6a:78:dc:27:36:1d:
c3:c7:b9:9b:6a:e6:18:ee:ae:19:e3:de:45:7f:c8:
5d:62:d3:60:85:9c:60:3e:01:c2:00:03:95:51:a9:
c2:f7:de:78:6b:8e:e0:ac:84:2e:12:7f:dd:bc:e3:
d3:e9:51:7f:a3:fc:51:c3:0e:69:cb:53:97:be:3d:
b9:8f:c8:2d:be:fd:78:4d:2f:83:07:90:01:9b:e7:
42:c6:2f:fc:85:fa:c5:8b:da:e5:b9:71:40:52:39:
d1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C6:71:F7:91:75:52:D1:48:94:A9:73:8F:AF:D7:EA:E5:2E:65:2A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0sZx95F1UtFIlKlzj6_X6uUuZSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:39:ee:47:74:c3:7e:a5:7b:9d:2c:68:9b:c7:92:37:f1:30:
59:15:5d:dc:83:5e:e3:74:a5:69:e5:0f:36:a4:84:da:8a:b9:
0e:5b:9e:4d:72:cd:6c:02:d2:e1:56:94:73:73:f3:1a:21:52:
bb:0a:ec:b5:97:05:69:7f:b1:77:d8:49:5d:d7:a3:b7:08:64:
d1:ff:45:57:23:b9:53:3c:37:55:27:69:22:65:57:4b:bc:37:
e4:be:10:6a:71:72:3c:0b:32:f7:e2:40:26:c5:06:39:37:c9:
4f:df:7a:a9:13:82:2e:93:c7:93:4f:55:1e:c0:90:7a:69:c5:
e7:83:41:3f:0d:09:b0:9e:af:b6:1d:a8:60:35:d1:77:df:58:
47:09:ef:75:00:32:a8:5b:7d:dd:0a:4c:c3:42:90:ce:41:9b:
6b:b2:b8:92:ac:74:8c:b6:1f:bd:dd:8b:c8:45:1f:3f:30:98:
7b:b6:32:56:b9:9c:be:bb:8f:b4:b1:29:66:67:d2:c2:80:ba:
7d:58:a4:e3:ba:6d:13:35:ce:c6:88:59:30:81:f6:41:25:95:
15:ad:25:c0:0d:12:5e:f7:f1:d8:5b:60:b4:77:69:73:67:3c:
36:c7:84:5f:d8:16:9b:df:0a:f1:55:82:c1:db:7d:8d:e4:cb:
dd:31:23:60
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlz2x0LcKb/kJ1QznH3ijurMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzIwMTUxMTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmM2NzFmNzkxNzU1MmQxNDg5NGE5NzM4ZmFmZDdlYWU1MmU2NTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ8I+s8Vl2urO3V0PvWO5DfMIqDi
tOa+vK2EUeI6p33l5ly5xhqn54UD8nkDU9VtaS3Wk7ZwT1egEwGQwtrkLzmgRX4I
c7bjAoe4LokVNYH1Y7sgqKWQPM03vCLV1LyMjWxnT3fzM9iX7gCVqWY1BFpnCyM4
g29wNtGbnVg1MzzPz/u9GXMiIjnt74WkwLbOz5ZEBfVbSjk7WHfZSNZqeNwnNh3D
x7mbauYY7q4Z495Ff8hdYtNghZxgPgHCAAOVUanC9954a47grIQuEn/dvOPT6VF/
o/xRww5py1OXvj25j8gtvv14TS+DB5ABm+dCxi/8hfrFi9rluXFAUjnRFwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNLGcfeRdVLRSJSpc4+v1+rlLmUqMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMHNaeDk1RjFVdEZJbEtsemo2X1g2dVV1WlNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIY57kd0w36le50saJvH
kjfxMFkVXdyDXuN0pWnlDzakhNqKuQ5bnk1yzWwC0uFWlHNz8xohUrsK7LWXBWl/
sXfYSV3Xo7cIZNH/RVcjuVM8N1UnaSJlV0u8N+S+EGpxcjwLMvfiQCbFBjk3yU/f
eqkTgi6Tx5NPVR7AkHppxeeDQT8NCbCer7YdqGA10XffWEcJ73UAMqhbfd0KTMNC
kM5Bm2uyuJKsdIy2H73di8hFHz8wmHu2Mla5nL67j7SxKWZn0sKAun1YpOO6bRM1
zsaIWTCB9kEllRWtJcANEl738dhbYLR3aXNnPDbHhF/YFpvfCvFVgsHbfY3ky90x
I2A=
-----END CERTIFICATE-----
Generated at Tue Jun 10 11:06:39 2025 by rpki-client