Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-re3C-LW3JAGgL8DM88S_ERF0Es.roa
File: 1-re3C-LW3JAGgL8DM88S_ERF0Es.roa (raw, json)
Hash identifier: swYTRNV24RM4ydRf30w7orMMdFzyVjcYPOptneJcPw0=
Subject key identifier: FA:B7:B7:0B:E2:D6:DC:90:06:80:BF:03:33:CF:12:FC:44:45:D0:4B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D9D384AC3F5F0FA26EC157A69CAC17C3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-re3C-LW3JAGgL8DM88S_ERF0Es.roa
Signing time: Sat 03 Dec 2022 21:10:28 +0000
ROA not before: Sat 03 Dec 2022 21:10:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d9:d3:84:ac:3f:5f:0f:a2:6e:c1:57:a6:9c:ac:17:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 3 21:10:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fab7b70be2d6dc900680bf0333cf12fc4445d04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:51:ea:68:2a:f7:8f:e9:62:88:70:ce:2d:
66:01:15:00:5d:29:c8:81:a7:29:c5:fe:cd:d1:1e:
c9:4f:0f:10:3d:46:98:5d:ec:18:74:fe:b4:12:53:
10:0a:fb:49:d3:df:db:03:d3:0e:f4:40:a7:a4:32:
ca:51:14:38:c3:74:12:44:c2:73:04:47:94:86:6e:
b2:f7:f0:9b:bd:23:34:5b:e8:fe:ac:cb:7e:fa:92:
1e:fe:d1:b6:d3:c6:a1:cc:2e:2b:19:3b:6f:03:48:
03:73:66:ed:80:12:53:c2:05:03:44:68:a8:e0:f7:
01:4c:41:f4:da:99:9b:87:df:63:dc:ba:b7:ce:7f:
ce:cc:ed:a8:f8:87:c2:60:28:0f:7a:6e:2b:33:f9:
0f:87:d0:e8:17:bd:c7:30:53:a0:4e:0d:84:4f:97:
ae:6b:8d:a6:32:a9:df:a1:c0:9d:07:5a:1b:3a:65:
f0:14:c3:96:18:9f:48:34:25:fd:3d:bf:40:8a:54:
1a:22:71:c0:4f:02:ef:d7:db:55:05:4d:66:00:61:
9b:6e:f9:71:81:3a:22:50:7f:c9:07:94:f1:90:6b:
ba:d4:a0:12:23:48:64:38:02:48:89:4a:31:67:c7:
59:66:10:1f:73:4e:38:a1:cf:ed:c1:48:3a:66:56:
e7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B7:B7:0B:E2:D6:DC:90:06:80:BF:03:33:CF:12:FC:44:45:D0:4B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-re3C-LW3JAGgL8DM88S_ERF0Es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:3a:b3:5a:e3:7a:67:3b:da:6b:de:09:45:ed:07:62:c4:4f:
99:d1:e4:d3:20:cb:7b:03:68:fc:4c:99:38:02:5f:9e:ef:5b:
04:1d:0a:33:4a:fc:3c:9f:b4:79:42:29:a9:ee:87:87:72:25:
ec:64:c8:ee:c8:94:8f:92:b7:98:56:fb:21:ed:be:82:61:8f:
1c:6a:e8:21:7c:86:77:2e:77:2c:17:bd:19:c3:34:15:a8:b1:
19:b8:1c:57:54:cb:e8:44:49:10:c4:50:11:60:3d:8f:c7:4f:
59:7d:ae:e7:a4:30:89:28:3a:0a:5c:53:b6:56:b5:5e:07:49:
0a:ba:d0:4e:ba:04:0d:ad:d1:fa:be:0a:76:5e:ad:22:21:eb:
b0:9e:b4:8b:48:bc:c3:83:11:4d:eb:04:82:cc:36:a0:de:d9:
2a:e8:81:c2:8f:50:73:61:0d:ea:fb:4c:67:eb:5f:0b:11:4e:
30:45:f9:55:24:12:9d:fc:8b:dd:5e:5e:7a:1c:3e:1d:2b:ee:
d5:24:79:18:0b:ac:4c:d6:7f:f8:76:31:ae:45:a1:e9:ec:75:
ae:0f:e0:51:b7:86:c3:ad:4f:85:f9:6d:64:2e:29:ec:e0:71:
b4:f3:46:e5:16:c4:5b:b8:a4:74:00:24:59:60:32:cb:00:c3:
2b:87:6d:9c
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYTZ04SsP18Pom7BV6acrBfDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjAzMjExMDI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWI3YjcwYmUyZDZkYzkwMDY4MGJmMDMzM2NmMTJmYzQ0NDVkMDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk5R6mgq94/pYohwzi1mARUAXSnI
gacpxf7N0R7JTw8QPUaYXewYdP60ElMQCvtJ09/bA9MO9ECnpDLKURQ4w3QSRMJz
BEeUhm6y9/CbvSM0W+j+rMt++pIe/tG208ahzC4rGTtvA0gDc2btgBJTwgUDRGio
4PcBTEH02pmbh99j3Lq3zn/OzO2o+IfCYCgPem4rM/kPh9DoF73HMFOgTg2ET5eu
a42mMqnfocCdB1obOmXwFMOWGJ9INCX9Pb9AilQaInHATwLv19tVBU1mAGGbbvlx
gToiUH/JB5TxkGu61KASI0hkOAJIiUoxZ8dZZhAfc044oc/twUg6ZlbnLQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPq3twvi1tyQBoC/AzPPEvxERdBLMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMS1yZTNDLUxXM0pBR2dMOERNODhTX0VSRjBFcy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFh
Ni8xL2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQCmOrNa43pnO9pr3glF
7QdixE+Z0eTTIMt7A2j8TJk4Al+e71sEHQozSvw8n7R5Qimp7oeHciXsZMjuyJSP
kreYVvsh7b6CYY8caughfIZ3LncsF70ZwzQVqLEZuBxXVMvoREkQxFARYD2Px09Z
fa7npDCJKDoKXFO2VrVeB0kKutBOugQNrdH6vgp2Xq0iIeuwnrSLSLzDgxFN6wSC
zDag3tkq6IHCj1BzYQ3q+0xn618LEU4wRflVJBKd/IvdXl56HD4dK+7VJHkYC6xM
1n/4djGuRaHp7HWuD+BRt4bDrU+F+W1kLins4HG080blFsRbuKR0ACRZYDLLAMMr
h22c
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:23:47 2025 by rpki-client