Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1YRRVgt7coUcEYTvt_vo5CZg27s.roa
File: 1YRRVgt7coUcEYTvt_vo5CZg27s.roa (raw, json)
Hash identifier: Wt/UYTQp3xYziaq2/wLSYAttzMH1vS6jFlzZoZifTFI=
Subject key identifier: D5:84:51:56:0B:7B:72:85:1C:11:84:EF:B7:FB:E8:E4:26:60:DB:BB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188530742C154BF81D84D4AE627628BB16C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1YRRVgt7coUcEYTvt_vo5CZg27s.roa
Signing time: Thu 25 May 2023 13:09:24 +0000
ROA not before: Thu 25 May 2023 13:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:53:07:42:c1:54:bf:81:d8:4d:4a:e6:27:62:8b:b1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 25 13:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d58451560b7b72851c1184efb7fbe8e42660dbbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:83:fa:02:b9:9c:56:a5:64:4c:ab:7b:87:1e:
40:60:f4:6a:87:95:af:fc:80:75:ae:85:7e:22:60:
67:29:5b:39:50:33:4a:0b:3c:37:c4:00:14:ff:65:
33:25:0c:e3:da:f1:54:c4:c7:27:d4:bb:4c:f0:0f:
fb:c0:b3:f9:d7:99:08:c0:24:a8:72:4b:72:a8:2a:
44:d9:77:d4:57:9b:a8:0b:a6:75:c6:9e:3f:2f:e3:
f7:bd:c8:78:8e:cd:a0:b7:57:ec:a4:aa:12:21:9c:
e3:14:b6:fe:2a:e4:81:28:07:a9:de:13:d7:a9:fa:
af:34:06:d9:6e:4e:39:8b:11:16:0a:a9:1d:d8:22:
59:ec:5a:26:fb:71:f0:c2:65:7f:af:66:f0:0e:60:
5c:d4:e7:b8:00:7d:f9:39:57:de:98:11:3a:c4:90:
e2:c5:52:25:9f:ae:96:aa:f7:dd:fd:1e:ef:9a:ce:
e2:99:e5:c7:1c:cf:06:b5:a3:15:ba:a0:6c:24:54:
6b:7c:44:31:0e:ab:2f:8d:29:aa:3b:ce:df:e6:62:
29:a5:f5:ef:38:95:90:37:d4:06:d1:a5:e3:a1:2f:
e6:8a:c0:ba:45:ca:40:2d:e1:c7:8d:cb:0d:6c:f7:
55:2b:86:48:98:6b:c8:8b:75:f6:0a:f8:07:0d:14:
c6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:84:51:56:0B:7B:72:85:1C:11:84:EF:B7:FB:E8:E4:26:60:DB:BB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1YRRVgt7coUcEYTvt_vo5CZg27s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:d6:45:23:3e:39:0d:28:a5:b4:ad:72:1b:d9:11:d9:06:4c:
7c:00:3d:7c:22:fe:c9:d1:10:a1:21:4f:86:13:cc:47:0a:ce:
0b:32:dd:7c:92:52:a3:59:75:b5:65:bb:a1:6c:a1:12:a6:ff:
0f:06:ce:8c:e5:03:1d:0b:ca:80:47:8b:a4:1f:f1:ee:fa:26:
a5:75:af:df:48:5e:70:1f:af:81:21:ca:07:8f:b3:22:77:f7:
23:5a:55:c6:74:ff:77:f9:a3:1f:b3:a0:ed:5b:9c:5e:83:00:
13:65:50:8c:64:0e:5d:49:10:05:ed:cd:03:21:aa:d4:b8:b0:
60:c8:5c:0c:c5:46:90:7b:6e:a9:e2:42:eb:b3:27:4e:45:b1:
05:6f:13:46:45:1c:2d:9f:06:30:35:ff:5a:a9:1e:5f:3b:30:
37:16:af:bb:ec:d4:ad:a8:f1:bc:f7:4b:e6:aa:66:a2:0a:94:
5f:cc:1a:1d:39:0d:ac:15:47:a3:3f:9c:d7:9b:ab:2b:94:29:
e0:11:72:13:70:34:23:38:a8:47:20:70:3c:f7:0f:f9:63:60:
0f:f1:fb:19:84:b2:af:d1:87:8a:ef:2f:4a:92:6d:b6:e4:fa:
29:28:01:69:eb:f5:65:a9:bd:28:68:d2:e6:30:8a:33:d0:3c:
d2:8e:26:19
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhTB0LBVL+B2E1K5idii7FsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTI1MTMwOTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTg0NTE1NjBiN2I3Mjg1MWMxMTg0ZWZiN2ZiZThlNDI2NjBkYmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYP6ArmcVqVkTKt7hx5AYPRqh5Wv
/IB1roV+ImBnKVs5UDNKCzw3xAAU/2UzJQzj2vFUxMcn1LtM8A/7wLP515kIwCSo
cktyqCpE2XfUV5uoC6Z1xp4/L+P3vch4js2gt1fspKoSIZzjFLb+KuSBKAep3hPX
qfqvNAbZbk45ixEWCqkd2CJZ7Fom+3HwwmV/r2bwDmBc1Oe4AH35OVfemBE6xJDi
xVIln66Wqvfd/R7vms7imeXHHM8GtaMVuqBsJFRrfEQxDqsvjSmqO87f5mIppfXv
OJWQN9QG0aXjoS/misC6RcpALeHHjcsNbPdVK4ZImGvIi3X2CvgHDRTGvwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNWEUVYLe3KFHBGE77f76OQmYNu7MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMVlSUlZndDdjb1VjRVlUdnRfdm81Q1pnMjdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABXWRSM+OQ0opbStchvZ
EdkGTHwAPXwi/snREKEhT4YTzEcKzgsy3XySUqNZdbVlu6FsoRKm/w8GzozlAx0L
yoBHi6Qf8e76JqV1r99IXnAfr4EhygePsyJ39yNaVcZ0/3f5ox+zoO1bnF6DABNl
UIxkDl1JEAXtzQMhqtS4sGDIXAzFRpB7bqniQuuzJ05FsQVvE0ZFHC2fBjA1/1qp
Hl87MDcWr7vs1K2o8bz3S+aqZqIKlF/MGh05DawVR6M/nNebqyuUKeARchNwNCM4
qEcgcDz3D/ljYA/x+xmEsq/Rh4rvL0qSbbbk+ikoAWnr9WWpvSho0uYwijPQPNKO
Jhk=
-----END CERTIFICATE-----
Generated at Fri May 2 16:13:24 2025 by rpki-client