Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-XejTPJo3z9HdTC4KFg12m8BCgM.roa
File: 1-XejTPJo3z9HdTC4KFg12m8BCgM.roa (raw, json)
Hash identifier: 0FOoRIfYJyGI4VtsxnZBPzurX5npKKbOeUHGkKAmHys=
Subject key identifier: F9:77:A3:4C:F2:68:DF:3F:47:75:30:B8:28:58:35:DA:6F:01:0A:03
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B881F14676D37E1E98A2FCF8DFD87469
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-XejTPJo3z9HdTC4KFg12m8BCgM.roa
Signing time: Wed 14 Jun 2023 06:05:03 +0000
ROA not before: Wed 14 Jun 2023 06:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:188:b881:3710/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b8:81:f1:46:76:d3:7e:1e:98:a2:fc:f8:df:d8:74:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 14 06:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f977a34cf268df3f477530b8285835da6f010a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:87:c4:7e:c1:25:70:7e:3b:7a:76:7a:30:6b:
88:10:05:84:1d:6a:83:17:4e:3f:0a:17:0d:c7:3c:
15:c6:6c:86:0c:c2:73:af:71:4e:31:c0:e9:1b:ef:
8a:e4:ef:27:1c:ec:1c:bc:83:de:e3:2f:9e:a7:c2:
78:e2:ce:47:49:c3:c3:99:e4:b3:6e:59:96:8a:d9:
6b:3e:3e:0f:0b:67:fa:74:f4:c9:b5:2e:6a:00:32:
e0:22:c6:3d:21:60:3c:67:c0:4c:e3:25:2f:24:87:
1a:aa:da:a9:e2:51:17:77:93:79:c4:e3:b2:d4:e8:
6f:9b:c2:db:0c:47:25:84:d0:c7:2a:77:1e:ce:86:
52:38:f7:cf:5f:60:01:8c:3b:63:56:fa:06:b8:f6:
de:3f:a8:f9:e1:a5:af:db:b2:ec:cd:05:41:56:48:
7a:c0:72:7c:b2:3a:54:63:dd:58:98:0a:c7:cc:6b:
54:f6:60:74:80:af:eb:1e:16:75:56:7d:55:15:82:
30:17:de:c6:be:5e:a3:d8:88:ef:02:55:06:ec:ac:
d4:2c:68:d1:7a:7e:a3:42:c4:2b:1d:d0:27:9f:58:
22:cf:58:ec:c8:24:94:44:c0:f2:65:7d:a9:96:f7:
41:01:ce:20:5e:41:dd:d2:79:7d:f7:4f:18:ee:aa:
3c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:77:A3:4C:F2:68:DF:3F:47:75:30:B8:28:58:35:DA:6F:01:0A:03
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-XejTPJo3z9HdTC4KFg12m8BCgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:2c:5c:f7:b2:b6:63:66:63:73:0f:f1:01:e8:ca:e6:1f:b5:
e3:83:42:e4:7e:c2:24:72:f0:a8:db:b7:15:0d:27:8d:8a:ee:
4a:27:6b:75:fe:90:74:ad:5b:1b:af:9f:8d:8c:4e:1c:5a:f1:
c1:19:c0:75:5d:41:29:58:91:4f:dd:2f:0b:8e:ce:d5:fe:a9:
95:4b:37:68:27:b3:c9:05:5d:09:25:b1:35:72:e0:e2:18:d1:
0d:46:61:79:e2:96:b6:b4:a9:ef:7b:53:6d:77:85:5d:35:0a:
58:2a:87:bd:d8:09:e2:d3:68:32:e5:5f:bf:44:3a:be:ce:b3:
c8:95:75:f9:a8:ff:c6:dd:d5:c8:17:59:ee:df:c2:02:b7:6b:
a4:6a:58:92:99:84:e2:08:d9:6a:e5:5a:e1:25:77:96:a0:ed:
77:85:a3:61:91:d8:c5:f8:44:8e:60:73:e9:63:69:bf:59:55:
cf:f4:c8:f7:99:75:d1:f2:78:d5:b7:38:45:d0:ca:52:45:0f:
8d:55:51:49:ac:72:b7:ba:3c:d1:cb:78:92:02:86:f6:63:60:
54:86:4a:12:0f:75:64:43:1b:35:db:be:3c:cd:49:96:c6:92:
f5:9c:79:c6:6d:df:05:5e:cb:4c:08:ca:b4:fa:cf:2e:7f:b1:
f6:9c:01:96
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYi4gfFGdtN+Hpii/Pjf2HRpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjE0MDYwNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTc3YTM0Y2YyNjhkZjNmNDc3NTMwYjgyODU4MzVkYTZmMDEwYTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYfEfsElcH47enZ6MGuIEAWEHWqD
F04/ChcNxzwVxmyGDMJzr3FOMcDpG++K5O8nHOwcvIPe4y+ep8J44s5HScPDmeSz
blmWitlrPj4PC2f6dPTJtS5qADLgIsY9IWA8Z8BM4yUvJIcaqtqp4lEXd5N5xOOy
1Ohvm8LbDEclhNDHKncezoZSOPfPX2ABjDtjVvoGuPbeP6j54aWv27LszQVBVkh6
wHJ8sjpUY91YmArHzGtU9mB0gK/rHhZ1Vn1VFYIwF97Gvl6j2IjvAlUG7KzULGjR
en6jQsQrHdAnn1giz1jsyCSURMDyZX2plvdBAc4gXkHd0nl9908Y7qo8zwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPl3o0zyaN8/R3UwuChYNdpvAQoDMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMS1YZWpUUEpvM3o5SGRUQzRLRmcxMm04QkNnTS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFh
Ni8xL2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQCdLFz3srZjZmNzD/EB
6MrmH7Xjg0LkfsIkcvCo27cVDSeNiu5KJ2t1/pB0rVsbr5+NjE4cWvHBGcB1XUEp
WJFP3S8Ljs7V/qmVSzdoJ7PJBV0JJbE1cuDiGNENRmF54pa2tKnve1Ntd4VdNQpY
Koe92Ani02gy5V+/RDq+zrPIlXX5qP/G3dXIF1nu38ICt2ukaliSmYTiCNlq5Vrh
JXeWoO13haNhkdjF+ESOYHPpY2m/WVXP9Mj3mXXR8njVtzhF0MpSRQ+NVVFJrHK3
ujzRy3iSAob2Y2BUhkoSD3VkQxs12748zUmWxpL1nHnGbd8FXstMCMq0+s8uf7H2
nAGW
-----END CERTIFICATE-----
Generated at Fri Jun 13 01:39:12 2025 by rpki-client