Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x9QnZScBypdc20OJa9phLjoRDMA.roa
File: x9QnZScBypdc20OJa9phLjoRDMA.roa (raw, json)
Hash identifier: R7p8Y9Jm+2p+az005A0bmxz236bKoz3rifzfiGu29bo=
Subject key identifier: C7:D4:27:65:27:01:CA:97:5C:DB:43:89:6B:DA:61:2E:3A:11:0C:C0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E59623D3714F5797301E49AF8C158CD5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x9QnZScBypdc20OJa9phLjoRDMA.roa
Signing time: Wed 15 Mar 2023 14:04:27 +0000
ROA not before: Wed 15 Mar 2023 14:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:e596:868/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e5:96:23:d3:71:4f:57:97:30:1e:49:af:8c:15:8c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 15 14:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7d427652701ca975cdb43896bda612e3a110cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f1:5b:82:16:19:ba:42:1c:e3:75:4f:c4:02:
aa:f6:d2:34:79:2c:7f:c4:cc:84:2a:f3:b6:c2:84:
6b:47:b0:9a:06:9f:17:32:de:a8:43:94:6b:fc:8c:
ec:6e:15:8d:61:c7:ee:1b:17:6b:01:6f:4c:dd:14:
dd:4f:49:e6:35:9a:9d:4e:71:10:2e:e8:e7:cc:08:
e6:54:75:d8:4e:e8:b0:51:1c:57:cb:bd:cb:ca:3f:
a8:00:57:a9:8e:63:e3:d9:f0:a3:ca:63:6f:8e:0a:
d2:b1:17:d4:f9:67:6b:59:7f:42:5f:72:5e:15:37:
18:e0:f6:54:72:5d:81:60:88:75:22:32:5f:6b:a1:
a2:20:c9:17:52:a9:55:85:dd:65:a1:3f:a3:b2:66:
49:3b:1b:b4:b7:1b:78:24:26:75:b4:45:6b:12:12:
00:e6:ae:4c:e9:80:87:fb:ef:26:d5:b8:42:e0:0d:
f2:2f:94:cb:a4:d5:35:cb:4f:45:00:62:5c:cc:ff:
24:76:4b:13:7e:a8:e9:8e:00:7e:00:07:6a:45:47:
ee:b2:9a:70:15:13:0b:1b:7d:b9:16:47:f5:ef:d5:
20:81:ab:5d:c1:2f:38:c4:b9:d8:cd:44:f7:35:36:
b3:68:16:50:8b:d4:fc:63:e9:94:cf:65:1b:55:e8:
54:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D4:27:65:27:01:CA:97:5C:DB:43:89:6B:DA:61:2E:3A:11:0C:C0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x9QnZScBypdc20OJa9phLjoRDMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:2e:39:8a:61:da:7b:88:0c:2a:d9:c0:df:01:a7:7c:f2:a2:
1e:8f:3a:81:9f:0f:2c:5a:28:73:e7:b3:7d:7c:86:77:b6:1f:
20:c2:e1:9f:f2:39:f9:f8:85:d9:9d:e0:a5:83:ce:5d:4c:eb:
df:e0:4c:4b:f8:cc:9d:0e:9a:6c:41:d1:71:00:37:b7:3a:c8:
86:ba:01:4c:b9:40:6e:f1:5d:21:09:43:21:bd:59:32:57:a5:
5a:18:6e:ef:f0:f2:ee:82:b2:b8:5a:95:39:f6:d3:fb:7c:5f:
ce:5b:f3:53:6a:f6:21:74:6b:f2:a6:1c:c2:bd:40:49:bf:99:
f3:ea:f6:d9:f8:4d:61:61:0d:2b:3b:90:75:9e:43:dc:86:a1:
9b:4d:3d:f7:55:fd:c2:c2:3f:4f:22:5a:75:e5:97:4c:18:0d:
43:45:ba:a8:69:5e:e5:4a:94:8c:31:79:12:ae:18:60:fc:09:
6b:76:41:1e:b3:bc:33:bd:12:af:8d:8e:e9:04:ea:e8:a9:c5:
55:ea:68:db:2b:71:0e:ab:8c:5a:8f:09:ef:69:81:de:a7:7e:
36:cb:c6:b0:eb:96:92:3d:54:63:e9:bc:bf:98:f0:33:9d:28:
f0:51:5a:16:4f:c1:67:4b:67:f2:27:c7:09:c9:ca:58:dc:4f:
04:51:89:30
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYblliPTcU9XlzAeSa+MFYzVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzE1MTQwNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2Q0Mjc2NTI3MDFjYTk3NWNkYjQzODk2YmRhNjEyZTNhMTEwY2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/FbghYZukIc43VPxAKq9tI0eSx/
xMyEKvO2woRrR7CaBp8XMt6oQ5Rr/IzsbhWNYcfuGxdrAW9M3RTdT0nmNZqdTnEQ
LujnzAjmVHXYTuiwURxXy73Lyj+oAFepjmPj2fCjymNvjgrSsRfU+WdrWX9CX3Je
FTcY4PZUcl2BYIh1IjJfa6GiIMkXUqlVhd1loT+jsmZJOxu0txt4JCZ1tEVrEhIA
5q5M6YCH++8m1bhC4A3yL5TLpNU1y09FAGJczP8kdksTfqjpjgB+AAdqRUfusppw
FRMLG325Fkf179UggatdwS84xLnYzUT3NTazaBZQi9T8Y+mUz2UbVehUkQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMfUJ2UnAcqXXNtDiWvaYS46EQzAMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveDlRblpTY0J5cGRjMjBPSmE5cGhMam9SRE1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJsuOYph2nuIDCrZwN8B
p3zyoh6POoGfDyxaKHPns318hne2HyDC4Z/yOfn4hdmd4KWDzl1M69/gTEv4zJ0O
mmxB0XEAN7c6yIa6AUy5QG7xXSEJQyG9WTJXpVoYbu/w8u6CsrhalTn20/t8X85b
81Nq9iF0a/KmHMK9QEm/mfPq9tn4TWFhDSs7kHWeQ9yGoZtNPfdV/cLCP08iWnXl
l0wYDUNFuqhpXuVKlIwxeRKuGGD8CWt2QR6zvDO9Eq+NjukE6uipxVXqaNsrcQ6r
jFqPCe9pgd6nfjbLxrDrlpI9VGPpvL+Y8DOdKPBRWhZPwWdLZ/InxwnJyljcTwRR
iTA=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:19 2025 by rpki-client