Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y4bFpUOQZAOicotIGlgNVewCVk0.roa
File: Y4bFpUOQZAOicotIGlgNVewCVk0.roa (raw, json)
Hash identifier: DfY1kv8DSvfr6Rhg4VhdUafm3Jt6NgW3GyMr8dItu4g=
Subject key identifier: 63:86:C5:A5:43:90:64:03:A2:72:8B:48:1A:58:0D:55:EC:02:56:4D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187A760091E340F28F583F3F006DACBAE67
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y4bFpUOQZAOicotIGlgNVewCVk0.roa
Signing time: Sat 22 Apr 2023 05:11:41 +0000
ROA not before: Sat 22 Apr 2023 05:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a7:60:09:1e:34:0f:28:f5:83:f3:f0:06:da:cb:ae:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 22 05:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6386c5a543906403a2728b481a580d55ec02564d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:89:cb:a9:58:11:c5:79:e1:ba:fa:08:18:4f:
ff:bb:8d:ae:d5:7f:76:c2:a9:03:ca:fd:a3:fd:77:
3c:6a:5b:70:65:3b:99:57:96:5c:9c:08:78:db:83:
4a:6a:df:c8:7f:3d:87:4e:19:7f:03:71:b8:7c:08:
e9:cb:49:b2:25:33:b0:89:0c:20:f3:61:c4:a0:25:
74:4f:86:be:f7:69:15:86:01:79:43:89:33:c1:d3:
47:a7:10:d1:68:34:ff:2b:43:4b:f9:0d:a3:30:88:
b0:51:29:c8:40:24:75:0e:ec:25:f8:33:53:00:db:
14:b9:b1:ae:ab:98:50:fe:3a:cb:54:fb:1f:6b:7e:
ba:44:92:a3:af:57:5f:b5:d3:e7:e9:3e:9f:79:5a:
d1:54:d9:b4:71:2e:1a:3f:1a:ab:0b:2a:4b:a3:d2:
c3:62:e5:52:99:2d:3b:a1:8b:48:f4:2a:8a:39:02:
52:1d:b1:71:21:dd:a0:3c:bf:3f:61:7b:89:f7:9b:
67:38:15:02:19:7b:98:e9:21:08:ac:b6:03:97:a8:
bb:1f:00:ea:1f:c2:28:df:ba:0b:7c:bf:2d:07:3a:
f9:cd:7b:05:82:2c:79:4d:ee:06:31:09:2d:a8:5d:
c7:57:aa:d9:2c:94:03:ff:90:71:09:f8:05:6f:39:
cf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:86:C5:A5:43:90:64:03:A2:72:8B:48:1A:58:0D:55:EC:02:56:4D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y4bFpUOQZAOicotIGlgNVewCVk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:5c:1a:c1:89:f4:22:39:83:5e:fa:b2:eb:52:25:8c:84:ce:
b3:b2:17:6d:ab:e7:5f:73:1e:4d:05:b7:ea:6f:56:7e:9d:32:
98:b6:48:48:d1:5e:d1:e3:57:9e:9b:f2:16:5b:ed:29:15:ed:
96:e1:91:de:2e:a3:c5:8b:96:7e:c3:4b:a0:ca:9f:52:44:22:
ae:b4:32:ad:d5:40:a7:f2:44:27:01:db:fc:b9:aa:2b:8d:59:
fb:35:9e:ef:11:23:a0:47:2f:ec:75:6b:8c:8e:5a:6b:a7:2b:
6c:ec:d1:4d:7a:59:7c:ec:fa:94:f9:72:97:ed:dc:60:35:5a:
98:94:8e:8d:7c:c0:f2:c5:c0:71:ca:d6:5c:a8:ab:53:8f:78:
a5:62:b9:a3:cb:b3:98:73:28:7d:7c:b6:cd:5d:6f:ab:9f:52:
30:a0:a8:13:ac:fc:fc:d0:06:2e:49:6e:ec:3a:c1:ec:64:0f:
c1:16:1f:db:f3:c9:70:69:54:45:b5:9b:f5:ff:7e:a9:a9:b5:
60:0e:c6:f3:bb:f8:f8:98:7e:12:ef:72:f7:f2:93:ec:51:b8:
45:a6:e9:3b:23:85:4a:26:2e:eb:1d:54:f6:c5:b8:c4:9f:bd:
30:92:dc:4d:bf:43:5d:fd:e9:12:87:6a:62:2b:2d:71:12:68:
9f:25:28:4a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYenYAkeNA8o9YPz8Abay65nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDIyMDUxMTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Mzg2YzVhNTQzOTA2NDAzYTI3MjhiNDgxYTU4MGQ1NWVjMDI1NjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YnLqVgRxXnhuvoIGE//u42u1X92
wqkDyv2j/Xc8altwZTuZV5ZcnAh424NKat/Ifz2HThl/A3G4fAjpy0myJTOwiQwg
82HEoCV0T4a+92kVhgF5Q4kzwdNHpxDRaDT/K0NL+Q2jMIiwUSnIQCR1Duwl+DNT
ANsUubGuq5hQ/jrLVPsfa366RJKjr1dftdPn6T6feVrRVNm0cS4aPxqrCypLo9LD
YuVSmS07oYtI9CqKOQJSHbFxId2gPL8/YXuJ95tnOBUCGXuY6SEIrLYDl6i7HwDq
H8Io37oLfL8tBzr5zXsFgix5Te4GMQktqF3HV6rZLJQD/5BxCfgFbznPBQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGOGxaVDkGQDonKLSBpYDVXsAlZNMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWTRiRnBVT1FaQU9pY290SUdsZ05WZXdDVmswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEtcGsGJ9CI5g176sutS
JYyEzrOyF22r519zHk0Ft+pvVn6dMpi2SEjRXtHjV56b8hZb7SkV7Zbhkd4uo8WL
ln7DS6DKn1JEIq60Mq3VQKfyRCcB2/y5qiuNWfs1nu8RI6BHL+x1a4yOWmunK2zs
0U16WXzs+pT5cpft3GA1WpiUjo18wPLFwHHK1lyoq1OPeKViuaPLs5hzKH18ts1d
b6ufUjCgqBOs/PzQBi5Jbuw6wexkD8EWH9vzyXBpVEW1m/X/fqmptWAOxvO7+PiY
fhLvcvfyk+xRuEWm6TsjhUomLusdVPbFuMSfvTCS3E2/Q1396RKHamIrLXESaJ8l
KEo=
-----END CERTIFICATE-----
Generated at Wed Jun 11 02:58:46 2025 by rpki-client