Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/00VBAnLgOezL9dKIz6y6srKdszE.roa
File: 00VBAnLgOezL9dKIz6y6srKdszE.roa (raw, json)
Hash identifier: lmMuEFGAljoJWQmkYYeLHNcc+vfc5VKmf3ub0VDzkoU=
Subject key identifier: D3:45:41:02:72:E0:39:EC:CB:F5:D2:88:CF:AC:BA:B2:B2:9D:B3:31
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018814CEB077A518D57B9D8F486885A542F4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/00VBAnLgOezL9dKIz6y6srKdszE.roa
Signing time: Sat 13 May 2023 11:11:09 +0000
ROA not before: Sat 13 May 2023 11:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:14:ce:b0:77:a5:18:d5:7b:9d:8f:48:68:85:a5:42:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 13 11:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d345410272e039eccbf5d288cfacbab2b29db331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:57:ec:2b:26:7f:34:8a:ab:db:84:23:7f:6e:
ea:a5:0e:50:52:cf:55:11:15:0e:b4:2f:87:3a:bb:
56:63:b5:7d:34:a0:ed:85:fa:bd:b8:8a:1b:a1:b8:
cb:c9:e7:fc:50:7c:57:cc:bd:d6:b5:37:0c:c9:01:
ef:b7:28:f3:63:60:82:77:c0:e0:85:37:d8:ce:ae:
42:c6:24:be:08:c7:f9:6f:99:7c:cf:73:7f:2a:ea:
8f:ad:81:85:2a:56:3b:92:83:e9:e5:34:e6:ba:58:
c0:4c:3e:b6:c7:63:f2:6c:44:f9:57:90:3e:10:a4:
37:78:8f:ee:ce:ff:ba:33:36:12:94:7d:fb:01:af:
67:81:70:ff:32:c9:fe:80:c5:aa:40:5c:9a:34:17:
0e:3e:24:33:a3:3d:e1:b4:33:2d:61:40:de:bc:48:
a9:c3:cf:33:24:3d:0b:af:7b:d6:4c:fb:da:9a:c9:
c6:c6:98:a1:4b:d2:9f:50:20:f7:b1:9b:cf:15:44:
b9:0f:3d:8c:e5:1b:09:5a:95:14:47:eb:f4:fe:4a:
86:3f:e8:49:37:25:53:18:da:7f:41:47:cb:4c:33:
cc:16:f1:69:ac:99:43:73:da:59:ca:7a:a1:23:85:
42:57:5e:f9:41:9f:71:a3:0f:9c:e4:9c:fa:b6:48:
e4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:45:41:02:72:E0:39:EC:CB:F5:D2:88:CF:AC:BA:B2:B2:9D:B3:31
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/00VBAnLgOezL9dKIz6y6srKdszE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:74:32:eb:e3:36:bc:1d:71:b3:d6:dc:8c:08:b8:69:66:db:
06:03:c9:69:f7:72:aa:95:a0:56:f1:13:be:db:eb:14:c3:24:
e1:36:ad:ba:89:53:72:18:63:2b:2b:80:5d:f7:00:e6:6a:19:
bb:66:da:cb:75:b9:eb:e7:64:7a:39:4e:ad:b3:07:d6:fd:7d:
39:03:0d:11:c5:29:23:a0:a6:c7:20:99:e2:24:07:9b:17:3d:
22:cd:1a:e3:49:3b:30:17:d5:24:4b:7b:4d:19:b7:7e:e9:3b:
c6:b2:de:7b:08:d9:75:a6:35:32:13:59:0e:72:4f:8b:88:dc:
ae:4c:e7:07:ef:ac:d2:2f:f3:0d:67:14:8d:94:e9:36:74:cb:
29:c9:74:57:e9:4f:32:33:dc:2b:11:20:db:61:b2:12:73:1c:
bc:5a:e6:15:58:aa:13:a7:34:0f:1b:8b:81:4f:ec:0e:00:e4:
93:32:25:fa:ad:c4:5a:72:61:58:25:82:b2:ed:b2:a2:26:14:
46:f9:d6:aa:67:3f:18:0d:38:d1:a8:a2:63:b2:3c:10:11:8a:
10:01:b6:d0:02:3b:6f:27:4e:57:f6:a3:2c:16:ca:e9:13:f6:
06:8a:5a:05:a2:cd:d9:3d:0f:11:68:8d:55:42:d3:a4:18:ba:
e3:e0:7d:58
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYgUzrB3pRjVe52PSGiFpUL0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTEzMTExMTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzQ1NDEwMjcyZTAzOWVjY2JmNWQyODhjZmFjYmFiMmIyOWRiMzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklfsKyZ/NIqr24Qjf27qpQ5QUs9V
ERUOtC+HOrtWY7V9NKDthfq9uIobobjLyef8UHxXzL3WtTcMyQHvtyjzY2CCd8Dg
hTfYzq5CxiS+CMf5b5l8z3N/KuqPrYGFKlY7koPp5TTmuljATD62x2PybET5V5A+
EKQ3eI/uzv+6MzYSlH37Aa9ngXD/Msn+gMWqQFyaNBcOPiQzoz3htDMtYUDevEip
w88zJD0Lr3vWTPvamsnGxpihS9KfUCD3sZvPFUS5Dz2M5RsJWpUUR+v0/kqGP+hJ
NyVTGNp/QUfLTDPMFvFprJlDc9pZynqhI4VCV175QZ9xow+c5Jz6tkjkmQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNNFQQJy4Dnsy/XSiM+surKynbMxMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMDBWQkFuTGdPZXpMOWRLSXo2eTZzcktkc3pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFF0MuvjNrwdcbPW3IwI
uGlm2wYDyWn3cqqVoFbxE77b6xTDJOE2rbqJU3IYYysrgF33AOZqGbtm2st1uevn
ZHo5Tq2zB9b9fTkDDRHFKSOgpscgmeIkB5sXPSLNGuNJOzAX1SRLe00Zt37pO8ay
3nsI2XWmNTITWQ5yT4uI3K5M5wfvrNIv8w1nFI2U6TZ0yynJdFfpTzIz3CsRINth
shJzHLxa5hVYqhOnNA8bi4FP7A4A5JMyJfqtxFpyYVglgrLtsqImFEb51qpnPxgN
ONGoomOyPBARihABttACO28nTlf2oywWyukT9gaKWgWizdk9DxFojVVC06QYuuPg
fVg=
-----END CERTIFICATE-----
Generated at Thu May 1 04:28:12 2025 by rpki-client