Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8ikV6-I0F6ACZgPldbGHXo-bSt4.roa
File: 8ikV6-I0F6ACZgPldbGHXo-bSt4.roa (raw, json)
Hash identifier: ZCinCaWPbaua9jCJRoc3DRZInV5apwoDqm3Wj+Xhq30=
Subject key identifier: F2:29:15:EB:E2:34:17:A0:02:66:03:E5:75:B1:87:5E:8F:9B:4A:DE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018824AED87B0CD59A317A47F65A3CC9E329
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8ikV6-I0F6ACZgPldbGHXo-bSt4.roa
Signing time: Tue 16 May 2023 13:10:18 +0000
ROA not before: Tue 16 May 2023 13:10:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:24:ae:d8:7b:0c:d5:9a:31:7a:47:f6:5a:3c:c9:e3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 16 13:10:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f22915ebe23417a0026603e575b1875e8f9b4ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:64:1e:30:9c:06:3b:a8:97:61:f6:e2:4a:
0f:d5:47:9e:65:8b:ae:ac:46:2b:81:40:48:33:43:
7c:45:b9:96:6f:60:18:26:d6:53:0e:40:52:3d:df:
01:af:d2:8d:b1:bd:54:aa:39:b2:20:31:cd:e1:2f:
86:a4:34:bf:92:40:de:81:3b:e5:80:05:d5:e2:05:
37:98:67:76:76:a4:f7:6a:91:81:22:68:b2:1d:6f:
82:a7:37:88:19:07:b7:dc:8c:20:7d:ee:7d:e3:07:
24:cd:77:a3:2a:e5:97:46:29:89:17:bd:2e:e5:20:
44:d7:0e:de:ac:6d:5e:44:cb:a6:8b:3f:a8:0b:46:
ce:76:0e:f6:02:1f:71:e6:0e:94:95:89:51:89:14:
09:01:1f:be:2b:be:63:b1:77:87:c5:ff:df:f5:4e:
7f:a9:a9:17:4d:8b:17:89:b0:dd:17:0f:58:5b:e8:
08:f5:20:ee:2c:60:e6:c8:91:92:fb:9b:af:b6:73:
f7:42:e4:56:64:ae:39:ac:83:e4:9c:ef:d9:d6:06:
56:22:2d:fc:28:fa:e5:52:97:0b:53:86:3e:93:84:
fc:08:ec:01:66:25:45:d2:7c:9f:26:3a:26:c8:a2:
f1:2a:ad:ca:5e:da:cc:ea:75:58:41:db:dc:5c:c0:
a2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:29:15:EB:E2:34:17:A0:02:66:03:E5:75:B1:87:5E:8F:9B:4A:DE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8ikV6-I0F6ACZgPldbGHXo-bSt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:da:b3:a7:c1:f7:66:ca:52:b5:bc:ac:8e:61:f6:b9:83:84:
36:5f:72:38:d1:15:88:9c:2c:34:34:b4:10:4e:ea:53:26:06:
21:c8:88:77:a8:7e:f1:73:fe:5f:20:60:96:08:2c:09:51:18:
72:c0:42:78:30:20:62:40:d3:db:67:f0:95:ee:f2:95:59:73:
e1:04:7c:f9:22:25:e8:be:e4:81:cd:24:8f:61:bb:b3:9c:3d:
16:c6:7f:41:cb:7f:67:b4:61:94:b8:ca:01:25:07:6d:f4:66:
d7:3f:55:e4:ca:66:d1:7f:19:d3:42:32:10:8b:b7:33:5d:7b:
71:fc:fb:7e:29:46:c0:5e:1e:1d:c5:94:ed:ef:89:27:30:0c:
c6:ec:42:85:11:83:12:0e:e7:ab:38:b6:91:84:a8:2e:e3:dd:
3b:68:51:7f:07:76:39:d1:00:5d:ce:cf:b1:6f:59:58:1f:3b:
9b:8b:0b:54:28:94:85:a7:f5:d1:ef:d5:be:e0:52:03:78:81:
7d:01:0d:c5:2c:f6:40:e6:6b:5d:cf:f2:2c:b7:d4:0e:89:7e:
52:5e:d4:49:4b:12:15:eb:f0:89:c6:f4:c4:20:2e:c6:f9:1a:
f8:2d:5b:40:57:2c:2f:20:16:85:17:01:86:1b:35:5e:4c:59:
ef:df:ff:09
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYgkrth7DNWaMXpH9lo8yeMpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTE2MTMxMDE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjI5MTVlYmUyMzQxN2EwMDI2NjAzZTU3NWIxODc1ZThmOWI0YWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoxkHjCcBjuol2H24koP1UeeZYuu
rEYrgUBIM0N8RbmWb2AYJtZTDkBSPd8Br9KNsb1UqjmyIDHN4S+GpDS/kkDegTvl
gAXV4gU3mGd2dqT3apGBImiyHW+CpzeIGQe33Iwgfe594wckzXejKuWXRimJF70u
5SBE1w7erG1eRMumiz+oC0bOdg72Ah9x5g6UlYlRiRQJAR++K75jsXeHxf/f9U5/
qakXTYsXibDdFw9YW+gI9SDuLGDmyJGS+5uvtnP3QuRWZK45rIPknO/Z1gZWIi38
KPrlUpcLU4Y+k4T8COwBZiVF0nyfJjomyKLxKq3KXtrM6nVYQdvcXMCiSQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPIpFeviNBegAmYD5XWxh16Pm0reMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOGlrVjYtSTBGNkFDWmdQbGRiR0hYby1iU3Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALTas6fB92bKUrW8rI5h
9rmDhDZfcjjRFYicLDQ0tBBO6lMmBiHIiHeofvFz/l8gYJYILAlRGHLAQngwIGJA
09tn8JXu8pVZc+EEfPkiJei+5IHNJI9hu7OcPRbGf0HLf2e0YZS4ygElB230Ztc/
VeTKZtF/GdNCMhCLtzNde3H8+34pRsBeHh3FlO3viScwDMbsQoURgxIO56s4tpGE
qC7j3TtoUX8HdjnRAF3Oz7FvWVgfO5uLC1QolIWn9dHv1b7gUgN4gX0BDcUs9kDm
a13P8iy31A6JflJe1ElLEhXr8InG9MQgLsb5GvgtW0BXLC8gFoUXAYYbNV5MWe/f
/wk=
-----END CERTIFICATE-----
Generated at Sat Jun 14 08:35:10 2025 by rpki-client