Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V9-I4JjrC-iuWmUfIxCgJ8EroyQ.roa
File: V9-I4JjrC-iuWmUfIxCgJ8EroyQ.roa (raw, json)
Hash identifier: dSPa8xNNS/S7mH9doww4WygjAeYI2Mdxr7ouQdzHXH0=
Subject key identifier: 57:DF:88:E0:98:EB:0B:E8:AE:5A:65:1F:23:10:A0:27:C1:2B:A3:24
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187E7509A86F3C3BE2EBC4457D8DDAC7D43
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V9-I4JjrC-iuWmUfIxCgJ8EroyQ.roa
Signing time: Thu 04 May 2023 15:10:32 +0000
ROA not before: Thu 04 May 2023 15:10:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e7:50:9a:86:f3:c3:be:2e:bc:44:57:d8:dd:ac:7d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 4 15:10:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57df88e098eb0be8ae5a651f2310a027c12ba324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:74:3c:1f:ab:8b:93:18:5a:32:f2:70:ae:a5:
03:27:c9:a3:3c:a7:ad:b8:39:40:68:6a:d5:24:86:
15:7e:4f:2f:ce:72:ca:b8:05:b7:85:18:f1:b7:1f:
27:c1:8e:c7:55:67:90:86:b4:80:ab:fb:8d:d1:02:
02:b8:b5:4d:5a:e3:f9:e9:d4:b2:91:da:72:83:30:
f1:10:06:0d:4c:19:80:6e:d9:a7:7b:fc:c0:5e:0e:
9c:cc:0b:0c:c2:ff:ed:b2:ae:a5:2d:ce:4c:3d:90:
77:b7:62:cc:0a:5a:89:0b:e2:3a:99:4b:75:31:76:
c7:32:61:82:0d:f9:29:38:b5:c8:7b:0e:4a:cd:87:
71:b5:bc:0f:37:55:85:2b:2a:1f:e4:4f:36:1e:6c:
0a:34:7d:95:1d:20:b8:95:a5:f0:a9:d7:78:04:72:
3c:1f:06:ef:35:22:8e:b3:47:50:bd:24:2a:a9:32:
0a:57:39:11:39:6f:4d:d4:f8:c2:21:aa:43:e0:d2:
85:0b:31:f6:77:f3:d5:f0:bd:c6:65:a1:e0:45:d3:
4e:1d:14:93:8e:2b:8f:2f:9c:fa:9c:59:a2:59:b3:
66:64:52:62:63:b7:86:23:ec:fd:a5:aa:93:6f:d2:
98:ab:c7:ef:9a:0a:f7:7b:2b:f3:42:5d:ed:26:41:
1f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DF:88:E0:98:EB:0B:E8:AE:5A:65:1F:23:10:A0:27:C1:2B:A3:24
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V9-I4JjrC-iuWmUfIxCgJ8EroyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:b2:02:6f:6e:39:72:cf:7b:27:a7:da:36:4f:87:d4:ed:08:
8e:33:7a:ea:45:5b:70:da:82:50:94:13:db:f2:5e:7e:a8:99:
77:f8:8a:f1:7d:20:a5:90:fa:4e:3f:1c:d3:0e:03:60:96:01:
20:1f:ae:ad:85:82:b1:cf:63:d5:c6:de:b5:c0:9e:78:8b:de:
6b:69:7f:58:a6:fc:da:a4:ce:bf:01:1e:86:53:f7:71:3e:85:
bd:8f:8d:c7:f2:67:23:d9:e0:3d:09:c9:44:c1:9f:33:07:d8:
93:e1:35:dd:93:14:b0:c2:28:06:f5:e5:8a:b3:b6:41:8c:83:
5e:ee:c5:ea:ca:26:95:20:08:84:b8:a4:31:d0:26:e0:81:a7:
5e:f7:78:91:8a:f2:6a:1e:d6:99:b6:65:1e:f4:54:69:7e:6e:
8e:e8:cb:d4:6c:d5:58:de:c8:78:1f:3b:b9:af:f5:5f:86:4e:
95:30:fc:ed:34:96:af:56:48:f0:df:b6:de:80:9b:a1:84:8f:
04:2f:50:ed:9e:4e:45:c0:56:1f:92:a7:f3:3c:bc:ba:50:bf:
24:0e:31:a4:16:6d:a7:9c:a0:ab:2f:b1:e8:1d:94:44:14:f4:
8f:c1:a6:95:03:4d:5a:9f:79:8c:a9:a4:5a:fd:9e:19:8a:4d:
c2:b8:84:ff
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYfnUJqG88O+LrxEV9jdrH1DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTA0MTUxMDMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2RmODhlMDk4ZWIwYmU4YWU1YTY1MWYyMzEwYTAyN2MxMmJhMzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXQ8H6uLkxhaMvJwrqUDJ8mjPKet
uDlAaGrVJIYVfk8vznLKuAW3hRjxtx8nwY7HVWeQhrSAq/uN0QICuLVNWuP56dSy
kdpygzDxEAYNTBmAbtmne/zAXg6czAsMwv/tsq6lLc5MPZB3t2LMClqJC+I6mUt1
MXbHMmGCDfkpOLXIew5KzYdxtbwPN1WFKyof5E82HmwKNH2VHSC4laXwqdd4BHI8
HwbvNSKOs0dQvSQqqTIKVzkROW9N1PjCIapD4NKFCzH2d/PV8L3GZaHgRdNOHRST
jiuPL5z6nFmiWbNmZFJiY7eGI+z9paqTb9KYq8fvmgr3eyvzQl3tJkEfDwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFffiOCY6wvorlplHyMQoCfBK6MkMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVjktSTRKanJDLWl1V21VZkl4Q2dKOEVyb3lRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG6yAm9uOXLPeyen2jZP
h9TtCI4zeupFW3DaglCUE9vyXn6omXf4ivF9IKWQ+k4/HNMOA2CWASAfrq2FgrHP
Y9XG3rXAnniL3mtpf1im/Nqkzr8BHoZT93E+hb2PjcfyZyPZ4D0JyUTBnzMH2JPh
Nd2TFLDCKAb15YqztkGMg17uxerKJpUgCIS4pDHQJuCBp173eJGK8moe1pm2ZR70
VGl+bo7oy9Rs1VjeyHgfO7mv9V+GTpUw/O00lq9WSPDftt6Am6GEjwQvUO2eTkXA
Vh+Sp/M8vLpQvyQOMaQWbaecoKsvsegdlEQU9I/BppUDTVqfeYyppFr9nhmKTcK4
hP8=
-----END CERTIFICATE-----
Generated at Mon Jun 9 13:11:57 2025 by rpki-client