Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0R4_LKjsdWUGxE6StxlyRMjXuPU.roa
File: 0R4_LKjsdWUGxE6StxlyRMjXuPU.roa (raw, json)
Hash identifier: 7ajjBkWhzzwJm9La5swiBaNGnksrgEtkdngBTLzug6c=
Subject key identifier: D1:1E:3F:2C:A8:EC:75:65:06:C4:4E:92:B7:19:72:44:C8:D7:B8:F5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 732F7DA3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0R4_LKjsdWUGxE6StxlyRMjXuPU.roa
Signing time: Thu 17 Mar 2022 07:08:32 +0000
ROA not before: Thu 17 Mar 2022 07:08:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1932492195 (0x732f7da3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 17 07:08:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d11e3f2ca8ec756506c44e92b7197244c8d7b8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:51:e2:83:84:7b:6c:81:3d:b7:2e:18:05:a9:
01:ee:1d:a8:a2:92:81:3b:8d:85:3a:ac:0f:c5:39:
a7:17:40:74:54:1d:d6:55:21:92:a1:58:06:a1:5b:
22:61:35:c6:3f:3f:ac:42:82:5e:ad:b8:c2:a3:cd:
bc:7f:dc:06:3f:36:b2:a5:c8:29:b3:d3:b9:55:ae:
ef:8d:4f:3b:fc:53:13:ca:eb:fb:37:bc:54:19:79:
72:87:05:48:dc:54:84:fb:4c:09:23:4d:ad:df:cb:
a2:8b:e9:56:c3:8a:95:64:8a:5c:6f:99:d6:90:54:
40:62:11:a5:0a:3d:4b:23:8d:32:5d:59:61:5f:29:
87:b5:f7:91:8a:f3:e4:61:97:e0:58:d3:1f:29:4a:
99:cf:61:02:0f:56:6c:0f:70:43:7f:1e:f9:14:06:
98:79:a1:4a:f1:99:1e:fe:7e:51:51:5d:e9:47:ad:
3c:bc:fb:b0:68:c4:9d:ba:09:84:73:05:83:03:38:
65:51:89:ad:c9:91:22:24:b3:85:7f:ea:d2:3d:84:
75:15:a3:2f:70:83:7e:c0:38:d5:8c:ed:55:6c:ed:
e5:e6:85:9f:8b:22:60:5b:21:2d:9c:35:a5:b5:23:
3e:c1:5b:59:c2:2f:f5:9d:bf:58:8f:01:af:a3:36:
a2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1E:3F:2C:A8:EC:75:65:06:C4:4E:92:B7:19:72:44:C8:D7:B8:F5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0R4_LKjsdWUGxE6StxlyRMjXuPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:93:dd:9b:c9:fd:e0:37:fb:84:79:1a:91:26:f1:d6:4a:cc:
25:ca:09:7a:b6:38:3f:21:b8:30:c2:d5:c7:90:1d:96:4d:02:
6b:ca:f8:5a:fb:2d:4b:c5:5a:05:24:75:70:49:76:52:f4:0f:
c5:f8:b6:c9:04:9b:57:48:11:42:81:34:3d:99:df:ac:ae:75:
2c:d7:25:ad:7e:91:26:43:5e:dc:68:00:92:89:21:f5:35:f8:
13:8a:5c:c6:15:d2:c4:07:c4:e3:43:d9:82:74:91:9a:fb:83:
c6:2d:5e:ac:ae:f0:2e:ca:bf:96:dd:52:20:f2:6a:c1:d2:63:
13:8b:ba:70:63:0d:4b:b3:44:1d:ef:5f:d7:cf:23:cd:73:04:
3c:c7:cd:66:f4:35:f3:fa:2c:42:4d:a4:e6:55:11:e1:28:25:
28:28:aa:83:32:21:56:d2:a5:d3:ba:a0:9a:43:83:2c:55:fa:
95:0b:22:79:fb:66:a1:2e:21:a1:83:7f:2f:aa:fe:fb:68:77:
e0:a1:79:33:29:d9:02:48:c5:a1:5e:9e:d3:46:f2:26:b2:69:
48:b8:ac:20:d9:62:f5:4e:8f:6a:3c:3d:17:9e:6a:b2:30:c6:
d2:55:5d:56:25:e6:fe:e4:c0:e2:0e:f7:9e:3b:a8:87:55:74:
18:f2:f5:99
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEcy99ozANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMx
NzA3MDgzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDExZTNmMmNhOGVj
NzU2NTA2YzQ0ZTkyYjcxOTcyNDRjOGQ3YjhmNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANFR4oOEe2yBPbcuGAWpAe4dqKKSgTuNhTqsD8U5pxdAdFQd
1lUhkqFYBqFbImE1xj8/rEKCXq24wqPNvH/cBj82sqXIKbPTuVWu741PO/xTE8rr
+ze8VBl5cocFSNxUhPtMCSNNrd/LoovpVsOKlWSKXG+Z1pBUQGIRpQo9SyONMl1Z
YV8ph7X3kYrz5GGX4FjTHylKmc9hAg9WbA9wQ38e+RQGmHmhSvGZHv5+UVFd6Uet
PLz7sGjEnboJhHMFgwM4ZVGJrcmRIiSzhX/q0j2EdRWjL3CDfsA41YztVWzt5eaF
n4siYFshLZw1pbUjPsFbWcIv9Z2/WI8Br6M2ooUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTRHj8sqOx1ZQbETpK3GXJEyNe49TAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
LzBSNF9MS2pzZFdVR3hFNlN0eGx5Uk1qWHVQVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAok92byf3gN/uEeRqRJvHWSswlygl6tjg/Ibgw
wtXHkB2WTQJryvha+y1LxVoFJHVwSXZS9A/F+LbJBJtXSBFCgTQ9md+srnUs1yWt
fpEmQ17caACSiSH1NfgTilzGFdLEB8TjQ9mCdJGa+4PGLV6srvAuyr+W3VIg8mrB
0mMTi7pwYw1Ls0Qd71/XzyPNcwQ8x81m9DXz+ixCTaTmVRHhKCUoKKqDMiFW0qXT
uqCaQ4MsVfqVCyJ5+2ahLiGhg38vqv77aHfgoXkzKdkCSMWhXp7TRvImsmlIuKwg
2WL1To9qPD0XnmqyMMbSVV1WJeb+5MDiDveeO6iHVXQY8vWZ
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:16 2025 by rpki-client