Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RjBGp9Z63Wa4rZNoA9GORxJtSYc.roa
File: RjBGp9Z63Wa4rZNoA9GORxJtSYc.roa (raw, json)
Hash identifier: aNpuV8StV9YdFh4FtQGNgYa6Ua1MIzyEm+/3Bd8G0wU=
Subject key identifier: 46:30:46:A7:D6:7A:DD:66:B8:AD:93:68:03:D1:8E:47:12:6D:49:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018841DDA511D5D1F0BC6FA2CF418758E6AD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RjBGp9Z63Wa4rZNoA9GORxJtSYc.roa
Signing time: Mon 22 May 2023 05:10:24 +0000
ROA not before: Mon 22 May 2023 05:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:41:dd:a5:11:d5:d1:f0:bc:6f:a2:cf:41:87:58:e6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 22 05:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=463046a7d67add66b8ad936803d18e47126d4987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8e:77:09:6e:c1:43:e1:4d:51:07:b4:56:57:
f5:f1:ea:00:60:86:49:b0:5c:3a:7e:9e:0d:5e:a7:
a2:bf:54:ca:e0:46:c0:fa:c6:3d:92:50:6e:bb:f2:
21:49:8b:38:e0:25:16:c6:17:b5:d2:c1:85:64:16:
08:15:86:d2:14:fe:d1:06:8d:af:a4:76:ff:b8:4a:
50:d1:4f:29:3d:41:29:f4:01:da:dd:3e:e5:41:05:
4f:6b:31:e0:9c:18:ec:4f:63:53:f8:1e:b1:16:87:
52:5a:34:ba:68:d9:32:21:a2:b4:92:37:c4:53:56:
5e:d9:50:cb:5b:f6:ed:4a:6d:cf:b6:67:b9:8f:25:
e7:d1:6b:08:77:57:b9:29:74:4f:fd:86:1d:21:26:
0e:dd:2f:f3:39:6d:62:ca:fb:fe:bc:4a:b2:c6:4a:
fd:b8:48:2a:d4:ce:ef:81:43:b5:01:3b:fe:16:c2:
21:d1:59:2b:48:94:e1:f9:2b:16:df:42:89:00:0b:
44:52:bc:f4:42:47:e4:09:05:38:de:94:cf:42:98:
7b:06:54:33:7a:1a:fe:13:0b:83:32:be:50:e3:13:
a5:58:4b:1c:44:6a:01:e5:c7:ab:71:33:3c:1a:3d:
03:69:70:a9:98:f0:dc:e6:a4:d2:a3:2b:a9:dd:4e:
2a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:30:46:A7:D6:7A:DD:66:B8:AD:93:68:03:D1:8E:47:12:6D:49:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RjBGp9Z63Wa4rZNoA9GORxJtSYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:c1:72:9a:c8:2f:f4:59:98:03:5b:37:96:a4:27:77:41:64:
47:ee:98:87:82:1a:6b:c6:a8:c3:51:90:86:58:ee:38:dd:fe:
d6:6d:b7:e5:90:e3:df:88:a8:9d:0a:89:f6:93:b0:bd:e0:e9:
d9:47:0b:f4:dd:99:c2:dc:5b:55:81:5c:26:fe:3e:67:56:7c:
cf:74:1c:2f:1d:e2:a5:59:b2:10:ed:2c:e7:73:9b:64:3a:51:
90:b5:27:ef:a2:e8:14:57:50:b4:2f:57:f0:4a:cf:93:25:c3:
cf:43:3a:88:4d:3a:91:d5:0d:f3:a7:76:68:ab:a7:b8:55:99:
d9:e6:52:f2:00:3c:65:90:44:f7:94:11:b2:9b:7a:5f:5b:ab:
1f:c8:c8:54:63:ea:b0:be:f0:33:b7:00:89:ff:38:0e:51:5c:
69:54:8a:46:26:f5:98:0a:df:bd:c0:bb:4b:d2:59:bf:45:ef:
a8:d6:01:e4:ff:27:ac:61:82:b7:3d:4d:77:31:e2:1a:4f:c4:
dd:43:50:d2:fc:c8:a9:a9:39:73:f4:00:11:27:9d:4d:cb:7e:
59:84:12:44:31:cc:96:ed:1f:02:61:aa:df:1f:73:1c:9a:b0:
9a:0a:99:60:11:00:08:07:04:21:d8:12:88:6b:f2:37:9a:b8:
ee:e1:42:46
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhB3aUR1dHwvG+iz0GHWOatMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTIyMDUxMDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjMwNDZhN2Q2N2FkZDY2YjhhZDkzNjgwM2QxOGU0NzEyNmQ0OTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI53CW7BQ+FNUQe0Vlf18eoAYIZJ
sFw6fp4NXqeiv1TK4EbA+sY9klBuu/IhSYs44CUWxhe10sGFZBYIFYbSFP7RBo2v
pHb/uEpQ0U8pPUEp9AHa3T7lQQVPazHgnBjsT2NT+B6xFodSWjS6aNkyIaK0kjfE
U1Ze2VDLW/btSm3Ptme5jyXn0WsId1e5KXRP/YYdISYO3S/zOW1iyvv+vEqyxkr9
uEgq1M7vgUO1ATv+FsIh0VkrSJTh+SsW30KJAAtEUrz0QkfkCQU43pTPQph7BlQz
ehr+EwuDMr5Q4xOlWEscRGoB5cercTM8Gj0DaXCpmPDc5qTSoyup3U4qOQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEYwRqfWet1muK2TaAPRjkcSbUmHMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUmpCR3A5WjYzV2E0clpOb0E5R09SeEp0U1ljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADjBcprIL/RZmANbN5ak
J3dBZEfumIeCGmvGqMNRkIZY7jjd/tZtt+WQ49+IqJ0KifaTsL3g6dlHC/TdmcLc
W1WBXCb+PmdWfM90HC8d4qVZshDtLOdzm2Q6UZC1J++i6BRXULQvV/BKz5Mlw89D
OohNOpHVDfOndmirp7hVmdnmUvIAPGWQRPeUEbKbel9bqx/IyFRj6rC+8DO3AIn/
OA5RXGlUikYm9ZgK373Au0vSWb9F76jWAeT/J6xhgrc9TXcx4hpPxN1DUNL8yKmp
OXP0ABEnnU3LflmEEkQxzJbtHwJhqt8fcxyasJoKmWARAAgHBCHYEohr8jeauO7h
QkY=
-----END CERTIFICATE-----
Generated at Tue Jun 10 19:34:43 2025 by rpki-client