Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4X4cqnuBFsJ2gwBRSIBj2ne7RzM.roa
File: 4X4cqnuBFsJ2gwBRSIBj2ne7RzM.roa (raw, json)
Hash identifier: 7b7xulzQhFKbxSyOGxklR1pnl8UqEIq9wKFLFb+d/Eg=
Subject key identifier: E1:7E:1C:AA:7B:81:16:C2:76:83:00:51:48:80:63:DA:77:BB:47:33
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189EFA4BD262750C4AC4E0589605A3400FC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4X4cqnuBFsJ2gwBRSIBj2ne7RzM.roa
Signing time: Sun 13 Aug 2023 16:04:58 +0000
ROA not before: Sun 13 Aug 2023 16:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:189:efa4:1e14/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ef:a4:bd:26:27:50:c4:ac:4e:05:89:60:5a:34:00:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 13 16:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e17e1caa7b8116c276830051488063da77bb4733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0b:61:7e:d9:15:c7:2a:3f:6b:72:85:42:58:
28:cf:19:80:93:a8:de:8b:b4:42:1f:94:db:cd:70:
f6:08:71:86:79:f5:67:e3:80:22:1d:cb:ca:1d:5d:
81:1a:24:9b:35:ac:4a:5d:41:57:97:0b:64:a1:a0:
32:14:89:20:4f:38:ce:3a:b2:6e:e8:ce:91:ce:95:
2a:f3:64:4e:f1:fa:e9:91:04:47:fa:bf:04:59:5a:
a9:d4:4e:14:c8:32:eb:45:69:4c:59:24:3f:8b:73:
44:a8:d5:60:ad:59:43:40:81:09:03:e6:07:17:82:
a7:e3:84:9e:72:9c:ce:6e:94:27:75:2b:81:e5:30:
a0:cd:55:81:89:09:45:e9:fd:b0:31:19:e3:b1:21:
68:d2:2f:7d:9d:e9:ac:92:68:20:27:54:bd:2e:90:
9c:03:a3:50:f8:b8:9c:a2:91:8c:1c:32:1a:16:b2:
73:cc:1b:11:db:e0:0c:79:b1:52:99:bc:55:f3:91:
5e:6d:f4:82:36:43:f6:9d:e7:65:12:6a:56:2d:07:
d5:c8:4d:97:b6:05:43:73:52:a5:dd:9a:2f:39:f8:
41:64:57:80:c6:0f:3b:8d:fb:86:1f:50:b9:a5:d2:
a3:20:52:2e:b5:4f:9f:e0:f3:40:55:22:a4:d1:94:
07:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7E:1C:AA:7B:81:16:C2:76:83:00:51:48:80:63:DA:77:BB:47:33
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4X4cqnuBFsJ2gwBRSIBj2ne7RzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:09:f6:43:94:70:38:af:55:5b:46:f9:14:ee:ea:d2:32:92:
13:4e:c6:36:8c:21:6c:54:c6:73:36:85:3e:34:26:3e:be:84:
6b:b1:a8:72:bb:68:77:51:1b:53:c6:53:b7:33:5f:e4:b9:9a:
94:e3:27:5f:94:ef:a8:ef:8a:60:b3:0f:13:cb:e4:9a:22:53:
84:37:2b:a0:8d:da:b3:72:3f:16:3c:6b:23:1c:5f:ba:2d:2b:
09:10:56:4b:b6:4c:fb:c4:4c:e8:6f:2a:d7:1b:b5:d2:58:71:
26:fd:72:d2:5a:53:d2:e0:05:65:09:7b:70:7e:83:32:5a:79:
14:87:68:6e:29:9b:eb:45:1e:99:15:b8:d9:21:ca:c3:f4:2a:
7b:e9:5c:d3:53:3b:08:b7:31:df:5a:a5:d7:58:64:80:78:14:
93:6a:4c:bd:1c:5f:7f:53:0f:da:a1:b1:78:6d:83:a0:8c:90:
01:a6:d1:9e:ed:c3:e6:d5:ae:d9:b4:91:c6:af:b3:ba:98:88:
e7:58:44:49:f1:64:86:e4:d7:2a:ad:2c:cd:e8:db:24:64:9c:
d1:ea:7b:34:cc:77:21:9f:24:f1:d2:03:59:4c:05:da:03:09:
67:d6:ef:da:84:f6:37:6a:fd:61:ac:67:15:fd:bd:46:73:e2:
57:29:16:21
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnvpL0mJ1DErE4FiWBaNAD8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODEzMTYwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTdlMWNhYTdiODExNmMyNzY4MzAwNTE0ODgwNjNkYTc3YmI0NzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAthftkVxyo/a3KFQlgozxmAk6je
i7RCH5TbzXD2CHGGefVn44AiHcvKHV2BGiSbNaxKXUFXlwtkoaAyFIkgTzjOOrJu
6M6RzpUq82RO8frpkQRH+r8EWVqp1E4UyDLrRWlMWSQ/i3NEqNVgrVlDQIEJA+YH
F4Kn44SecpzObpQndSuB5TCgzVWBiQlF6f2wMRnjsSFo0i99nemskmggJ1S9LpCc
A6NQ+LicopGMHDIaFrJzzBsR2+AMebFSmbxV85FebfSCNkP2nedlEmpWLQfVyE2X
tgVDc1Kl3ZovOfhBZFeAxg87jfuGH1C5pdKjIFIutU+f4PNAVSKk0ZQHFwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOF+HKp7gRbCdoMAUUiAY9p3u0czMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNFg0Y3FudUJGc0oyZ3dCUlNJQmoybmU3UnpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALMJ9kOUcDivVVtG+RTu
6tIykhNOxjaMIWxUxnM2hT40Jj6+hGuxqHK7aHdRG1PGU7czX+S5mpTjJ1+U76jv
imCzDxPL5JoiU4Q3K6CN2rNyPxY8ayMcX7otKwkQVku2TPvETOhvKtcbtdJYcSb9
ctJaU9LgBWUJe3B+gzJaeRSHaG4pm+tFHpkVuNkhysP0KnvpXNNTOwi3Md9apddY
ZIB4FJNqTL0cX39TD9qhsXhtg6CMkAGm0Z7tw+bVrtm0kcavs7qYiOdYREnxZIbk
1yqtLM3o2yRknNHqezTMdyGfJPHSA1lMBdoDCWfW79qE9jdq/WGsZxX9vUZz4lcp
FiE=
-----END CERTIFICATE-----
Generated at Thu Jun 12 00:24:13 2025 by rpki-client