Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A8W53kkABrsTBaBNpt7N66iNvtI.roa
File: A8W53kkABrsTBaBNpt7N66iNvtI.roa (raw, json)
Hash identifier: LzcTObSHqOxlCcsC4p3PuMquEohXvPWdrcxoc/Z3ufA=
Subject key identifier: 03:C5:B9:DE:49:00:06:BB:13:05:A0:4D:A6:DE:CD:EB:A8:8D:BE:D2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187AE74C7AAA0B50523BCA6DDEFC172DF20
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A8W53kkABrsTBaBNpt7N66iNvtI.roa
Signing time: Sun 23 Apr 2023 14:11:41 +0000
ROA not before: Sun 23 Apr 2023 14:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ae:74:c7:aa:a0:b5:05:23:bc:a6:dd:ef:c1:72:df:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 23 14:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03c5b9de490006bb1305a04da6decdeba88dbed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:11:68:6d:c2:1e:f2:92:71:5c:7b:2f:2f:20:
bc:4f:20:b5:98:ca:00:19:3d:80:2e:20:bb:ef:e5:
ce:c7:c4:bc:57:49:fc:f1:b3:88:6e:94:45:b9:ae:
cd:28:b2:bd:6f:3f:64:b6:63:77:78:2b:60:23:27:
8f:c8:2c:93:79:f2:61:13:2e:4e:43:eb:e9:51:23:
ee:98:f7:a8:7c:a8:69:c9:01:b9:24:26:56:ff:9b:
d1:b8:5e:73:b6:f3:65:d0:4b:98:e1:69:c1:97:18:
c0:d8:24:a3:3e:cc:b2:17:9e:0c:65:17:3c:0b:ae:
2e:c4:98:6e:be:03:52:eb:2b:4a:cd:ef:b6:5f:17:
5a:1b:31:24:85:ae:6a:00:4a:9c:a5:a8:32:0c:31:
1b:a7:30:6e:e0:a4:b8:82:b2:4f:34:7f:c5:2d:2b:
bc:d5:45:43:03:55:83:2e:0d:ca:fc:1f:75:63:0e:
2e:c4:d6:ec:62:8e:29:30:82:62:d8:0e:50:03:aa:
22:8d:1a:20:5a:02:1d:d0:bd:e5:41:0b:70:76:fd:
c9:97:f3:99:12:6e:3e:6c:86:ad:67:ab:42:2f:2c:
b4:f0:1f:43:46:c4:9b:4a:92:1b:29:57:c5:89:c2:
c7:4b:7a:26:82:2c:fa:5d:5c:78:09:5f:c8:e1:dc:
cc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C5:B9:DE:49:00:06:BB:13:05:A0:4D:A6:DE:CD:EB:A8:8D:BE:D2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A8W53kkABrsTBaBNpt7N66iNvtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:57:60:4f:d6:b4:03:43:87:4b:77:db:6d:7e:c2:77:75:4a:
ec:ce:bf:53:56:38:85:b1:46:29:4f:6d:63:f2:52:c7:65:7d:
c9:67:7f:a0:1f:02:1d:8d:c8:6e:70:ff:d8:cf:9e:c3:d7:9e:
24:f9:9e:74:5e:3c:4b:7a:29:0e:22:45:a7:01:5d:6f:c8:d4:
39:bf:d4:3f:96:e8:0f:01:b4:41:13:15:1d:20:6b:50:ea:23:
27:77:b3:21:32:82:75:0f:fc:62:89:da:bd:bc:d4:42:1b:da:
12:5f:21:8f:e8:d4:4e:89:c3:49:59:0f:e0:4f:aa:38:c4:db:
21:31:06:30:da:e2:f6:dd:00:ac:2f:b2:6f:49:63:56:c2:5c:
82:48:eb:d6:f0:d1:a9:ec:5f:d8:8d:62:00:a3:74:93:11:6b:
cf:1e:96:a4:38:1c:d6:8b:4b:e8:d7:81:36:ba:47:f2:81:fa:
c8:d7:bc:3b:d2:24:f0:35:45:3d:b8:97:56:56:39:35:51:c4:
74:1d:4c:f1:08:b6:04:ad:97:78:8e:dd:0a:f3:fe:6f:08:f9:
ca:10:74:42:9e:e8:42:23:36:0d:04:15:82:2c:99:aa:54:16:
80:00:6c:ff:72:b1:66:0a:7d:70:39:18:d4:85:5b:c7:3d:f0:
33:99:3f:02
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYeudMeqoLUFI7ym3e/Bct8gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDIzMTQxMTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2M1YjlkZTQ5MDAwNmJiMTMwNWEwNGRhNmRlY2RlYmE4OGRiZWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRFobcIe8pJxXHsvLyC8TyC1mMoA
GT2ALiC77+XOx8S8V0n88bOIbpRFua7NKLK9bz9ktmN3eCtgIyePyCyTefJhEy5O
Q+vpUSPumPeofKhpyQG5JCZW/5vRuF5ztvNl0EuY4WnBlxjA2CSjPsyyF54MZRc8
C64uxJhuvgNS6ytKze+2XxdaGzEkha5qAEqcpagyDDEbpzBu4KS4grJPNH/FLSu8
1UVDA1WDLg3K/B91Yw4uxNbsYo4pMIJi2A5QA6oijRogWgId0L3lQQtwdv3Jl/OZ
Em4+bIatZ6tCLyy08B9DRsSbSpIbKVfFicLHS3omgiz6XVx4CV/I4dzM6QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAPFud5JAAa7EwWgTabezeuojb7SMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQThXNTNra0FCcnNUQmFCTnB0N042NmlOdnRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIVXYE/WtANDh0t3221+
wnd1SuzOv1NWOIWxRilPbWPyUsdlfclnf6AfAh2NyG5w/9jPnsPXniT5nnRePEt6
KQ4iRacBXW/I1Dm/1D+W6A8BtEETFR0ga1DqIyd3syEygnUP/GKJ2r281EIb2hJf
IY/o1E6Jw0lZD+BPqjjE2yExBjDa4vbdAKwvsm9JY1bCXIJI69bw0ansX9iNYgCj
dJMRa88elqQ4HNaLS+jXgTa6R/KB+sjXvDvSJPA1RT24l1ZWOTVRxHQdTPEItgSt
l3iO3Qrz/m8I+coQdEKe6EIjNg0EFYIsmapUFoAAbP9ysWYKfXA5GNSFW8c98DOZ
PwI=
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:29:36 2025 by rpki-client