Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-5487ejIAn1kdcd5Nv4sqPjXTi8.roa
File: 1-5487ejIAn1kdcd5Nv4sqPjXTi8.roa (raw, json)
Hash identifier: t9G+fbapwOThJ7NTXYGiiA9w1iLIL4wvzXb6pISNTzk=
Subject key identifier: FB:9E:3C:ED:E8:C8:02:7D:64:75:C7:79:36:FE:2C:A8:F8:D7:4E:2F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 87B40EB1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-5487ejIAn1kdcd5Nv4sqPjXTi8.roa
Signing time: Fri 27 May 2022 18:10:13 +0000
ROA not before: Fri 27 May 2022 18:10:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2276724401 (0x87b40eb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 27 18:10:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb9e3cede8c8027d6475c77936fe2ca8f8d74e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:85:27:95:89:31:99:9a:43:7b:8b:47:d1:
cc:1d:74:17:25:c9:80:6b:4c:12:3e:46:1f:2d:17:
2c:b5:c2:68:b4:85:a9:79:57:a5:53:db:86:54:6a:
be:4d:79:d3:6b:17:80:ce:69:b3:e0:e4:f2:aa:6d:
87:a9:de:27:13:0e:57:53:15:6d:cb:3f:29:df:23:
78:2b:8e:6b:60:63:69:e6:c9:1c:ce:33:19:f5:f8:
b8:de:ae:4a:ab:5f:3e:d8:f1:ad:92:ae:2c:0b:a1:
a8:95:10:fe:40:5d:86:fb:e0:2d:e2:f0:d6:0b:cf:
dc:d4:0d:a4:9f:11:54:a4:a5:ae:2b:f3:c0:c4:d6:
93:b4:82:cb:5a:db:a7:e7:1b:ca:fc:9f:31:e5:04:
4a:58:6b:b3:ce:b3:8f:e2:08:61:5f:5d:d3:96:6e:
ab:8b:e6:a2:6d:9e:94:08:25:0f:75:5f:52:4f:0b:
8a:c2:3d:85:0c:ad:42:0e:35:02:be:f5:11:aa:19:
7f:a2:35:d9:4d:92:2e:7b:8f:85:02:a6:11:51:8f:
55:1e:63:01:25:13:a8:93:12:f4:0b:e0:52:2a:92:
1f:61:50:e6:e9:86:1f:27:09:fd:9e:22:3b:fb:c3:
2f:95:36:eb:ea:fc:a5:e1:77:7a:1e:d3:77:8d:d4:
1c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9E:3C:ED:E8:C8:02:7D:64:75:C7:79:36:FE:2C:A8:F8:D7:4E:2F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-5487ejIAn1kdcd5Nv4sqPjXTi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:ad:e8:20:6e:5d:f2:b3:04:1a:e2:a7:3d:3e:7f:29:a2:1b:
4f:73:b9:b9:fe:26:04:0a:8e:ba:7f:ad:7c:b6:45:d8:af:4e:
16:0f:05:ff:57:88:9e:6c:21:a9:54:c9:42:81:c7:94:44:07:
88:83:a0:01:fd:9f:7b:40:25:6c:a6:0a:87:ac:75:34:bd:cf:
8d:08:15:de:d7:8a:8c:b6:07:65:89:0d:5d:77:da:4a:22:0f:
d2:67:7b:da:47:d6:88:7c:58:a1:77:c8:93:78:28:3c:2d:8d:
73:b0:40:4a:8d:cd:8e:19:ca:85:30:73:ba:d8:1e:2c:6c:68:
05:14:52:8e:b5:e7:af:d9:7b:94:bf:96:8c:a2:54:67:50:b8:
f2:06:fc:4a:90:8b:58:23:9c:c0:f4:c3:a3:7c:46:6c:35:46:
4d:21:8b:84:f3:72:4e:7a:1b:01:2b:2c:26:14:49:e7:ac:7e:
b6:b0:44:b0:28:fb:32:81:61:5e:8e:30:3e:a0:1b:c1:3a:e7:
08:4e:45:97:8a:2a:54:bf:34:37:e6:7e:fa:fe:26:2c:b9:af:
06:ee:c4:80:33:5e:ba:88:b7:c2:12:63:ed:84:e8:43:51:67:
10:8c:bd:4d:7b:39:4b:ed:c7:bd:d1:23:e0:5d:35:a9:79:8e:
c4:c7:d3:d6
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIFAIe0DrEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MjcxODEwMTNaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGZiOWUzY2VkZThj
ODAyN2Q2NDc1Yzc3OTM2ZmUyY2E4ZjhkNzRlMmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9Q4UnlYkxmZpDe4tH0cwddBclyYBrTBI+Rh8tFyy1wmi0
hal5V6VT24ZUar5NedNrF4DOabPg5PKqbYep3icTDldTFW3LPynfI3grjmtgY2nm
yRzOMxn1+LjerkqrXz7Y8a2SriwLoaiVEP5AXYb74C3i8NYLz9zUDaSfEVSkpa4r
88DE1pO0gsta26fnG8r8nzHlBEpYa7POs4/iCGFfXdOWbquL5qJtnpQIJQ91X1JP
C4rCPYUMrUIONQK+9RGqGX+iNdlNki57j4UCphFRj1UeYwElE6iTEvQL4FIqkh9h
UObphh8nCf2eIjv7wy+VNuvq/KXhd3oe03eN1BxfAgMBAAGjggIbMIICFzAdBgNV
HQ4EFgQU+5487ejIAn1kdcd5Nv4sqPjXTi8wHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGOBggrBgEFBQcBCwSB
gTB/MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS8xLTU0ODdlaklBbjFrZGNkNU52NHNxUGpYVGk4LnJvYTCBgQYDVR0fBHoweDB2
oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC81
ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2LzEvY2dSNzRWc25X
UUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8EAgACMAkDBwAgAQZ8
AGQwDQYJKoZIhvcNAQELBQADggEBAE2t6CBuXfKzBBripz0+fymiG09zubn+JgQK
jrp/rXy2RdivThYPBf9XiJ5sIalUyUKBx5REB4iDoAH9n3tAJWymCoesdTS9z40I
Fd7Xioy2B2WJDV132koiD9Jne9pH1oh8WKF3yJN4KDwtjXOwQEqNzY4ZyoUwc7rY
HixsaAUUUo6156/Ze5S/loyiVGdQuPIG/EqQi1gjnMD0w6N8Rmw1Rk0hi4Tzck56
GwErLCYUSeesfrawRLAo+zKBYV6OMD6gG8E65whORZeKKlS/NDfmfvr+Jiy5rwbu
xIAzXrqIt8ISY+2E6ENRZxCMvU17OUvtx73RI+BdNal5jsTH09Y=
-----END CERTIFICATE-----
Generated at Thu May 1 12:29:17 2025 by rpki-client