Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xMFQ98v28kntnhA8wY_3h0fYEaI.roa
File: xMFQ98v28kntnhA8wY_3h0fYEaI.roa (raw, json)
Hash identifier: YeVXfth8jMasmZLYm8A7xVmmgJ9jhntqVVld9wZsOOQ=
Subject key identifier: C4:C1:50:F7:CB:F6:F2:49:ED:9E:10:3C:C1:8F:F7:87:47:D8:11:A2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C230490A7618D0893C8A44C148CBA121
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xMFQ98v28kntnhA8wY_3h0fYEaI.roa
Signing time: Fri 16 Jun 2023 03:12:04 +0000
ROA not before: Fri 16 Jun 2023 03:12:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c2:30:49:0a:76:18:d0:89:3c:8a:44:c1:48:cb:a1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 16 03:12:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4c150f7cbf6f249ed9e103cc18ff78747d811a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dc:54:04:19:17:bc:24:f9:8b:47:bd:05:87:
81:ef:1d:83:b2:08:1f:d9:1e:58:f0:93:ee:02:ab:
65:c5:96:00:5d:aa:b6:34:63:30:39:4c:9e:b3:54:
5c:8b:75:c3:cb:bb:2b:b1:6a:6f:61:9e:93:7a:bb:
7a:6a:65:a5:51:9b:0d:aa:0e:7d:2a:1c:71:17:b4:
90:a4:45:81:78:93:e4:37:7d:9c:5a:2f:40:d1:ce:
0a:cc:4c:37:f4:55:6c:f3:65:43:1a:f6:d9:e6:0b:
1d:62:d6:5a:2e:d1:52:8c:ee:64:6e:5b:14:19:4c:
cf:d8:3a:73:28:bb:40:a2:56:84:85:7b:e8:0b:51:
35:6f:cc:5d:28:77:37:26:7c:d4:cd:82:ec:c5:c8:
b5:28:64:69:33:5a:ea:6b:86:d8:14:b4:3b:75:fc:
5e:8a:35:60:29:de:9a:4f:f7:f3:b2:73:85:a4:0e:
a1:da:30:d5:cc:b9:94:50:0a:d8:34:86:d4:d1:c9:
23:c3:e1:fc:db:93:63:b3:7e:5f:5e:9f:ef:ad:fa:
49:5c:d1:a5:08:bc:60:63:11:ea:e6:22:d0:af:50:
73:de:d4:fb:a5:31:48:f2:81:e2:45:29:3a:a0:b4:
43:ba:ca:b1:18:8b:a4:f2:57:13:b6:b9:f9:2a:41:
b6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C1:50:F7:CB:F6:F2:49:ED:9E:10:3C:C1:8F:F7:87:47:D8:11:A2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xMFQ98v28kntnhA8wY_3h0fYEaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:cd:f4:43:34:09:94:fb:1b:10:9a:5d:2a:96:cc:e9:82:a9:
b9:bc:10:72:d1:5b:f0:63:88:16:53:15:e0:bd:73:d1:17:d4:
3a:6d:e6:e7:7c:86:53:cf:50:18:00:e0:ed:33:8f:bb:aa:2f:
aa:eb:02:2c:10:4a:8c:01:d7:07:ee:15:a2:9d:f2:74:3a:c3:
52:50:db:5c:c5:44:fa:aa:09:bb:b9:1f:bc:a6:db:ea:7d:46:
20:b9:ed:22:84:e6:5e:25:f2:a6:7c:d7:7c:f5:4c:55:4d:a8:
e8:17:8f:07:16:9e:8e:68:dc:03:5d:cc:e9:aa:f6:f7:95:96:
58:4d:86:ad:f2:8a:dd:5d:99:26:65:d0:5c:47:77:4e:fb:a9:
52:6f:a8:98:06:54:f7:6e:f9:c0:87:90:f4:7f:d7:25:13:d2:
d5:96:01:3f:6d:fd:d8:75:fc:a3:1f:06:66:8f:2e:20:ff:d5:
a9:b2:b9:82:04:a4:dc:83:0d:48:94:c4:79:6b:cc:80:c5:8d:
c5:29:b7:65:be:35:99:d7:26:26:f1:87:1c:29:a2:b4:3c:20:
7f:ac:cf:f9:61:d4:ec:8d:93:a2:07:d4:6b:ec:c9:b3:c7:55:
e3:88:6d:8d:c1:92:b0:dc:fc:fc:fc:70:46:df:e4:04:d7:78:
c6:e8:b3:7d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYjCMEkKdhjQiTyKRMFIy6EhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjE2MDMxMjA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGMxNTBmN2NiZjZmMjQ5ZWQ5ZTEwM2NjMThmZjc4NzQ3ZDgxMWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9xUBBkXvCT5i0e9BYeB7x2Dsggf
2R5Y8JPuAqtlxZYAXaq2NGMwOUyes1Rci3XDy7srsWpvYZ6Tert6amWlUZsNqg59
KhxxF7SQpEWBeJPkN32cWi9A0c4KzEw39FVs82VDGvbZ5gsdYtZaLtFSjO5kblsU
GUzP2DpzKLtAolaEhXvoC1E1b8xdKHc3JnzUzYLsxci1KGRpM1rqa4bYFLQ7dfxe
ijVgKd6aT/fzsnOFpA6h2jDVzLmUUArYNIbU0ckjw+H825Njs35fXp/vrfpJXNGl
CLxgYxHq5iLQr1Bz3tT7pTFI8oHiRSk6oLRDusqxGIuk8lcTtrn5KkG2MwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMTBUPfL9vJJ7Z4QPMGP94dH2BGiMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveE1GUTk4djI4a250bmhBOHdZXzNoMGZZRWFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEXN9EM0CZT7GxCaXSqW
zOmCqbm8EHLRW/BjiBZTFeC9c9EX1Dpt5ud8hlPPUBgA4O0zj7uqL6rrAiwQSowB
1wfuFaKd8nQ6w1JQ21zFRPqqCbu5H7ym2+p9RiC57SKE5l4l8qZ813z1TFVNqOgX
jwcWno5o3ANdzOmq9veVllhNhq3yit1dmSZl0FxHd077qVJvqJgGVPdu+cCHkPR/
1yUT0tWWAT9t/dh1/KMfBmaPLiD/1amyuYIEpNyDDUiUxHlrzIDFjcUpt2W+NZnX
JibxhxwporQ8IH+sz/lh1OyNk6IH1GvsybPHVeOIbY3BkrDc/Pz8cEbf5ATXeMbo
s30=
-----END CERTIFICATE-----
Generated at Wed Jun 11 20:50:45 2025 by rpki-client