Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1M0FYLqhXcwXnZivPibD7wgxT2A.roa
File: 1M0FYLqhXcwXnZivPibD7wgxT2A.roa (raw, json)
Hash identifier: 44C6qbemtueXf2MRjFZzZOhRR+VoBWr1IIzFFkd6UKc=
Subject key identifier: D4:CD:05:60:BA:A1:5D:CC:17:9D:98:AF:3E:26:C3:EF:08:31:4F:60
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018753E16ACC11C515BD3F4DBE928400D7AD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1M0FYLqhXcwXnZivPibD7wgxT2A.roa
Signing time: Thu 06 Apr 2023 00:04:54 +0000
ROA not before: Thu 06 Apr 2023 00:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:187:53e0:e278/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:53:e1:6a:cc:11:c5:15:bd:3f:4d:be:92:84:00:d7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 6 00:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4cd0560baa15dcc179d98af3e26c3ef08314f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:76:7a:2d:96:d3:e1:9f:41:4b:c5:0f:ee:98:
17:59:7f:29:5f:74:ea:12:4f:ee:08:45:4c:9d:0f:
39:c4:9e:1f:99:4d:4c:2c:1c:06:5a:2b:d1:a7:cc:
53:d2:95:68:37:e1:a1:17:0d:8e:d7:1b:16:b4:7c:
89:0a:1b:e8:63:5c:3e:40:65:77:0b:79:b6:94:0b:
df:4e:40:3f:57:f7:8d:c0:d3:8b:d5:14:37:29:ee:
b5:ef:57:67:d9:77:c1:41:a0:2d:0b:c2:1c:1a:9c:
0b:a6:24:68:7f:2a:54:ff:3f:08:71:67:4a:a9:3f:
47:98:b7:7d:70:0d:86:2f:f5:f9:21:8f:94:e5:38:
38:a8:54:17:74:eb:e4:6a:9b:ec:f5:15:94:02:bd:
c2:a3:c4:fb:3c:fb:68:38:42:cd:f9:c9:cb:0c:d9:
7e:9e:27:2e:5e:84:58:e5:c5:31:4c:6c:63:f5:82:
85:d6:b6:a0:79:7a:6a:32:ad:b0:9f:b5:e7:87:3f:
5b:23:82:fa:dd:dc:2a:e2:b7:73:3c:74:71:3d:41:
4d:23:74:93:c9:8a:4a:00:23:b5:0c:66:8c:b1:44:
1e:57:4b:d0:8a:b5:71:77:4a:1f:eb:27:53:f7:96:
2c:1e:b9:da:c9:b2:bd:5f:d4:00:22:20:25:b2:87:
4f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CD:05:60:BA:A1:5D:CC:17:9D:98:AF:3E:26:C3:EF:08:31:4F:60
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1M0FYLqhXcwXnZivPibD7wgxT2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:54:58:8b:67:d1:0e:1e:aa:ec:14:c0:c3:2b:c0:3b:46:03:
98:0a:02:24:62:8f:08:d1:0a:73:02:d2:5b:8f:17:5d:6d:65:
5e:a5:0c:64:23:d3:0c:e9:bd:ad:bc:04:6a:17:08:60:c2:97:
ca:78:15:28:0c:45:21:fa:56:b3:92:58:6f:bc:53:27:5c:51:
d4:ba:86:98:e7:91:86:c0:ed:3d:e1:60:ba:f8:b7:b4:a9:ca:
c7:4d:5c:a6:0a:de:e2:9a:f5:bf:54:83:36:c5:11:98:ba:88:
c5:e2:ff:9f:5d:af:a5:f4:ac:e7:f2:d4:86:ae:24:d2:1d:c4:
9d:2c:88:08:49:cc:d8:e9:1d:82:e5:8a:75:2f:be:84:74:12:
ee:6e:79:df:8b:0f:b5:48:27:8c:d9:16:a7:8b:1b:cd:04:e3:
3c:82:61:be:c8:44:db:78:39:00:12:04:63:59:92:23:04:b5:
11:b3:73:41:20:06:a7:1d:26:22:f0:85:c7:34:65:cf:24:e0:
24:d9:10:d7:7e:74:15:8e:49:41:d6:d9:ea:81:45:c9:95:33:
dd:47:9e:e2:0c:24:64:26:c1:a5:8d:0d:3a:90:27:01:c6:7f:
1a:34:60:de:15:e8:e3:f3:f7:b5:17:ce:9e:54:4e:5f:d8:b3:
b7:9b:3b:be
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdT4WrMEcUVvT9NvpKEANetMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDA2MDAwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGNkMDU2MGJhYTE1ZGNjMTc5ZDk4YWYzZTI2YzNlZjA4MzE0ZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHZ6LZbT4Z9BS8UP7pgXWX8pX3Tq
Ek/uCEVMnQ85xJ4fmU1MLBwGWivRp8xT0pVoN+GhFw2O1xsWtHyJChvoY1w+QGV3
C3m2lAvfTkA/V/eNwNOL1RQ3Ke6171dn2XfBQaAtC8IcGpwLpiRofypU/z8IcWdK
qT9HmLd9cA2GL/X5IY+U5Tg4qFQXdOvkapvs9RWUAr3Co8T7PPtoOELN+cnLDNl+
nicuXoRY5cUxTGxj9YKF1rageXpqMq2wn7Xnhz9bI4L63dwq4rdzPHRxPUFNI3ST
yYpKACO1DGaMsUQeV0vQirVxd0of6ydT95YsHrnaybK9X9QAIiAlsodP7wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNTNBWC6oV3MF52Yrz4mw+8IMU9gMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMU0wRllMcWhYY3dYblppdlBpYkQ3d2d4VDJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAElUWItn0Q4equwUwMMr
wDtGA5gKAiRijwjRCnMC0luPF11tZV6lDGQj0wzpva28BGoXCGDCl8p4FSgMRSH6
VrOSWG+8UydcUdS6hpjnkYbA7T3hYLr4t7SpysdNXKYK3uKa9b9UgzbFEZi6iMXi
/59dr6X0rOfy1IauJNIdxJ0siAhJzNjpHYLlinUvvoR0Eu5ued+LD7VIJ4zZFqeL
G80E4zyCYb7IRNt4OQASBGNZkiMEtRGzc0EgBqcdJiLwhcc0Zc8k4CTZENd+dBWO
SUHW2eqBRcmVM91HnuIMJGQmwaWNDTqQJwHGfxo0YN4V6OPz97UXzp5UTl/Ys7eb
O74=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:40:55 2025 by rpki-client