Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IACKM2g5zh15lS2Gu2Ir0jRd9sE.roa
File: IACKM2g5zh15lS2Gu2Ir0jRd9sE.roa (raw, json)
Hash identifier: eX6g71F9ROmK4IWTHKUAdhBHB6tYuFW2PWXFdkz14LI=
Subject key identifier: 20:00:8A:33:68:39:CE:1D:79:95:2D:86:BB:62:2B:D2:34:5D:F6:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01878EEBAA83647D4BB5E0700471B1DB3245
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IACKM2g5zh15lS2Gu2Ir0jRd9sE.roa
Signing time: Mon 17 Apr 2023 11:13:41 +0000
ROA not before: Mon 17 Apr 2023 11:13:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8e:eb:aa:83:64:7d:4b:b5:e0:70:04:71:b1:db:32:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 17 11:13:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20008a336839ce1d79952d86bb622bd2345df6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c1:f5:65:a0:72:7f:73:46:91:06:9b:2b:fa:
d8:18:68:e4:5c:bf:4c:4e:1c:e0:39:08:b9:ab:e9:
18:c3:28:d6:35:34:0d:fc:aa:64:75:66:e0:52:68:
06:8f:84:ff:38:b1:8c:f4:f4:fe:43:e2:ef:ee:23:
04:c0:31:10:2a:40:29:3c:d5:5f:dc:6e:3a:c2:5c:
dd:90:c5:7f:ba:c7:85:d7:47:56:e1:08:b9:1a:f6:
27:8c:ff:8c:13:f1:4e:54:87:fd:27:93:13:e0:38:
1a:0e:fc:38:60:62:40:07:aa:5a:04:58:96:64:c8:
27:13:d1:ba:cc:73:cf:c3:46:b1:7f:16:67:94:b1:
2c:55:cf:7c:fe:0b:be:17:1d:3b:33:c9:08:10:1d:
8d:08:0a:94:67:bd:ad:a1:92:60:94:03:ff:3c:cc:
33:ef:3f:fa:78:8b:58:28:be:07:d7:2d:8f:31:02:
a1:d2:69:d0:43:88:99:8f:d4:55:ef:f7:19:aa:1b:
5f:2b:8a:9b:bb:9e:1c:9c:89:83:6a:f3:c0:b9:aa:
06:09:47:8b:8a:52:43:f4:06:87:f3:87:6f:9f:b4:
fd:3b:56:d1:81:a4:36:7a:2c:fc:a7:ea:b8:29:45:
cb:e2:a7:ed:48:14:ce:0a:3c:b9:d3:91:7d:29:e9:
58:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:00:8A:33:68:39:CE:1D:79:95:2D:86:BB:62:2B:D2:34:5D:F6:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IACKM2g5zh15lS2Gu2Ir0jRd9sE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:5d:ba:65:f9:41:4a:f0:4c:a3:63:f7:4f:61:9f:2b:0f:47:
21:6f:21:5d:ab:8d:e8:63:fa:39:4b:b6:46:32:39:c2:07:37:
0b:15:fb:21:69:e3:41:57:e3:c4:ce:00:41:e5:d0:9e:05:76:
b4:a0:95:87:8f:34:27:58:c4:69:3b:c7:c5:92:36:1d:31:fd:
c2:20:dc:b2:46:dc:ba:c9:0c:0b:47:91:cf:ce:70:b8:bf:ea:
f9:8e:1b:be:da:75:e7:a8:14:5e:35:a5:10:df:d9:84:48:fa:
09:24:43:7e:e9:83:82:24:6c:d9:9d:34:66:67:ad:5f:d8:41:
a0:e5:ef:0d:d6:73:52:52:6e:bd:d2:47:e8:a6:b8:9b:ef:e5:
f0:26:60:13:da:1c:b7:67:64:b2:52:e7:ce:a5:68:1e:e6:00:
3b:37:dd:03:84:d3:67:37:f8:a3:74:24:a9:d1:61:d5:3e:b4:
42:62:82:af:4e:04:20:40:6d:9b:7f:a4:81:8b:95:07:8c:61:
51:07:7c:7a:d9:80:20:7a:05:e7:79:0b:08:f0:1a:72:ab:d2:
8e:8b:a6:c4:ab:93:57:67:06:34:ff:aa:c7:f5:c7:eb:b0:b7:
fb:c4:e8:90:44:e1:ef:b2:32:1b:a5:c8:20:9c:3e:82:eb:81:
78:ab:41:fd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYeO66qDZH1LteBwBHGx2zJFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDE3MTExMzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDAwOGEzMzY4MzljZTFkNzk5NTJkODZiYjYyMmJkMjM0NWRmNmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcH1ZaByf3NGkQabK/rYGGjkXL9M
ThzgOQi5q+kYwyjWNTQN/KpkdWbgUmgGj4T/OLGM9PT+Q+Lv7iMEwDEQKkApPNVf
3G46wlzdkMV/useF10dW4Qi5GvYnjP+ME/FOVIf9J5MT4DgaDvw4YGJAB6paBFiW
ZMgnE9G6zHPPw0axfxZnlLEsVc98/gu+Fx07M8kIEB2NCAqUZ72toZJglAP/PMwz
7z/6eItYKL4H1y2PMQKh0mnQQ4iZj9RV7/cZqhtfK4qbu54cnImDavPAuaoGCUeL
ilJD9AaH84dvn7T9O1bRgaQ2eiz8p+q4KUXL4qftSBTOCjy505F9KelYFQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCAAijNoOc4deZUthrtiK9I0XfbBMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSUFDS00yZzV6aDE1bFMyR3UySXIwalJkOXNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAD5dumX5QUrwTKNj909h
nysPRyFvIV2rjehj+jlLtkYyOcIHNwsV+yFp40FX48TOAEHl0J4FdrSglYePNCdY
xGk7x8WSNh0x/cIg3LJG3LrJDAtHkc/OcLi/6vmOG77adeeoFF41pRDf2YRI+gkk
Q37pg4IkbNmdNGZnrV/YQaDl7w3Wc1JSbr3SR+imuJvv5fAmYBPaHLdnZLJS586l
aB7mADs33QOE02c3+KN0JKnRYdU+tEJigq9OBCBAbZt/pIGLlQeMYVEHfHrZgCB6
Bed5CwjwGnKr0o6LpsSrk1dnBjT/qsf1x+uwt/vE6JBE4e+yMhulyCCcPoLrgXir
Qf0=
-----END CERTIFICATE-----
Generated at Mon Jun 9 08:33:04 2025 by rpki-client