Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0bZ2TOR-IDGbQYi1fpsibhuuk_k.roa
File: 0bZ2TOR-IDGbQYi1fpsibhuuk_k.roa (raw, json)
Hash identifier: 00hwAqFa8wLeVir86D/SQrZWwNGZ8SarzTSHxrjee4Y=
Subject key identifier: D1:B6:76:4C:E4:7E:20:31:9B:41:88:B5:7E:9B:22:6E:1B:AE:93:F9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6DB8AAE1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0bZ2TOR-IDGbQYi1fpsibhuuk_k.roa
Signing time: Sat 26 Feb 2022 00:04:54 +0000
ROA not before: Sat 26 Feb 2022 00:04:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:3358:3a78/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1840818913 (0x6db8aae1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 00:04:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1b6764ce47e20319b4188b57e9b226e1bae93f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:44:02:50:b5:a7:3a:7e:8d:6f:5f:00:fe:70:
36:b8:46:87:a5:31:e9:91:49:bf:d4:e0:31:6f:6d:
36:b3:03:1a:08:21:c1:cb:4a:74:7f:1a:ed:e3:62:
bd:28:49:7f:4d:c3:4a:97:af:42:30:80:8a:c5:44:
7d:5c:f1:41:3f:76:4d:2d:7e:d8:bc:29:ec:b3:4f:
52:d1:7c:81:2a:b8:5f:fa:42:ba:4f:9e:4c:9f:ef:
49:f3:45:c2:98:4a:9b:0b:28:64:64:4c:16:25:5f:
20:ec:40:56:66:f0:74:5c:8e:66:14:ca:7a:52:b4:
eb:2c:42:8d:f4:52:59:eb:7a:21:82:6e:01:6d:1b:
1f:8b:09:1a:c1:2d:fd:37:cd:b5:32:58:99:06:60:
1a:44:f8:13:57:b1:b2:a9:30:03:c9:37:a0:24:14:
ed:1d:7c:91:1c:16:84:b1:11:4f:ad:94:c5:68:27:
f7:e5:35:4a:25:95:e5:8e:83:20:71:f9:b2:f4:3c:
af:e3:04:e2:9d:13:a3:ff:b0:6f:96:91:af:5b:65:
74:ab:87:3f:23:f8:29:80:37:9a:79:ad:bc:cc:d0:
ad:f0:7b:17:0e:9f:d7:01:04:fc:08:ed:5b:2b:0f:
0c:ba:c9:ed:a2:0c:e3:2c:34:cc:dc:0d:90:6f:0a:
a7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B6:76:4C:E4:7E:20:31:9B:41:88:B5:7E:9B:22:6E:1B:AE:93:F9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0bZ2TOR-IDGbQYi1fpsibhuuk_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:42:a4:de:45:e1:a2:a9:ef:02:0c:be:86:05:b4:b5:04:40:
06:25:2b:bd:47:61:cb:a7:cc:39:8b:b5:10:92:d6:a9:66:f5:
cd:cb:d6:a4:5e:33:98:3a:eb:1e:54:a6:1b:63:92:e5:fa:67:
6a:a2:48:0c:a5:91:dd:ad:a9:06:3a:97:1e:86:ed:23:98:a1:
5c:6d:04:a6:77:08:89:ed:1c:ce:19:67:05:45:b0:4b:29:a4:
6b:09:70:d7:80:6a:b3:62:55:17:45:18:95:5d:a5:d3:0f:cf:
a6:4c:60:e3:1b:69:99:0f:21:c2:3c:46:cd:6c:ac:4e:22:6b:
5d:f4:75:7d:42:4b:98:ed:47:88:49:9e:e7:60:0a:a3:f2:2c:
be:b9:a8:cc:91:c1:65:aa:9c:a4:2d:42:52:e3:02:2d:39:03:
2d:88:06:52:84:9d:9a:5f:80:13:c6:24:6a:ee:f6:09:5a:9b:
27:51:cd:ef:d3:cb:45:be:25:6a:23:c4:82:8e:b3:6c:a8:ae:
1f:b1:7b:88:48:57:ed:a3:30:58:00:f8:b7:85:cb:1b:b5:35:
05:ef:ff:20:69:9b:a5:f6:6d:1a:1e:72:d3:17:93:99:e8:af:
75:1d:16:ff:88:02:f0:a5:ea:2a:73:b9:45:c8:9a:85:d6:9f:
07:37:93:aa
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEbbiq4TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIy
NjAwMDQ1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDFiNjc2NGNlNDdl
MjAzMTliNDE4OGI1N2U5YjIyNmUxYmFlOTNmOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKdEAlC1pzp+jW9fAP5wNrhGh6Ux6ZFJv9TgMW9tNrMDGggh
wctKdH8a7eNivShJf03DSpevQjCAisVEfVzxQT92TS1+2Lwp7LNPUtF8gSq4X/pC
uk+eTJ/vSfNFwphKmwsoZGRMFiVfIOxAVmbwdFyOZhTKelK06yxCjfRSWet6IYJu
AW0bH4sJGsEt/TfNtTJYmQZgGkT4E1exsqkwA8k3oCQU7R18kRwWhLERT62UxWgn
9+U1SiWV5Y6DIHH5svQ8r+ME4p0To/+wb5aRr1tldKuHPyP4KYA3mnmtvMzQrfB7
Fw6f1wEE/AjtWysPDLrJ7aIM4yw0zNwNkG8Kp48CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTRtnZM5H4gMZtBiLV+myJuG66T+TAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
LzBiWjJUT1ItSURHYlFZaTFmcHNpYmh1dWtfay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAzQqTeReGiqe8CDL6GBbS1BEAGJSu9R2HLp8w5
i7UQktapZvXNy9akXjOYOuseVKYbY5Ll+mdqokgMpZHdrakGOpcehu0jmKFcbQSm
dwiJ7RzOGWcFRbBLKaRrCXDXgGqzYlUXRRiVXaXTD8+mTGDjG2mZDyHCPEbNbKxO
Imtd9HV9QkuY7UeISZ7nYAqj8iy+uajMkcFlqpykLUJS4wItOQMtiAZShJ2aX4AT
xiRq7vYJWpsnUc3v08tFviVqI8SCjrNsqK4fsXuISFftozBYAPi3hcsbtTUF7/8g
aZul9m0aHnLTF5OZ6K91HRb/iALwpeoqc7lFyJqF1p8HN5Oq
-----END CERTIFICATE-----
Generated at Thu May 1 01:48:34 2025 by rpki-client