Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-4WI45xrv30d2u0KonqqqP0PmUs.roa
File: 1-4WI45xrv30d2u0KonqqqP0PmUs.roa (raw, json)
Hash identifier: e9n5wE9fqz7S4KfzLeeLoLDy9Xg2EpWUFaPRRmC4Ilc=
Subject key identifier: FB:85:88:E3:9C:6B:BF:7D:1D:DA:ED:0A:A2:7A:AA:A8:FD:0F:99:4B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01867C7B8E851C7A6EA271F86A8053BCE4CB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-4WI45xrv30d2u0KonqqqP0PmUs.roa
Signing time: Thu 23 Feb 2023 04:15:17 +0000
ROA not before: Thu 23 Feb 2023 04:15:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7c:7b:8e:85:1c:7a:6e:a2:71:f8:6a:80:53:bc:e4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 23 04:15:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb8588e39c6bbf7d1ddaed0aa27aaaa8fd0f994b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f7:72:33:4b:6e:f1:21:f7:50:4f:e6:7e:5b:
3f:66:82:7d:32:a9:01:89:49:92:85:89:e9:1d:0a:
d9:be:73:04:76:d6:b0:b6:c2:ff:94:73:ff:14:98:
07:6f:7d:e9:14:25:cc:90:99:b8:61:e1:de:f4:6a:
ec:b0:72:f1:4c:6a:7a:9d:a4:3c:99:54:fd:70:b3:
42:11:a0:7c:3c:37:71:21:54:51:e4:6a:13:d2:05:
3f:4b:5a:5b:a8:59:2c:49:6e:36:9c:52:0e:af:9e:
45:71:8d:4f:5c:d7:4f:ce:b2:c6:13:af:42:0f:25:
49:4a:2b:88:6d:f1:67:cf:e5:00:73:20:e2:88:5c:
ce:09:cb:17:c8:be:16:cb:ec:4e:72:4e:c1:23:0a:
50:86:ec:e0:44:e1:dd:b7:6b:80:6c:41:dc:2e:9a:
9c:b6:e2:b6:f4:d3:3a:36:d1:a4:00:c3:fd:4e:91:
5e:6d:2c:e8:40:cf:60:34:45:67:5c:92:0f:f6:a5:
a9:80:71:74:c7:62:f6:e3:2b:e4:b3:9d:7c:b5:46:
48:70:26:b9:ac:87:89:61:50:61:83:6b:73:c1:ed:
6f:f6:ea:de:46:e5:cd:fe:e5:4f:fd:8f:f5:a1:f3:
96:45:13:e2:d6:a5:dd:32:bc:82:cc:77:28:7a:f8:
88:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:85:88:E3:9C:6B:BF:7D:1D:DA:ED:0A:A2:7A:AA:A8:FD:0F:99:4B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-4WI45xrv30d2u0KonqqqP0PmUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:4a:ea:97:06:8b:72:0e:a4:fd:2a:eb:90:29:90:b3:2c:fa:
70:6c:20:d7:d7:d7:5c:dc:6c:e2:f8:bc:7e:e0:8e:4d:4c:33:
9a:5a:cf:1e:16:14:58:52:ac:52:b5:f8:00:b3:e7:79:09:f0:
08:c3:29:4d:b9:58:5a:71:12:52:a2:05:ea:e8:e3:cb:88:0e:
a3:7d:62:43:a7:16:88:5b:6b:67:6e:35:95:95:a2:9e:e4:1b:
f1:d7:80:40:52:a4:db:70:ce:3f:f0:47:52:d0:17:3d:ec:ab:
63:e1:94:08:5a:4b:f3:aa:2a:12:51:38:4a:52:ea:b1:b3:ad:
52:a2:3c:21:19:02:c9:45:b8:9d:4e:27:49:48:01:00:8f:a7:
0f:df:fe:e9:43:b3:32:c3:32:6d:29:0d:c8:ae:32:14:9d:c3:
b9:43:d4:84:d4:99:9e:8d:9d:08:07:e4:3b:e8:49:43:5a:31:
f8:e2:3c:cc:4a:e2:cf:55:16:40:13:9b:89:a4:74:67:f6:f0:
0e:58:ba:d1:2d:c6:b9:8e:9d:59:b3:cd:17:2a:7f:19:ce:b7:
b3:ea:f4:f0:34:be:59:9c:e5:0f:43:27:ba:7e:43:84:7e:16:
b8:b8:1c:de:d1:a8:de:cd:b8:e6:e9:28:d6:65:18:18:9e:cd:
4c:61:03:54
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYZ8e46FHHpuonH4aoBTvOTLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjIzMDQxNTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjg1ODhlMzljNmJiZjdkMWRkYWVkMGFhMjdhYWFhOGZkMGY5OTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/dyM0tu8SH3UE/mfls/ZoJ9MqkB
iUmShYnpHQrZvnMEdtawtsL/lHP/FJgHb33pFCXMkJm4YeHe9GrssHLxTGp6naQ8
mVT9cLNCEaB8PDdxIVRR5GoT0gU/S1pbqFksSW42nFIOr55FcY1PXNdPzrLGE69C
DyVJSiuIbfFnz+UAcyDiiFzOCcsXyL4Wy+xOck7BIwpQhuzgROHdt2uAbEHcLpqc
tuK29NM6NtGkAMP9TpFebSzoQM9gNEVnXJIP9qWpgHF0x2L24yvks518tUZIcCa5
rIeJYVBhg2tzwe1v9ureRuXN/uVP/Y/1ofOWRRPi1qXdMryCzHcoeviIsQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPuFiOOca799HdrtCqJ6qqj9D5lLMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMS00V0k0NXhydjMwZDJ1MEtvbnFxcVAwUG1Vcy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFh
Ni8xL2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQCkSuqXBotyDqT9KuuQ
KZCzLPpwbCDX19dc3Gzi+Lx+4I5NTDOaWs8eFhRYUqxStfgAs+d5CfAIwylNuVha
cRJSogXq6OPLiA6jfWJDpxaIW2tnbjWVlaKe5Bvx14BAUqTbcM4/8EdS0Bc97Ktj
4ZQIWkvzqioSUThKUuqxs61SojwhGQLJRbidTidJSAEAj6cP3/7pQ7MywzJtKQ3I
rjIUncO5Q9SE1JmejZ0IB+Q76ElDWjH44jzMSuLPVRZAE5uJpHRn9vAOWLrRLca5
jp1Zs80XKn8Zzrez6vTwNL5ZnOUPQye6fkOEfha4uBze0ajezbjm6SjWZRgYns1M
YQNU
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:58 2025 by rpki-client