Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iSVgePQ3d9c1FKuOWY1bkboNRfM.roa
File: iSVgePQ3d9c1FKuOWY1bkboNRfM.roa (raw, json)
Hash identifier: x0IhV1sUyXIUFZbGLlYQsYw7vigk1ojh+xtuJZjxf+o=
Subject key identifier: 89:25:60:78:F4:37:77:D7:35:14:AB:8E:59:8D:5B:91:BA:0D:45:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F91BAD706A315753EDCB62BC37F63C37
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iSVgePQ3d9c1FKuOWY1bkboNRfM.roa
Signing time: Tue 15 Aug 2023 12:11:27 +0000
ROA not before: Tue 15 Aug 2023 12:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f9:1b:ad:70:6a:31:57:53:ed:cb:62:bc:37:f6:3c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 12:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89256078f43777d73514ab8e598d5b91ba0d45f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:60:44:95:d7:ed:d3:99:d4:86:7c:e9:b7:94:
97:7e:a5:50:2c:dd:96:e1:e9:f6:48:c7:8a:95:bb:
71:63:f9:b4:0a:d8:3e:7c:b9:04:13:dc:3e:8b:2e:
b6:76:c3:10:bc:15:17:46:ac:1c:5c:99:61:c5:bf:
b8:3e:c4:a5:b6:5a:91:3c:37:55:13:96:ba:ef:58:
8d:bc:b2:13:ca:4d:a2:ee:b2:c3:e5:6f:0b:fe:59:
3b:fc:cb:d5:8b:24:72:df:27:f2:40:03:f5:fa:64:
de:b1:4a:c3:63:a9:95:32:84:64:18:70:1e:eb:2b:
3d:ae:e6:0d:ee:e1:74:e8:f3:17:8b:23:41:d2:cc:
f5:36:de:db:aa:2f:22:85:e5:1a:9f:d3:d8:11:95:
5c:b7:83:41:b6:76:83:90:90:e4:b5:41:e2:ed:5b:
4c:db:65:32:d9:7f:78:1b:ef:06:d6:ef:96:67:91:
cf:1d:aa:9a:41:72:35:c2:f7:7e:b6:7d:5b:25:c7:
71:59:04:b6:23:95:b5:6e:db:16:06:48:00:55:51:
76:28:50:63:2e:01:92:4d:b2:d9:fe:26:cc:46:e6:
85:03:88:e7:eb:f6:ba:af:18:09:85:4b:00:34:30:
ef:20:eb:ac:f5:f6:c1:b4:a8:4d:dd:a6:08:6c:af:
0a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:25:60:78:F4:37:77:D7:35:14:AB:8E:59:8D:5B:91:BA:0D:45:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iSVgePQ3d9c1FKuOWY1bkboNRfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:5e:7c:95:e1:f0:54:67:14:6c:85:ff:45:33:56:9c:a5:c2:
47:50:07:1f:cc:39:13:5c:45:9d:16:88:03:5f:29:05:ff:f3:
24:97:c2:8b:c2:37:0b:ed:f4:3a:64:1c:19:0e:87:af:a4:8b:
fa:78:ad:fe:9d:85:4d:30:67:1b:a2:56:93:8a:47:46:0e:16:
7e:03:e1:01:dc:3d:6d:00:3c:98:91:6d:7c:86:26:c4:07:6c:
2f:b4:57:09:9c:29:4a:2a:25:c3:43:1d:96:fe:95:4c:75:00:
f8:b5:60:e7:1d:9a:07:b5:4a:d8:bb:fa:72:25:24:2b:db:70:
62:5d:d8:c9:48:5b:bc:90:95:aa:76:12:f0:25:5d:db:01:d9:
e2:dd:c8:7d:4f:0c:7f:76:b3:c5:37:a6:fd:75:77:de:6c:a4:
2e:53:17:82:28:2e:db:f9:a7:83:83:c0:cf:5e:dc:89:ec:9e:
16:79:f1:ff:b1:a0:91:fd:45:52:dc:02:bf:ed:d6:77:42:c8:
b7:b9:cb:02:3b:2b:53:76:e5:10:4e:5e:5b:5d:bf:3d:09:f7:
0a:34:e0:ce:a3:e5:b5:23:90:59:c0:3e:90:c5:37:72:98:ce:
df:5e:2f:cc:ea:86:b5:72:04:53:d5:d3:3b:d9:28:6c:a4:f5:
28:81:57:ef
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYn5G61wajFXU+3LYrw39jw3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODE1MTIxMTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTI1NjA3OGY0Mzc3N2Q3MzUxNGFiOGU1OThkNWI5MWJhMGQ0NWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9GBEldft05nUhnzpt5SXfqVQLN2W
4en2SMeKlbtxY/m0Ctg+fLkEE9w+iy62dsMQvBUXRqwcXJlhxb+4PsSltlqRPDdV
E5a671iNvLITyk2i7rLD5W8L/lk7/MvViyRy3yfyQAP1+mTesUrDY6mVMoRkGHAe
6ys9ruYN7uF06PMXiyNB0sz1Nt7bqi8iheUan9PYEZVct4NBtnaDkJDktUHi7VtM
22Uy2X94G+8G1u+WZ5HPHaqaQXI1wvd+tn1bJcdxWQS2I5W1btsWBkgAVVF2KFBj
LgGSTbLZ/ibMRuaFA4jn6/a6rxgJhUsANDDvIOus9fbBtKhN3aYIbK8KNQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIklYHj0N3fXNRSrjlmNW5G6DUXzMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvaVNWZ2VQUTNkOWMxRkt1T1dZMWJrYm9OUmZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADhefJXh8FRnFGyF/0Uz
VpylwkdQBx/MORNcRZ0WiANfKQX/8ySXwovCNwvt9DpkHBkOh6+ki/p4rf6dhU0w
ZxuiVpOKR0YOFn4D4QHcPW0APJiRbXyGJsQHbC+0VwmcKUoqJcNDHZb+lUx1APi1
YOcdmge1Sti7+nIlJCvbcGJd2MlIW7yQlap2EvAlXdsB2eLdyH1PDH92s8U3pv11
d95spC5TF4IoLtv5p4ODwM9e3InsnhZ58f+xoJH9RVLcAr/t1ndCyLe5ywI7K1N2
5RBOXltdvz0J9wo04M6j5bUjkFnAPpDFN3KYzt9eL8zqhrVyBFPV0zvZKGyk9SiB
V+8=
-----END CERTIFICATE-----
Generated at Wed Jun 11 11:52:07 2025 by rpki-client