Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hY2BPtR2DfH2P12jgfD5TD68iIA.roa
File: hY2BPtR2DfH2P12jgfD5TD68iIA.roa (raw, json)
Hash identifier: Xd2Mk8t1wVA3EgPDuhZYwWzXlCgPXGv8WOmIADAJjZ0=
Subject key identifier: 85:8D:81:3E:D4:76:0D:F1:F6:3F:5D:A3:81:F0:F9:4C:3E:BC:88:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01886C22444B03214884B0B500F384A5318D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hY2BPtR2DfH2P12jgfD5TD68iIA.roa
Signing time: Tue 30 May 2023 10:09:24 +0000
ROA not before: Tue 30 May 2023 10:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6c:22:44:4b:03:21:48:84:b0:b5:00:f3:84:a5:31:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 30 10:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=858d813ed4760df1f63f5da381f0f94c3ebc8880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:91:13:6c:99:a9:fa:d4:9c:16:20:bc:5d:1e:
7e:fa:86:28:ea:a4:1b:d3:e1:32:48:0b:12:1b:8d:
ef:ff:b0:cb:35:18:d3:1e:69:68:e7:de:9b:74:82:
b3:51:d2:8f:3a:32:67:50:4b:18:d9:18:2e:7a:46:
e9:33:7c:b8:82:c2:9a:07:5d:06:b0:70:94:a9:7e:
6d:49:2b:f7:5a:f7:8d:58:94:65:f0:6b:d1:7e:ad:
f4:07:2f:8e:85:72:e1:16:a9:86:9a:ea:a9:dc:c2:
48:fe:33:a6:f6:cc:a0:aa:b8:5f:e0:7c:48:78:be:
32:a1:9c:fb:f9:36:c3:80:27:c5:74:2c:6c:ca:1b:
b0:9d:8a:30:e6:77:1c:fc:83:55:39:36:fa:97:93:
2a:4e:a3:1b:f3:81:b7:31:1a:fe:52:25:b5:f8:b2:
e6:14:e0:01:ac:3b:b2:8f:c8:d5:e8:86:78:7f:96:
6e:fe:d2:7d:7e:e6:8c:54:24:98:29:6f:05:d4:50:
71:c5:9e:c8:3c:9d:b8:07:10:34:c9:da:fa:77:8a:
eb:94:b2:c5:64:b8:a5:46:9b:16:de:18:f8:03:dd:
dd:f8:4c:07:5a:8a:a2:16:cd:1c:a7:3f:51:1d:9c:
bd:a3:8e:0e:ba:2c:2b:bc:63:60:65:15:ff:7e:0f:
dc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8D:81:3E:D4:76:0D:F1:F6:3F:5D:A3:81:F0:F9:4C:3E:BC:88:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hY2BPtR2DfH2P12jgfD5TD68iIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:5b:b6:fc:d6:66:cb:d2:8f:df:70:e9:ee:20:66:e3:02:c3:
ae:ef:cd:bd:47:84:e0:39:b1:f4:d9:3b:8e:95:9c:50:01:9c:
1d:34:9e:d7:27:ed:3c:80:3b:1f:7f:9c:63:64:6b:90:76:8f:
04:25:d1:3f:d9:97:10:e3:24:db:ae:e6:97:e8:b4:00:4b:91:
ee:06:b4:8a:e4:51:c6:07:8c:8d:bb:97:34:f5:06:2a:0b:75:
64:6c:ab:60:c4:9c:6a:bb:a7:58:72:50:81:8f:5f:94:43:54:
f9:d6:6c:2c:de:f5:b2:67:07:9c:4e:95:75:33:eb:84:f3:5e:
45:65:73:85:c4:b3:cb:c1:58:6d:b2:f6:29:df:44:cb:99:0c:
88:65:0f:43:ff:b2:8d:fa:f7:cf:cb:28:8f:0c:71:e9:f3:87:
8b:4f:af:0a:e1:cf:2a:ac:9a:b4:e3:f8:62:da:36:66:69:76:
10:33:11:58:bf:9a:c4:a1:58:23:c2:1a:d6:3c:23:87:5a:18:
7e:ae:09:68:3f:27:05:bd:18:e0:4c:fe:82:e8:e8:40:93:89:
5d:f3:75:0d:c8:30:b8:ac:d1:61:06:19:b3:23:4f:c3:69:0b:
88:33:41:0f:04:38:ab:d9:29:8c:94:87:38:05:54:5d:dc:2c:
92:fd:2f:1e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhsIkRLAyFIhLC1APOEpTGNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTMwMTAwOTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NThkODEzZWQ0NzYwZGYxZjYzZjVkYTM4MWYwZjk0YzNlYmM4ODgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5ETbJmp+tScFiC8XR5++oYo6qQb
0+EySAsSG43v/7DLNRjTHmlo596bdIKzUdKPOjJnUEsY2RguekbpM3y4gsKaB10G
sHCUqX5tSSv3WveNWJRl8GvRfq30By+OhXLhFqmGmuqp3MJI/jOm9sygqrhf4HxI
eL4yoZz7+TbDgCfFdCxsyhuwnYow5ncc/INVOTb6l5MqTqMb84G3MRr+UiW1+LLm
FOABrDuyj8jV6IZ4f5Zu/tJ9fuaMVCSYKW8F1FBxxZ7IPJ24BxA0ydr6d4rrlLLF
ZLilRpsW3hj4A93d+EwHWoqiFs0cpz9RHZy9o44OuiwrvGNgZRX/fg/cKwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIWNgT7Udg3x9j9do4Hw+Uw+vIiAMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvaFkyQlB0UjJEZkgyUDEyamdmRDVURDY4aUlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGdbtvzWZsvSj99w6e4g
ZuMCw67vzb1HhOA5sfTZO46VnFABnB00ntcn7TyAOx9/nGNka5B2jwQl0T/ZlxDj
JNuu5pfotABLke4GtIrkUcYHjI27lzT1BioLdWRsq2DEnGq7p1hyUIGPX5RDVPnW
bCze9bJnB5xOlXUz64TzXkVlc4XEs8vBWG2y9infRMuZDIhlD0P/so3698/LKI8M
cenzh4tPrwrhzyqsmrTj+GLaNmZpdhAzEVi/msShWCPCGtY8I4daGH6uCWg/JwW9
GOBM/oLo6ECTiV3zdQ3IMLis0WEGGbMjT8NpC4gzQQ8EOKvZKYyUhzgFVF3cLJL9
Lx4=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:30 2025 by rpki-client