Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/niZvPY7XeI1MPqzwl-TnXZ9UuTI.roa
File: niZvPY7XeI1MPqzwl-TnXZ9UuTI.roa (raw, json)
Hash identifier: xnEva7yHIHsHdesaupe8HKAIaAGwmVIMqsDsk3uUsLg=
Subject key identifier: 9E:26:6F:3D:8E:D7:78:8D:4C:3E:AC:F0:97:E4:E7:5D:9F:54:B9:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018891B3B235D0CA3BA26F837060F649F2F0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/niZvPY7XeI1MPqzwl-TnXZ9UuTI.roa
Signing time: Tue 06 Jun 2023 17:14:12 +0000
ROA not before: Tue 06 Jun 2023 17:14:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:b3:b2:35:d0:ca:3b:a2:6f:83:70:60:f6:49:f2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 6 17:14:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e266f3d8ed7788d4c3eacf097e4e75d9f54b932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d8:b8:a4:60:5f:40:73:c9:69:46:20:54:54:
7f:11:f6:2e:22:20:88:17:de:fe:93:4a:66:cd:5c:
e3:dc:c1:09:75:81:60:e5:f3:41:d8:e5:ca:9f:40:
f1:fa:af:6a:b0:c9:f3:30:e2:9b:68:9a:03:21:1a:
47:cd:6b:65:6a:66:df:d3:81:86:3f:30:f0:c5:a8:
e8:a0:c2:5c:94:58:4e:40:f0:26:d7:f9:9a:10:ce:
f0:3d:2f:3f:4a:35:22:1e:63:f4:00:84:00:4d:1d:
55:c3:7c:7c:67:7a:a6:7b:da:ae:45:29:33:01:8f:
85:f5:48:8b:cf:e2:f8:0f:63:88:2a:86:6a:73:7d:
ab:22:c9:6e:8c:db:90:08:ce:bc:53:0f:bd:0a:15:
ca:68:d6:4b:08:82:23:47:7f:17:67:26:fb:dd:fa:
93:5c:d3:c2:be:b9:45:b5:c2:c5:06:6b:83:3a:fa:
c1:ae:c9:7e:ad:b6:e7:4c:ce:6a:f2:6c:a3:84:dd:
95:38:cc:a5:6c:1a:25:03:f3:48:1c:3e:ab:28:49:
08:67:3f:8f:e8:71:aa:71:d9:9b:67:13:11:99:70:
f1:6d:f4:ef:66:58:5e:ff:4f:92:a0:d4:f2:81:77:
00:6a:e1:94:a6:ab:30:e2:df:a7:76:3f:5c:9d:03:
0f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:26:6F:3D:8E:D7:78:8D:4C:3E:AC:F0:97:E4:E7:5D:9F:54:B9:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/niZvPY7XeI1MPqzwl-TnXZ9UuTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:9c:8c:f6:d2:fd:45:ba:e6:a3:56:07:61:49:63:f7:3f:9d:
e0:28:6f:19:2c:ff:fa:34:f2:9f:c8:8a:6d:05:21:c3:1c:c8:
b8:5f:81:63:f2:48:54:20:45:ec:2b:d2:87:7b:29:55:68:0f:
d9:2a:0f:e9:e0:fd:ec:6e:95:7e:bf:d7:d8:e3:34:fe:98:61:
ac:08:46:9c:c3:90:29:18:a9:8f:d7:92:44:8e:03:53:47:5f:
a2:ac:be:fc:b1:c8:ad:2b:43:b9:18:ca:5e:58:a1:da:88:d4:
d6:ca:6e:54:68:2d:26:07:09:a1:f4:a8:0d:19:f8:2f:84:20:
c6:79:16:4f:ed:c2:0b:48:7f:c9:08:84:2f:06:71:c5:8e:e3:
19:38:90:63:87:0f:0b:da:68:5d:96:55:ce:ab:9c:72:19:ef:
23:74:53:02:0e:10:16:f0:7c:39:b1:41:d5:7f:3c:26:df:bc:
15:71:94:49:f4:3c:8b:68:2d:20:37:f0:e6:97:1d:cd:56:67:
2c:27:67:f9:d0:28:db:3c:16:73:53:95:d4:2c:7f:6e:2e:f6:
de:5d:73:6d:51:fc:1b:af:ef:ff:9f:58:fe:c2:4a:4a:a2:86:
16:33:b3:12:38:5e:15:34:9f:62:ee:50:2c:d1:73:77:4c:d9:
2b:bf:7d:88
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYiRs7I10Mo7om+DcGD2SfLwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjA2MTcxNDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTI2NmYzZDhlZDc3ODhkNGMzZWFjZjA5N2U0ZTc1ZDlmNTRiOTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9i4pGBfQHPJaUYgVFR/EfYuIiCI
F97+k0pmzVzj3MEJdYFg5fNB2OXKn0Dx+q9qsMnzMOKbaJoDIRpHzWtlambf04GG
PzDwxajooMJclFhOQPAm1/maEM7wPS8/SjUiHmP0AIQATR1Vw3x8Z3qme9quRSkz
AY+F9UiLz+L4D2OIKoZqc32rIslujNuQCM68Uw+9ChXKaNZLCIIjR38XZyb73fqT
XNPCvrlFtcLFBmuDOvrBrsl+rbbnTM5q8myjhN2VOMylbBolA/NIHD6rKEkIZz+P
6HGqcdmbZxMRmXDxbfTvZlhe/0+SoNTygXcAauGUpqsw4t+ndj9cnQMPdwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJ4mbz2O13iNTD6s8Jfk512fVLkyMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbmladlBZN1hlSTFNUHF6d2wtVG5YWjlVdVRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKWcjPbS/UW65qNWB2FJ
Y/c/neAobxks//o08p/Iim0FIcMcyLhfgWPySFQgRewr0od7KVVoD9kqD+ng/exu
lX6/19jjNP6YYawIRpzDkCkYqY/XkkSOA1NHX6KsvvyxyK0rQ7kYyl5YodqI1NbK
blRoLSYHCaH0qA0Z+C+EIMZ5Fk/twgtIf8kIhC8GccWO4xk4kGOHDwvaaF2WVc6r
nHIZ7yN0UwIOEBbwfDmxQdV/PCbfvBVxlEn0PItoLSA38OaXHc1WZywnZ/nQKNs8
FnNTldQsf24u9t5dc21R/Buv7/+fWP7CSkqihhYzsxI4XhU0n2LuUCzRc3dM2Su/
fYg=
-----END CERTIFICATE-----
Generated at Mon Jun 9 20:00:34 2025 by rpki-client