Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SoaHGXBkHTX7avJe4uYVOGkRTBI.roa
File: SoaHGXBkHTX7avJe4uYVOGkRTBI.roa (raw, json)
Hash identifier: OJI0q4V0JoOaHCVbwlR9saF87Abi3yxt2p14nWjqa9U=
Subject key identifier: 4A:86:87:19:70:64:1D:35:FB:6A:F2:5E:E2:E6:15:38:69:11:4C:12
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187C455FB2DD1ACE53905CDE4F5425CB539
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SoaHGXBkHTX7avJe4uYVOGkRTBI.roa
Signing time: Thu 27 Apr 2023 20:09:41 +0000
ROA not before: Thu 27 Apr 2023 20:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c4:55:fb:2d:d1:ac:e5:39:05:cd:e4:f5:42:5c:b5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 27 20:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a86871970641d35fb6af25ee2e6153869114c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:1d:2c:5d:e0:9c:7f:85:dc:9b:6d:08:9d:
34:7e:f7:ae:33:9d:f7:84:7c:69:17:05:e5:52:f1:
47:3f:e7:df:0f:b7:fd:05:01:1d:cc:95:36:63:1e:
1f:9d:09:28:36:33:63:a7:b6:7e:37:9b:af:8e:b4:
b7:ca:58:d8:1b:c1:af:30:4f:ec:62:7e:78:7d:af:
c4:9b:95:20:0a:84:26:36:8f:06:6c:29:1d:a1:48:
72:0e:e3:5d:5b:d5:3b:8c:3d:f3:bd:69:80:2b:01:
84:a6:23:b5:d6:43:8b:d4:32:2b:9d:94:97:85:ef:
41:8f:8a:cc:1b:4f:ca:80:72:0b:23:3a:f7:97:19:
94:9a:eb:8c:02:72:f8:0b:17:4a:bd:d6:30:e0:ad:
97:b3:b4:8a:15:f9:13:93:f9:d7:53:63:83:c9:fc:
1c:12:ea:6f:3e:b0:81:57:f9:84:af:90:5a:30:67:
ca:a3:21:73:a7:fb:51:14:c0:e4:a4:90:fd:12:c6:
8e:07:0c:4d:f9:c5:ef:19:a7:2c:c9:bb:d9:58:c6:
42:b8:8d:db:7d:52:b1:e5:4f:a8:31:ca:d7:be:5f:
e5:0e:fe:fa:08:bd:ea:5e:a7:13:15:96:ff:99:5c:
eb:48:7d:60:38:19:2d:93:b1:e6:d7:9d:53:69:a3:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:86:87:19:70:64:1D:35:FB:6A:F2:5E:E2:E6:15:38:69:11:4C:12
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SoaHGXBkHTX7avJe4uYVOGkRTBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:ab:99:19:26:df:56:2e:99:68:9c:d0:7a:d0:2e:bb:c9:68:
80:af:78:02:70:1b:58:e7:82:18:04:72:ff:d1:84:28:c1:c0:
7b:d6:9d:dd:05:66:8d:1d:db:70:8a:41:e0:2d:61:3f:6e:f6:
ea:e9:cd:e6:85:d2:ff:65:94:7a:44:3c:70:25:36:27:81:0a:
59:1b:8e:1f:49:7a:15:df:5d:03:65:a5:3d:b9:b2:35:87:1b:
de:18:f1:ec:fc:f9:49:13:c6:a0:18:78:dd:10:7f:8c:0b:b3:
ed:ae:06:20:5a:ee:9a:0d:8b:7e:e1:72:05:0f:e1:67:0b:80:
41:a3:f2:d7:7b:c6:89:1d:97:0d:8e:b2:d1:7c:da:5e:36:94:
28:bc:90:d2:ba:3f:2b:fe:f2:cd:af:03:5a:2b:99:69:36:94:
a8:7a:3d:f4:fc:99:13:0c:5d:70:4b:63:1d:26:3e:92:42:1b:
b5:03:16:dc:b9:82:47:41:6d:e6:6c:11:02:3b:78:5f:bd:d4:
d8:52:7f:ad:e6:78:19:9a:5d:d5:47:ca:10:aa:2c:af:83:2b:
a8:ce:da:84:9b:a6:59:2f:94:dc:ff:8e:b2:3e:d6:63:5f:53:
5a:b2:d1:76:ae:54:3c:22:c5:8d:37:6c:a3:b2:04:d1:9f:09:
4f:8b:35:1f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYfEVfst0azlOQXN5PVCXLU5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDI3MjAwOTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTg2ODcxOTcwNjQxZDM1ZmI2YWYyNWVlMmU2MTUzODY5MTE0YzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcQdLF3gnH+F3JttCJ00fveuM533
hHxpFwXlUvFHP+ffD7f9BQEdzJU2Yx4fnQkoNjNjp7Z+N5uvjrS3yljYG8GvME/s
Yn54fa/Em5UgCoQmNo8GbCkdoUhyDuNdW9U7jD3zvWmAKwGEpiO11kOL1DIrnZSX
he9Bj4rMG0/KgHILIzr3lxmUmuuMAnL4CxdKvdYw4K2Xs7SKFfkTk/nXU2ODyfwc
EupvPrCBV/mEr5BaMGfKoyFzp/tRFMDkpJD9EsaOBwxN+cXvGacsybvZWMZCuI3b
fVKx5U+oMcrXvl/lDv76CL3qXqcTFZb/mVzrSH1gOBktk7Hm151TaaObfwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEqGhxlwZB01+2ryXuLmFThpEUwSMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvU29hSEdYQmtIVFg3YXZKZTR1WVZPR2tSVEJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADCrmRkm31YumWic0HrQ
LrvJaICveAJwG1jnghgEcv/RhCjBwHvWnd0FZo0d23CKQeAtYT9u9urpzeaF0v9l
lHpEPHAlNieBClkbjh9JehXfXQNlpT25sjWHG94Y8ez8+UkTxqAYeN0Qf4wLs+2u
BiBa7poNi37hcgUP4WcLgEGj8td7xokdlw2OstF82l42lCi8kNK6Pyv+8s2vA1or
mWk2lKh6PfT8mRMMXXBLYx0mPpJCG7UDFty5gkdBbeZsEQI7eF+91NhSf63meBma
XdVHyhCqLK+DK6jO2oSbplkvlNz/jrI+1mNfU1qy0XauVDwixY03bKOyBNGfCU+L
NR8=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:11:29 2025 by rpki-client