Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rdRk1xSXepUZbw_IyN-rZliNHgM.roa
File: rdRk1xSXepUZbw_IyN-rZliNHgM.roa (raw, json)
Hash identifier: Vt/VV4yjxUpzZIR7IwT43ldpKc2dZ3n4+CqJX1Yxj1E=
Subject key identifier: AD:D4:64:D7:14:97:7A:95:19:6F:0F:C8:C8:DF:AB:66:58:8D:1E:03
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187DC95E2CF4F54259C5EAAE05B1D483C98
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rdRk1xSXepUZbw_IyN-rZliNHgM.roa
Signing time: Tue 02 May 2023 13:10:23 +0000
ROA not before: Tue 02 May 2023 13:10:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dc:95:e2:cf:4f:54:25:9c:5e:aa:e0:5b:1d:48:3c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 2 13:10:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=add464d714977a95196f0fc8c8dfab66588d1e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:83:22:70:74:a3:16:c1:bc:42:c2:33:4c:60:
27:e3:32:08:c1:4c:71:53:69:f1:39:08:c9:82:21:
89:ac:6c:7d:8d:e3:e2:b0:b1:03:9b:cb:dd:8a:59:
86:69:39:82:2a:36:15:b9:d2:62:75:3c:7c:2b:56:
bc:66:4f:fd:b8:ed:0d:ab:11:ee:65:c4:55:f1:0e:
f4:1a:b6:fe:6b:9d:23:65:3d:c4:d9:8f:ea:a2:98:
d5:a1:dd:1c:d0:f6:38:39:d3:aa:a5:ff:db:91:05:
f5:d6:51:71:4c:a3:1c:86:e7:95:12:d2:28:c3:0b:
8f:f9:23:32:9d:88:ea:ef:0b:d9:84:89:55:ae:72:
b1:71:ec:b6:e2:ac:e7:6d:c1:d2:b6:bc:93:35:b7:
e7:86:9a:5d:09:aa:57:01:9f:9f:83:bf:43:41:6a:
6b:84:73:b7:d8:1e:93:90:26:d6:9d:c5:c4:ba:b9:
dd:74:46:f9:e9:86:3d:06:38:24:de:26:ab:ba:45:
0f:5f:4d:09:3f:06:7e:9e:ec:93:d2:81:da:9a:3f:
d1:2f:24:a3:a1:0d:39:2e:fd:3d:9b:77:0d:2d:21:
cc:21:01:d4:9a:5d:33:10:00:af:ea:dd:bd:c0:07:
76:90:b2:bd:23:cd:89:91:48:8f:e7:1a:f4:49:e7:
56:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D4:64:D7:14:97:7A:95:19:6F:0F:C8:C8:DF:AB:66:58:8D:1E:03
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rdRk1xSXepUZbw_IyN-rZliNHgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:3b:b0:9c:9d:af:cc:f0:b7:24:32:c2:b6:cb:a2:61:fb:19:
b0:8b:18:c8:20:35:7e:fa:9e:d0:87:ff:1d:f4:5b:20:78:3a:
e0:9d:8e:cf:6a:52:87:f3:88:65:e6:6e:51:5f:43:8c:a5:bf:
c4:c8:de:e6:a1:65:78:a5:ab:50:17:e0:38:34:2a:04:d8:39:
2e:da:54:92:ec:c5:87:a7:8c:c3:da:ac:7c:42:0d:fa:7f:c4:
ae:27:0e:c2:62:82:04:c8:88:17:77:be:55:65:41:a0:ee:73:
f1:0d:20:a4:9e:44:1b:a3:67:9d:a5:0e:1a:a6:25:af:62:29:
94:c8:84:ac:ce:32:2b:60:63:a9:b6:e6:54:d6:46:d7:0f:db:
62:3d:61:1c:23:f3:d8:6a:b1:66:e5:2f:1b:56:bd:ce:a9:45:
29:49:f4:d0:b6:39:cb:b3:d2:8f:11:17:f1:65:49:22:e2:c8:
66:5d:56:4a:ad:19:89:25:6b:0c:e0:b0:e1:3c:3f:35:d5:37:
93:5b:c7:32:70:19:53:02:b0:76:a9:26:66:cc:6c:36:aa:a5:
23:72:88:bd:3d:5d:d8:ca:80:bf:d3:42:e6:cd:70:48:50:e5:
0d:c5:08:77:d3:7f:a7:45:f6:8d:74:0b:16:04:43:5c:9d:c5:
7c:45:7b:a6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYfcleLPT1QlnF6q4FsdSDyYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTAyMTMxMDIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGQ0NjRkNzE0OTc3YTk1MTk2ZjBmYzhjOGRmYWI2NjU4OGQxZTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYMicHSjFsG8QsIzTGAn4zIIwUxx
U2nxOQjJgiGJrGx9jePisLEDm8vdilmGaTmCKjYVudJidTx8K1a8Zk/9uO0NqxHu
ZcRV8Q70Grb+a50jZT3E2Y/qopjVod0c0PY4OdOqpf/bkQX11lFxTKMchueVEtIo
wwuP+SMynYjq7wvZhIlVrnKxcey24qznbcHStryTNbfnhppdCapXAZ+fg79DQWpr
hHO32B6TkCbWncXEurnddEb56YY9Bjgk3iarukUPX00JPwZ+nuyT0oHamj/RLySj
oQ05Lv09m3cNLSHMIQHUml0zEACv6t29wAd2kLK9I82JkUiP5xr0SedW3wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFK3UZNcUl3qVGW8PyMjfq2ZYjR4DMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcmRSazF4U1hlcFVaYndfSXlOLXJabGlOSGdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEc7sJydr8zwtyQywrbL
omH7GbCLGMggNX76ntCH/x30WyB4OuCdjs9qUofziGXmblFfQ4ylv8TI3uahZXil
q1AX4Dg0KgTYOS7aVJLsxYenjMParHxCDfp/xK4nDsJiggTIiBd3vlVlQaDuc/EN
IKSeRBujZ52lDhqmJa9iKZTIhKzOMitgY6m25lTWRtcP22I9YRwj89hqsWblLxtW
vc6pRSlJ9NC2Ocuz0o8RF/FlSSLiyGZdVkqtGYklawzgsOE8PzXVN5NbxzJwGVMC
sHapJmbMbDaqpSNyiL09XdjKgL/TQubNcEhQ5Q3FCHfTf6dF9o10CxYEQ1ydxXxF
e6Y=
-----END CERTIFICATE-----
Generated at Mon Jun 9 01:54:11 2025 by rpki-client