Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4ImR5MNEp7CP3xVKt-szXI0qIRU.roa
File: 4ImR5MNEp7CP3xVKt-szXI0qIRU.roa (raw, json)
Hash identifier: yUgkBFHvm9xCqZ96BBIFvaXLoF9yEHHm2qTm7BKrc18=
Subject key identifier: E0:89:91:E4:C3:44:A7:B0:8F:DF:15:4A:B7:EB:33:5C:8D:2A:21:15
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018873DBD4BCB7ACF1752C7C65A5F756FC7E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4ImR5MNEp7CP3xVKt-szXI0qIRU.roa
Signing time: Wed 31 May 2023 22:09:26 +0000
ROA not before: Wed 31 May 2023 22:09:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:73:db:d4:bc:b7:ac:f1:75:2c:7c:65:a5:f7:56:fc:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 31 22:09:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e08991e4c344a7b08fdf154ab7eb335c8d2a2115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:70:42:a5:68:62:f8:32:0f:63:d8:0d:05:78:
95:49:8c:d5:66:58:61:c3:a1:66:f6:1f:88:95:aa:
db:cd:1a:49:01:b5:29:0e:44:70:25:39:88:7d:1b:
66:b0:10:f0:46:d6:c0:2c:e6:09:26:fb:75:97:ef:
17:ea:96:30:52:8d:b1:1e:5a:94:79:26:67:86:6a:
93:74:e2:c0:51:7a:8e:40:a8:61:76:10:fd:60:9e:
cd:9b:ba:9e:94:fc:7c:65:eb:af:b2:e9:15:90:44:
7c:88:70:cb:62:73:aa:f1:7f:4b:fc:f7:0d:64:6f:
a8:af:28:2f:a3:f3:ac:4d:bf:b2:5b:ca:e0:0f:b4:
57:c6:81:74:26:5d:89:1d:db:b3:67:87:53:60:63:
79:6a:7c:52:ae:83:2a:b6:e7:84:6f:81:ac:c0:4f:
df:4b:db:dc:f0:3b:3b:2c:9e:62:a3:5f:59:a4:b3:
a7:39:bb:2f:5a:7a:00:b6:f5:e7:6b:a6:bb:70:cd:
e0:d9:f3:be:ca:5e:8f:48:99:72:06:36:68:02:04:
dc:bf:ad:c2:64:8f:ed:b0:50:5d:49:9e:5e:41:43:
5b:b2:47:fd:f9:01:23:63:d3:0d:54:50:45:1b:98:
c9:ed:6b:0c:04:72:31:49:37:f1:8e:49:0b:53:bb:
36:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:89:91:E4:C3:44:A7:B0:8F:DF:15:4A:B7:EB:33:5C:8D:2A:21:15
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4ImR5MNEp7CP3xVKt-szXI0qIRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:47:5a:70:3a:00:1c:6d:1c:03:18:1f:95:d7:43:f9:f0:4a:
00:d7:8d:06:bc:d1:68:1f:db:5a:81:ad:62:04:d5:7c:5f:47:
b1:a0:72:72:9e:05:08:1f:5b:65:9a:d2:12:47:02:0f:29:c5:
30:5a:26:f1:5c:69:47:37:ea:f8:74:30:68:01:3e:0c:4d:f4:
d7:69:c3:0f:a5:60:c7:ea:69:a3:cf:a6:e9:b6:ac:93:b4:6b:
51:80:ea:22:1b:86:a6:11:a2:4d:51:17:6e:d2:66:00:5d:39:
97:02:3c:0f:ed:a7:51:48:5b:bc:cb:13:df:fd:7e:61:38:82:
e5:65:74:73:e6:1f:54:c5:24:7a:55:5f:69:04:32:dd:38:e2:
52:27:05:e9:2d:10:5b:5e:0d:70:15:a9:79:17:29:bb:ca:30:
d6:98:26:08:0e:95:c3:87:69:21:b2:9d:b6:7e:cb:50:b1:19:
1c:95:f9:f8:ca:e3:bf:32:74:18:ee:44:08:7a:da:12:dc:54:
df:7a:34:0e:9d:06:8e:1a:3f:5b:6b:a6:e4:28:3c:79:20:33:
22:47:e6:24:8e:c6:4a:d4:eb:54:3a:5e:bc:1b:b1:7c:3b:d1:
18:31:68:31:d8:0e:f9:ff:84:44:88:46:dd:62:37:28:94:10:
da:26:a7:9b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhz29S8t6zxdSx8ZaX3Vvx+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTMxMjIwOTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDg5OTFlNGMzNDRhN2IwOGZkZjE1NGFiN2ViMzM1YzhkMmEyMTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnBCpWhi+DIPY9gNBXiVSYzVZlhh
w6Fm9h+IlarbzRpJAbUpDkRwJTmIfRtmsBDwRtbALOYJJvt1l+8X6pYwUo2xHlqU
eSZnhmqTdOLAUXqOQKhhdhD9YJ7Nm7qelPx8ZeuvsukVkER8iHDLYnOq8X9L/PcN
ZG+orygvo/OsTb+yW8rgD7RXxoF0Jl2JHduzZ4dTYGN5anxSroMqtueEb4GswE/f
S9vc8Ds7LJ5io19ZpLOnObsvWnoAtvXna6a7cM3g2fO+yl6PSJlyBjZoAgTcv63C
ZI/tsFBdSZ5eQUNbskf9+QEjY9MNVFBFG5jJ7WsMBHIxSTfxjkkLU7s2DwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOCJkeTDRKewj98VSrfrM1yNKiEVMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNEltUjVNTkVwN0NQM3hWS3Qtc3pYSTBxSVJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADxHWnA6ABxtHAMYH5XX
Q/nwSgDXjQa80Wgf21qBrWIE1XxfR7GgcnKeBQgfW2Wa0hJHAg8pxTBaJvFcaUc3
6vh0MGgBPgxN9Ndpww+lYMfqaaPPpum2rJO0a1GA6iIbhqYRok1RF27SZgBdOZcC
PA/tp1FIW7zLE9/9fmE4guVldHPmH1TFJHpVX2kEMt044lInBektEFteDXAVqXkX
KbvKMNaYJggOlcOHaSGynbZ+y1CxGRyV+fjK478ydBjuRAh62hLcVN96NA6dBo4a
P1trpuQoPHkgMyJH5iSOxkrU61Q6XrwbsXw70RgxaDHYDvn/hESIRt1iNyiUENom
p5s=
-----END CERTIFICATE-----
Generated at Wed Jun 11 07:31:10 2025 by rpki-client