Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2fbJq2jXQhkRpy_gpbndXl1ziuE.roa
File: 2fbJq2jXQhkRpy_gpbndXl1ziuE.roa (raw, json)
Hash identifier: OQgP1YPiS8QuZtzsSZd/nyRYh3rRmA6jtl2S6iGXdi4=
Subject key identifier: D9:F6:C9:AB:68:D7:42:19:11:A7:2F:E0:A5:B9:DD:5E:5D:73:8A:E1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018713C0127170C5E20C1DBD863F65747FE2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2fbJq2jXQhkRpy_gpbndXl1ziuE.roa
Signing time: Fri 24 Mar 2023 13:12:47 +0000
ROA not before: Fri 24 Mar 2023 13:12:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:13:c0:12:71:70:c5:e2:0c:1d:bd:86:3f:65:74:7f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 24 13:12:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9f6c9ab68d7421911a72fe0a5b9dd5e5d738ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0d:e3:7d:7d:9c:9f:af:83:c4:fd:7c:a8:d0:
26:ef:68:2d:93:12:c8:e1:58:4c:60:f2:60:4e:d9:
55:9c:5b:b1:8e:a7:d7:74:d4:f2:bc:0e:33:67:76:
da:4b:28:3a:64:16:f1:d2:34:5d:72:a1:ce:24:58:
e2:be:94:56:7d:b5:6f:9a:21:54:c0:a1:b4:17:8a:
65:2c:39:f4:38:16:fe:92:03:d9:e4:9d:eb:49:ab:
43:6c:e7:50:d1:d7:ad:15:be:0f:1b:e0:eb:a5:1c:
2e:bd:9a:1b:92:8f:a6:cb:86:f1:9c:37:03:15:ee:
f2:47:ce:a5:b5:3c:db:c1:ed:78:b9:f0:a1:c8:fc:
04:1f:06:66:86:03:58:ff:b0:82:df:cd:7e:e8:1e:
4a:ea:71:f5:d6:0a:3a:61:4f:36:00:6f:54:6b:8f:
96:86:43:db:ba:eb:89:91:82:e7:1c:6d:e4:6d:69:
3f:db:fd:50:c1:ae:85:0d:85:74:c0:a3:95:35:7c:
eb:4f:27:38:92:9f:2c:c3:55:29:2d:03:39:e1:04:
fe:be:f0:cc:e3:89:c8:ca:e7:41:cf:62:5a:a7:b7:
e9:28:1d:f5:a1:e7:ed:8a:db:6b:d7:15:ce:b4:3e:
ae:f5:4e:83:f3:98:5d:94:93:a8:60:dd:0c:ab:cd:
b1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F6:C9:AB:68:D7:42:19:11:A7:2F:E0:A5:B9:DD:5E:5D:73:8A:E1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2fbJq2jXQhkRpy_gpbndXl1ziuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:df:47:47:fe:0f:cf:f6:82:2d:6a:88:a7:e6:d6:a1:bc:94:
23:7f:b0:d4:82:0d:0f:7a:77:4c:13:b0:6d:15:ac:ef:ec:63:
5a:a8:38:0d:63:a4:ec:89:12:12:fd:d8:e2:ed:3c:c2:43:97:
7c:2f:71:b8:d9:b6:7f:fa:19:a1:6a:5b:f5:3d:43:ac:00:9b:
c9:89:df:01:35:a7:0d:4a:59:47:e3:55:c7:2b:23:16:3c:84:
82:e2:6f:1f:32:96:4f:75:50:ab:06:69:65:08:2e:e4:4d:57:
98:37:81:65:c5:70:58:5d:e8:82:c3:b3:20:95:23:07:41:94:
76:02:f8:bf:d4:ab:ea:0f:ca:42:69:2f:e8:9f:2c:41:65:94:
fe:1f:5d:78:98:2a:c8:14:eb:b0:1b:a4:ba:93:1a:48:07:57:
7c:58:03:66:b7:0f:96:86:2a:d6:49:46:c0:15:69:15:db:19:
5e:25:1e:cf:e3:ea:6c:7f:89:92:e4:32:b2:78:ff:9e:a5:12:
a8:91:6c:d6:34:8f:f3:68:06:4b:4b:6c:96:1b:a8:ae:9d:79:
68:71:17:2b:23:79:74:ce:6e:1f:14:62:26:ac:da:77:5a:bc:
6d:ff:1c:23:b5:87:10:8e:7a:bd:a1:b2:15:ab:92:4e:03:83:
df:fe:74:d1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYcTwBJxcMXiDB29hj9ldH/iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzI0MTMxMjQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWY2YzlhYjY4ZDc0MjE5MTFhNzJmZTBhNWI5ZGQ1ZTVkNzM4YWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Q3jfX2cn6+DxP18qNAm72gtkxLI
4VhMYPJgTtlVnFuxjqfXdNTyvA4zZ3baSyg6ZBbx0jRdcqHOJFjivpRWfbVvmiFU
wKG0F4plLDn0OBb+kgPZ5J3rSatDbOdQ0detFb4PG+DrpRwuvZobko+my4bxnDcD
Fe7yR86ltTzbwe14ufChyPwEHwZmhgNY/7CC381+6B5K6nH11go6YU82AG9Ua4+W
hkPbuuuJkYLnHG3kbWk/2/1Qwa6FDYV0wKOVNXzrTyc4kp8sw1UpLQM54QT+vvDM
44nIyudBz2Jap7fpKB31oeftittr1xXOtD6u9U6D85hdlJOoYN0Mq82x1wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNn2yato10IZEacv4KW53V5dc4rhMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMmZiSnEyalhRaGtScHlfZ3BibmRYbDF6aXVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABPfR0f+D8/2gi1qiKfm
1qG8lCN/sNSCDQ96d0wTsG0VrO/sY1qoOA1jpOyJEhL92OLtPMJDl3wvcbjZtn/6
GaFqW/U9Q6wAm8mJ3wE1pw1KWUfjVccrIxY8hILibx8ylk91UKsGaWUILuRNV5g3
gWXFcFhd6ILDsyCVIwdBlHYC+L/Uq+oPykJpL+ifLEFllP4fXXiYKsgU67AbpLqT
GkgHV3xYA2a3D5aGKtZJRsAVaRXbGV4lHs/j6mx/iZLkMrJ4/56lEqiRbNY0j/No
BktLbJYbqK6deWhxFysjeXTObh8UYias2ndavG3/HCO1hxCOer2hshWrkk4Dg9/+
dNE=
-----END CERTIFICATE-----
Generated at Mon Jun 9 02:10:11 2025 by rpki-client