Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0PbRzP9KS9_hDlkU2SM3vo0n1bo.roa
File: 0PbRzP9KS9_hDlkU2SM3vo0n1bo.roa (raw, json)
Hash identifier: t8b4/4zqjyi0Ib75Hk1LVR02A8TrLYb45vHzXqkGBhM=
Subject key identifier: D0:F6:D1:CC:FF:4A:4B:DF:E1:0E:59:14:D9:23:37:BE:8D:27:D5:BA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187D24887CF4C634BB35F444ED69AF8068D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0PbRzP9KS9_hDlkU2SM3vo0n1bo.roa
Signing time: Sun 30 Apr 2023 13:09:41 +0000
ROA not before: Sun 30 Apr 2023 13:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d2:48:87:cf:4c:63:4b:b3:5f:44:4e:d6:9a:f8:06:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 30 13:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0f6d1ccff4a4bdfe10e5914d92337be8d27d5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:16:8a:30:2e:42:38:8a:3a:aa:d7:6b:e3:01:
3f:5a:73:63:2e:fe:e5:28:53:12:b1:d5:b6:f1:48:
13:6f:05:27:d3:ac:66:be:8b:94:91:8f:e5:00:d7:
92:8b:9f:8c:e1:2f:0f:68:48:b7:ca:36:34:c7:b2:
7b:07:56:80:cc:07:7b:b1:89:c7:ba:4b:bf:e3:ec:
2b:c8:da:00:1f:5a:9f:c5:30:a4:df:89:65:04:23:
23:be:f9:8a:00:a0:c7:58:af:21:b9:27:5d:a3:9f:
85:2a:1c:38:ee:3a:14:0b:b6:18:6e:a2:48:fb:b3:
1d:60:61:78:aa:1d:5f:2a:5a:7c:b2:e0:72:59:33:
6f:9a:8a:9d:fc:b0:20:dc:b5:a6:40:55:d4:ff:de:
b3:a0:f9:d1:17:da:20:44:64:1d:82:80:5d:38:22:
96:35:d3:1a:43:d6:9a:25:44:22:08:de:b1:ff:8a:
44:b4:f1:f6:a2:9a:90:9b:14:e0:67:6c:55:60:be:
48:71:8b:50:4e:eb:2d:1f:c8:52:c5:00:ec:25:84:
89:90:70:1f:c0:f9:dc:6c:a4:29:a7:dd:7d:83:37:
99:95:68:35:00:a7:2b:8c:be:24:ff:4a:08:d3:a6:
c0:c9:73:88:c9:58:a4:4c:47:3d:dd:6c:07:7d:b5:
50:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F6:D1:CC:FF:4A:4B:DF:E1:0E:59:14:D9:23:37:BE:8D:27:D5:BA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0PbRzP9KS9_hDlkU2SM3vo0n1bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:24:61:f5:80:24:fe:52:ef:91:47:e4:f7:ef:ec:34:a3:08:
c5:a7:a6:b0:16:cc:63:2b:97:75:bc:ed:e0:cc:99:cf:08:3e:
dd:f2:99:91:c2:2c:02:cf:d2:3a:17:a9:1e:d0:57:d0:da:98:
d9:be:cd:84:62:41:ca:49:8b:e9:6c:08:ca:03:fb:2f:dc:6f:
e1:95:0e:f5:0b:02:0d:08:1a:c8:4c:a5:0a:1b:ae:c6:53:cc:
3d:8d:9b:a5:03:db:4f:71:2a:18:bb:49:8b:da:d6:dd:af:0a:
37:b3:c3:7b:3b:2c:89:92:92:b5:58:5c:fb:f2:05:ac:3b:06:
11:2b:59:5d:82:c8:1b:61:24:6e:f0:d9:d3:06:15:40:eb:35:
06:31:1f:c9:17:ed:d7:73:c9:ec:45:7d:d1:ec:2a:73:aa:c9:
81:e5:a4:b7:1e:36:fa:6f:4c:70:57:7d:12:b2:d1:56:ec:5a:
a7:80:1a:fe:5c:f4:bd:b2:36:d3:70:74:db:b0:20:0b:03:47:
06:2f:14:b4:03:eb:36:8c:c3:8b:23:8f:c7:d3:6c:49:c0:f6:
fa:c6:fe:40:04:3d:2c:76:40:49:cf:9a:e0:4c:19:d3:b4:cf:
5f:bb:64:47:5b:bc:50:16:dc:bd:7a:64:21:73:20:23:23:27:
03:6b:8d:1d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYfSSIfPTGNLs19ETtaa+AaNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDMwMTMwOTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGY2ZDFjY2ZmNGE0YmRmZTEwZTU5MTRkOTIzMzdiZThkMjdkNWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihaKMC5COIo6qtdr4wE/WnNjLv7l
KFMSsdW28UgTbwUn06xmvouUkY/lANeSi5+M4S8PaEi3yjY0x7J7B1aAzAd7sYnH
uku/4+wryNoAH1qfxTCk34llBCMjvvmKAKDHWK8huSddo5+FKhw47joUC7YYbqJI
+7MdYGF4qh1fKlp8suByWTNvmoqd/LAg3LWmQFXU/96zoPnRF9ogRGQdgoBdOCKW
NdMaQ9aaJUQiCN6x/4pEtPH2opqQmxTgZ2xVYL5IcYtQTustH8hSxQDsJYSJkHAf
wPncbKQpp919gzeZlWg1AKcrjL4k/0oI06bAyXOIyVikTEc93WwHfbVQ6QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFND20cz/Skvf4Q5ZFNkjN76NJ9W6MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMFBiUnpQOUtTOV9oRGxrVTJTTTN2bzBuMWJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB8kYfWAJP5S75FH5Pfv
7DSjCMWnprAWzGMrl3W87eDMmc8IPt3ymZHCLALP0joXqR7QV9DamNm+zYRiQcpJ
i+lsCMoD+y/cb+GVDvULAg0IGshMpQobrsZTzD2Nm6UD209xKhi7SYva1t2vCjez
w3s7LImSkrVYXPvyBaw7BhErWV2CyBthJG7w2dMGFUDrNQYxH8kX7ddzyexFfdHs
KnOqyYHlpLceNvpvTHBXfRKy0VbsWqeAGv5c9L2yNtNwdNuwIAsDRwYvFLQD6zaM
w4sjj8fTbEnA9vrG/kAEPSx2QEnPmuBMGdO0z1+7ZEdbvFAW3L16ZCFzICMjJwNr
jR0=
-----END CERTIFICATE-----
Generated at Fri May 2 15:40:47 2025 by rpki-client