Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-i4fMu9YHXvvfbmk0tTkcFnSQEc.roa
File: 1-i4fMu9YHXvvfbmk0tTkcFnSQEc.roa (raw, json)
Hash identifier: t6NlWx9Mdgt39nYe87F6f5LjXxOBMKN8dy7osHNJ6vQ=
Subject key identifier: FA:2E:1F:32:EF:58:1D:7B:EF:7D:B9:A4:D2:D4:E4:70:59:D2:40:47
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018378A343541A0CFC417D98BB6ACE7BB4FC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-i4fMu9YHXvvfbmk0tTkcFnSQEc.roa
Signing time: Mon 26 Sep 2022 07:11:48 +0000
ROA not before: Mon 26 Sep 2022 07:11:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:78:a3:43:54:1a:0c:fc:41:7d:98:bb:6a:ce:7b:b4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 26 07:11:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa2e1f32ef581d7bef7db9a4d2d4e47059d24047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:81:cf:2e:5b:0a:85:d5:4a:f7:05:f7:f3:21:
d9:f1:6b:cb:f4:c2:f4:47:88:5c:af:4e:c1:af:3a:
50:17:ce:64:db:49:85:e6:63:58:67:0a:01:6f:24:
83:98:de:34:8f:f6:78:29:7c:0e:55:da:b6:60:ef:
69:76:fb:8b:56:5b:36:a8:a2:20:e0:4a:5c:98:0e:
ab:a3:8a:29:6c:c4:92:1d:ca:09:ff:16:05:de:1b:
b0:68:b7:71:cc:70:c7:fc:42:80:cb:61:d1:bf:70:
e7:88:00:90:ae:b3:46:07:f8:8c:a9:d6:4c:1d:ac:
87:8d:03:ef:28:c1:cb:b2:a7:54:e5:82:3f:a1:ff:
42:34:cf:4c:e6:88:b2:af:b9:e8:82:36:60:b8:5f:
6f:93:a2:f0:3e:34:da:a1:3d:ec:3d:c5:da:f6:3e:
c0:e3:a0:44:d2:d5:dd:03:b4:7e:49:05:4e:af:1d:
8a:1c:17:cc:1f:57:35:85:01:80:80:fe:9b:23:3d:
ac:a6:c6:67:34:70:6f:0d:03:11:a6:cc:74:a2:b6:
4e:1e:20:f0:85:ee:b4:e0:1d:f1:68:13:d1:13:f7:
8e:3c:54:73:8d:04:99:0c:7c:c7:69:a4:bd:b7:d3:
a1:26:c1:15:fe:7f:af:cb:86:07:0c:81:84:4e:ae:
36:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2E:1F:32:EF:58:1D:7B:EF:7D:B9:A4:D2:D4:E4:70:59:D2:40:47
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-i4fMu9YHXvvfbmk0tTkcFnSQEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:dc:ac:fb:2e:43:5a:16:06:85:fa:bd:7b:a1:9f:61:ef:a1:
11:03:8d:57:5a:89:da:85:72:a0:87:f3:c1:fc:31:c9:cf:a9:
eb:0c:c3:2b:e9:e4:3a:b6:7a:e3:4e:f7:79:9a:78:38:e1:b5:
4d:d6:0f:91:b8:67:da:33:0e:6c:ba:ce:8b:11:79:9a:9b:81:
1e:02:20:bc:b6:e2:a2:d5:cd:36:2e:8b:7b:8c:e3:81:e9:70:
63:06:b9:93:b5:05:67:3f:0f:9a:7c:63:3a:d4:b5:b7:a1:42:
93:14:f4:95:11:cf:24:e4:f2:07:d9:b1:48:3d:42:e2:5c:aa:
40:7e:aa:ad:02:04:4a:74:cc:ef:fd:e5:2d:0a:b9:cf:8d:46:
0b:c5:99:11:71:ec:37:f5:87:c8:92:55:ad:6c:1a:49:e0:d9:
c4:d1:59:09:56:4c:da:f2:1d:8c:b8:e4:98:9a:01:e9:78:5d:
6a:e6:e4:60:27:c7:92:bf:f7:46:48:f3:0a:be:20:7b:8c:b0:
42:6f:ee:ec:7f:2d:3d:b1:00:9e:33:d6:5a:ed:68:80:b8:f9:
23:dd:0d:83:5f:3a:19:5b:8c:e8:5c:02:50:a1:9e:7a:ce:b4:
9a:29:f3:bd:01:7a:8f:87:f1:ed:9c:9e:d2:23:3f:8a:0b:f7:
a3:b2:3f:2f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYN4o0NUGgz8QX2Yu2rOe7T8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTI2MDcxMTQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTJlMWYzMmVmNTgxZDdiZWY3ZGI5YTRkMmQ0ZTQ3MDU5ZDI0MDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIHPLlsKhdVK9wX38yHZ8WvL9ML0
R4hcr07BrzpQF85k20mF5mNYZwoBbySDmN40j/Z4KXwOVdq2YO9pdvuLVls2qKIg
4EpcmA6ro4opbMSSHcoJ/xYF3huwaLdxzHDH/EKAy2HRv3DniACQrrNGB/iMqdZM
HayHjQPvKMHLsqdU5YI/of9CNM9M5oiyr7nogjZguF9vk6LwPjTaoT3sPcXa9j7A
46BE0tXdA7R+SQVOrx2KHBfMH1c1hQGAgP6bIz2spsZnNHBvDQMRpsx0orZOHiDw
he604B3xaBPRE/eOPFRzjQSZDHzHaaS9t9OhJsEV/n+vy4YHDIGETq42YQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPouHzLvWB177325pNLU5HBZ0kBHMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMS1pNGZNdTlZSFh2dmZibWswdFRrY0ZuU1FFYy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFh
Ni8xL2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQA23Kz7LkNaFgaF+r17
oZ9h76ERA41XWonahXKgh/PB/DHJz6nrDMMr6eQ6tnrjTvd5mng44bVN1g+RuGfa
Mw5sus6LEXmam4EeAiC8tuKi1c02Lot7jOOB6XBjBrmTtQVnPw+afGM61LW3oUKT
FPSVEc8k5PIH2bFIPULiXKpAfqqtAgRKdMzv/eUtCrnPjUYLxZkRcew39YfIklWt
bBpJ4NnE0VkJVkza8h2MuOSYmgHpeF1q5uRgJ8eSv/dGSPMKviB7jLBCb+7sfy09
sQCeM9Za7WiAuPkj3Q2DXzoZW4zoXAJQoZ56zrSaKfO9AXqPh/HtnJ7SIz+KC/ej
sj8v
-----END CERTIFICATE-----
Generated at Thu May 1 11:14:35 2025 by rpki-client