Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-ytTjmhaQYIYoQ1MwBbMF9Oegss.roa
File: 1-ytTjmhaQYIYoQ1MwBbMF9Oegss.roa (raw, json)
Hash identifier: e5XFD0+1pgRXz+lDSOxAKPDB8ShEv/Unb5jnwPX9Hp8=
Subject key identifier: FB:2B:53:8E:68:5A:41:82:18:A1:0D:4C:C0:16:CC:17:D3:9E:82:CB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B24D848D9CE4DE34954DD18D35A85AAE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-ytTjmhaQYIYoQ1MwBbMF9Oegss.roa
Signing time: Tue 13 Jun 2023 01:10:04 +0000
ROA not before: Tue 13 Jun 2023 01:10:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b2:4d:84:8d:9c:e4:de:34:95:4d:d1:8d:35:a8:5a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 13 01:10:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb2b538e685a418218a10d4cc016cc17d39e82cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:77:53:18:ea:20:47:d3:5d:57:33:1f:e6:79:
e3:a5:24:b9:e9:9f:34:5c:5f:60:b2:38:d0:fe:5f:
31:08:26:9c:90:4e:be:f5:0a:39:49:17:69:ae:b1:
0f:19:35:10:ac:1a:66:0c:f1:9c:20:09:16:aa:55:
ee:96:9e:ae:cc:53:9e:ee:0e:94:20:54:e2:10:d0:
fc:09:ec:4f:1f:0f:c4:c9:fd:12:d1:8f:3f:1f:ae:
c9:48:7e:0d:68:bb:5f:d9:1b:52:19:ef:d7:f7:05:
cb:37:1d:78:82:cc:d3:82:a8:6c:cb:fa:f6:92:39:
54:1e:5a:89:3a:18:34:0e:0e:6c:fb:1f:55:29:9c:
76:5b:16:8b:ef:b6:bc:b1:66:ed:f6:e0:9b:8d:5d:
8a:a9:1f:1c:90:cf:b9:f0:19:7e:8f:08:a1:e9:c3:
6c:97:e4:a8:26:72:f3:63:a9:d2:4b:b1:ca:80:54:
e8:26:41:cc:69:91:5a:95:3e:4e:74:69:34:90:7e:
3e:6b:c0:e4:0c:5f:6c:73:1e:33:c1:72:cd:f1:27:
22:1b:ef:56:8f:f8:8a:46:eb:4d:d0:b9:2c:a8:d5:
0b:9e:c6:ab:7e:13:8f:3b:08:df:d7:cb:09:47:8b:
a6:7e:f9:c6:10:5c:9f:89:5d:54:75:09:7f:87:f3:
1a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2B:53:8E:68:5A:41:82:18:A1:0D:4C:C0:16:CC:17:D3:9E:82:CB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-ytTjmhaQYIYoQ1MwBbMF9Oegss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:c6:0a:ab:46:ab:48:fe:a6:ef:be:73:60:21:5e:10:93:92:
01:52:60:84:7e:bb:f3:a2:b3:b8:05:cc:b2:c3:c1:94:7a:71:
10:87:80:14:a7:5a:2c:64:32:66:08:10:1a:b8:cf:6f:14:d6:
dc:cf:6d:c4:bb:62:6e:24:ee:b1:7a:80:5c:68:f8:9b:9e:21:
4d:90:ec:e0:18:7c:4f:d4:94:7d:96:11:68:97:bc:77:1e:63:
a6:05:9f:3c:9e:68:3d:a8:8a:87:33:fe:5d:7c:bf:b6:31:f2:
0f:5b:76:08:50:bd:63:5c:c4:79:52:e5:2c:95:90:60:9c:14:
1f:ba:78:b0:39:25:9c:6a:15:57:bd:bc:74:08:1a:d8:e6:c0:
be:7a:0e:43:29:8f:55:41:65:4a:e9:08:cb:8b:56:69:7a:ca:
8f:2e:ae:73:72:ef:df:02:14:91:bd:84:3b:9c:e6:05:70:30:
09:6b:a9:b5:48:9b:8b:df:1f:f0:55:d3:a8:b8:5f:0e:dc:13:
2b:86:ed:b8:69:2c:7c:c7:7b:83:bd:4c:1c:a7:4b:c9:4a:98:
d9:65:7b:60:65:63:39:6a:66:77:90:5e:81:a6:ff:9e:4f:e0:
3f:25:6f:a1:73:0f:5b:83:26:cb:1c:08:ee:7c:94:69:63:c8:
0d:24:6c:17
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYiyTYSNnOTeNJVN0Y01qFquMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjEzMDExMDA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjJiNTM4ZTY4NWE0MTgyMThhMTBkNGNjMDE2Y2MxN2QzOWU4MmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3dTGOogR9NdVzMf5nnjpSS56Z80
XF9gsjjQ/l8xCCackE6+9Qo5SRdprrEPGTUQrBpmDPGcIAkWqlXulp6uzFOe7g6U
IFTiEND8CexPHw/Eyf0S0Y8/H67JSH4NaLtf2RtSGe/X9wXLNx14gszTgqhsy/r2
kjlUHlqJOhg0Dg5s+x9VKZx2WxaL77a8sWbt9uCbjV2KqR8ckM+58Bl+jwih6cNs
l+SoJnLzY6nSS7HKgFToJkHMaZFalT5OdGk0kH4+a8DkDF9scx4zwXLN8SciG+9W
j/iKRutN0LksqNULnsarfhOPOwjf18sJR4umfvnGEFyfiV1UdQl/h/MakwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPsrU45oWkGCGKENTMAWzBfTnoLLMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMS15dFRqbWhhUVlJWW9RMU13QmJNRjlPZWdzcy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFh
Ni8xL2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQAmxgqrRqtI/qbvvnNg
IV4Qk5IBUmCEfrvzorO4Bcyyw8GUenEQh4AUp1osZDJmCBAauM9vFNbcz23Eu2Ju
JO6xeoBcaPibniFNkOzgGHxP1JR9lhFol7x3HmOmBZ88nmg9qIqHM/5dfL+2MfIP
W3YIUL1jXMR5UuUslZBgnBQfuniwOSWcahVXvbx0CBrY5sC+eg5DKY9VQWVK6QjL
i1ZpesqPLq5zcu/fAhSRvYQ7nOYFcDAJa6m1SJuL3x/wVdOouF8O3BMrhu24aSx8
x3uDvUwcp0vJSpjZZXtgZWM5amZ3kF6Bpv+eT+A/JW+hcw9bgybLHAjufJRpY8gN
JGwX
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:16:30 2025 by rpki-client