Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x10P-gvkIF9RlIObdkZ5Ex6KX6s.roa
File: x10P-gvkIF9RlIObdkZ5Ex6KX6s.roa (raw, json)
Hash identifier: V3TMuBs45ObyRdi9KKgiKaH8RvdCRiHW7kQeAWxYOLg=
Subject key identifier: C7:5D:0F:FA:0B:E4:20:5F:51:94:83:9B:76:46:79:13:1E:8A:5F:AB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018770D8CB6AFA009DA24BBF97A0C403843B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x10P-gvkIF9RlIObdkZ5Ex6KX6s.roa
Signing time: Tue 11 Apr 2023 15:04:28 +0000
ROA not before: Tue 11 Apr 2023 15:04:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:70d8:a766/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:d8:cb:6a:fa:00:9d:a2:4b:bf:97:a0:c4:03:84:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 11 15:04:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c75d0ffa0be4205f5194839b764679131e8a5fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c4:be:65:44:0a:cd:87:82:3c:06:e2:3d:1a:
70:a3:16:cd:58:c2:fc:d7:12:51:02:08:37:c5:a0:
1b:93:07:4e:aa:f4:51:cc:69:98:6c:1e:a1:d8:9f:
8b:56:dc:8b:77:f3:ee:23:80:c9:a8:ea:72:b1:2f:
53:35:51:97:f7:48:f1:c7:ee:d2:1a:86:48:0c:c1:
d6:00:77:e0:9d:9c:0d:3c:16:d5:5e:5f:6f:8e:02:
74:75:41:7c:e0:f8:07:14:12:36:cf:0e:7b:5a:5a:
ff:be:09:8d:cb:48:a4:c4:7c:e4:11:c4:8b:3c:02:
2e:54:a3:f2:87:6e:81:37:b1:59:e9:52:be:3e:e8:
3f:fb:bb:f7:4f:b9:ed:4a:b6:42:42:f2:f2:9d:46:
4b:10:12:31:48:7a:ca:eb:5c:c0:f3:9b:56:3d:e6:
c6:1b:09:ca:f7:95:3f:e0:bb:bc:c5:39:16:d2:72:
97:56:22:8a:f1:5f:b2:b7:68:2a:3a:51:82:96:56:
cd:2d:5c:8e:98:ab:f0:ea:e6:0a:04:0f:b3:be:36:
f0:8e:36:7a:0e:90:9b:3c:c0:75:f0:82:12:2d:78:
09:7a:b3:18:0b:1a:30:61:f6:e3:e4:69:09:dd:a6:
bf:53:8c:ac:a2:48:9c:2b:41:8c:ce:b9:69:c4:94:
13:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5D:0F:FA:0B:E4:20:5F:51:94:83:9B:76:46:79:13:1E:8A:5F:AB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x10P-gvkIF9RlIObdkZ5Ex6KX6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:52:36:2d:46:1b:c1:5c:83:0d:93:1c:92:b6:e4:11:d0:67:
8d:17:4c:70:34:f9:03:c3:40:51:2c:7b:fd:6e:3f:50:39:86:
de:ff:ec:2b:0a:2c:2a:e3:18:69:1f:f9:60:2f:34:0c:10:f1:
f3:08:b3:d4:18:e2:0d:6f:c0:d2:01:dc:94:bb:21:e1:61:60:
6d:1c:16:60:5b:80:aa:4b:a6:5b:bd:d1:16:6d:25:70:14:5c:
80:20:1f:b7:a4:6b:a2:42:9f:1d:10:4e:4d:dc:6f:07:d4:1c:
20:cb:1a:41:59:b4:f8:ae:cd:d6:02:2d:0c:60:65:2f:f9:87:
92:34:fb:0b:e5:88:7b:9a:c6:d7:00:2a:54:c0:85:3e:e4:f9:
1b:35:bf:53:41:d6:e0:0e:20:e9:d0:28:5d:33:96:46:e6:3b:
a3:a5:6d:5b:82:26:69:cd:80:b1:7d:1b:00:74:40:bb:d0:72:
33:ec:fb:fc:fd:51:9f:3c:f9:22:b0:82:16:10:b9:9b:f3:06:
07:67:5f:0c:05:06:0f:14:ba:48:6f:85:9f:38:2e:e2:99:62:
4e:fb:8d:ed:b9:1b:49:54:5f:39:ad:9a:9f:89:f0:bb:c1:8b:
51:f2:fd:08:4f:ce:be:34:9c:57:d0:f2:86:c8:a7:6c:18:22:
e3:ff:a1:b3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdw2Mtq+gCdoku/l6DEA4Q7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDExMTUwNDI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzVkMGZmYTBiZTQyMDVmNTE5NDgzOWI3NjQ2NzkxMzFlOGE1ZmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsS+ZUQKzYeCPAbiPRpwoxbNWML8
1xJRAgg3xaAbkwdOqvRRzGmYbB6h2J+LVtyLd/PuI4DJqOpysS9TNVGX90jxx+7S
GoZIDMHWAHfgnZwNPBbVXl9vjgJ0dUF84PgHFBI2zw57Wlr/vgmNy0ikxHzkEcSL
PAIuVKPyh26BN7FZ6VK+Pug/+7v3T7ntSrZCQvLynUZLEBIxSHrK61zA85tWPebG
GwnK95U/4Lu8xTkW0nKXViKK8V+yt2gqOlGCllbNLVyOmKvw6uYKBA+zvjbwjjZ6
DpCbPMB18IISLXgJerMYCxowYfbj5GkJ3aa/U4ysokicK0GMzrlpxJQTMwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMddD/oL5CBfUZSDm3ZGeRMeil+rMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveDEwUC1ndmtJRjlSbElPYmRrWjVFeDZLWDZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJpSNi1GG8Fcgw2THJK2
5BHQZ40XTHA0+QPDQFEse/1uP1A5ht7/7CsKLCrjGGkf+WAvNAwQ8fMIs9QY4g1v
wNIB3JS7IeFhYG0cFmBbgKpLplu90RZtJXAUXIAgH7eka6JCnx0QTk3cbwfUHCDL
GkFZtPiuzdYCLQxgZS/5h5I0+wvliHuaxtcAKlTAhT7k+Rs1v1NB1uAOIOnQKF0z
lkbmO6OlbVuCJmnNgLF9GwB0QLvQcjPs+/z9UZ88+SKwghYQuZvzBgdnXwwFBg8U
ukhvhZ84LuKZYk77je25G0lUXzmtmp+J8LvBi1Hy/QhPzr40nFfQ8obIp2wYIuP/
obM=
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:49:42 2025 by rpki-client