Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1fagwqFE2M7rUJSJyzMwbxhEMgQ.roa
File: 1fagwqFE2M7rUJSJyzMwbxhEMgQ.roa (raw, json)
Hash identifier: gYRuki3aeGyVX54fXnlmFUPg9LYQS9rTWnFX2ZMB158=
Subject key identifier: D5:F6:A0:C2:A1:44:D8:CE:EB:50:94:89:CB:33:30:6F:18:44:32:04
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A86F222F90C0AA34BB9B6E0B2B6DFBC6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1fagwqFE2M7rUJSJyzMwbxhEMgQ.roa
Signing time: Fri 03 Mar 2023 17:05:00 +0000
ROA not before: Fri 03 Mar 2023 17:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:a86e:6334/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a8:6f:22:2f:90:c0:aa:34:bb:9b:6e:0b:2b:6d:fb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 3 17:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5f6a0c2a144d8ceeb509489cb33306f18443204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e6:81:65:9f:a8:0f:c4:2f:3b:9d:0b:6c:1a:
1b:b5:18:f0:03:53:1c:1c:6c:6b:d0:35:74:9b:28:
2f:20:0d:23:1b:5f:d9:02:70:a2:5a:70:5b:28:c4:
2a:94:4f:cd:d6:4a:10:cf:ef:49:00:fb:c8:44:cc:
d8:1f:88:68:1f:ac:00:2f:64:7f:38:63:49:e1:63:
8f:36:07:86:bf:12:55:8e:11:6b:45:4f:6c:ff:e2:
6c:84:74:b7:fa:09:ec:13:a0:8f:c6:7f:b5:42:e3:
06:1e:cb:23:97:29:3b:05:87:b1:c2:4f:2c:ab:9c:
9b:1b:b7:33:69:a3:8b:85:b0:47:d5:5b:3b:ac:92:
13:d4:ef:e6:f2:d8:c5:9d:6c:6c:7f:a9:39:c7:8a:
8a:3f:e0:bf:e0:4b:a0:f2:c9:d9:bf:69:ba:ca:33:
5b:59:bc:65:87:6b:77:09:42:0b:2f:87:7d:00:9e:
b4:f2:60:d8:0c:8c:49:fb:97:83:ee:55:53:a5:13:
0a:4d:6c:51:d9:72:28:1f:05:fa:f4:55:94:0f:b8:
f1:03:a4:44:e3:14:a3:9b:1d:95:db:06:79:f4:85:
c0:30:67:a6:a5:96:15:6b:98:6a:15:19:49:d9:8d:
82:ef:68:5f:4e:00:4b:2b:c1:d4:d2:70:10:9e:a2:
ff:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F6:A0:C2:A1:44:D8:CE:EB:50:94:89:CB:33:30:6F:18:44:32:04
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1fagwqFE2M7rUJSJyzMwbxhEMgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:06:81:05:73:f1:b3:0d:ea:92:f6:f3:78:f2:80:1f:85:2e:
16:bb:f3:48:7e:33:98:ea:7c:9d:0c:8b:c2:82:b8:2e:9d:8f:
42:ad:08:42:b9:6b:89:01:68:1d:fb:a8:16:e4:e5:90:85:cd:
30:03:be:67:76:f7:ee:b1:2d:e7:6a:bc:a7:b5:86:ce:1b:17:
17:77:d4:ae:3a:f9:a7:88:0f:88:7c:df:aa:81:75:51:55:ef:
54:e3:0c:99:73:26:46:3f:9e:7c:ca:85:d1:b9:fa:67:fd:71:
15:0c:cd:55:b1:bd:e9:b3:6c:4f:37:08:d6:96:9d:3c:90:ff:
dd:87:6e:34:82:0b:17:a1:24:c6:8c:e3:7c:7c:f2:d8:32:00:
e2:cd:e8:6f:f0:49:3f:c3:1b:f7:3b:f3:b0:b1:4f:08:d0:85:
4c:b8:ff:05:b9:4e:50:ee:52:3f:8d:55:4f:b6:15:06:54:89:
b0:4b:b3:45:d2:b5:f9:a2:ca:2c:98:38:e5:7f:59:ac:ba:4e:
b3:1b:3f:2b:9c:91:cd:e1:e1:a6:97:7e:b5:e4:b3:f3:16:da:
53:74:d1:7e:e8:94:d3:f4:a4:c1:44:59:ea:7d:28:93:0f:17:
30:bf:f2:1f:7b:a5:12:ec:8a:80:8e:8a:c8:5f:47:2f:de:cd:
a0:65:d7:9b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaobyIvkMCqNLubbgsrbfvGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzAzMTcwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWY2YTBjMmExNDRkOGNlZWI1MDk0ODljYjMzMzA2ZjE4NDQzMjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieaBZZ+oD8QvO50LbBobtRjwA1Mc
HGxr0DV0mygvIA0jG1/ZAnCiWnBbKMQqlE/N1koQz+9JAPvIRMzYH4hoH6wAL2R/
OGNJ4WOPNgeGvxJVjhFrRU9s/+JshHS3+gnsE6CPxn+1QuMGHssjlyk7BYexwk8s
q5ybG7czaaOLhbBH1Vs7rJIT1O/m8tjFnWxsf6k5x4qKP+C/4Eug8snZv2m6yjNb
Wbxlh2t3CUILL4d9AJ608mDYDIxJ+5eD7lVTpRMKTWxR2XIoHwX69FWUD7jxA6RE
4xSjmx2V2wZ59IXAMGempZYVa5hqFRlJ2Y2C72hfTgBLK8HU0nAQnqL/BwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNX2oMKhRNjO61CUicszMG8YRDIEMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMWZhZ3dxRkUyTTdyVUpTSnl6TXdieGhFTWdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABkGgQVz8bMN6pL283jy
gB+FLha780h+M5jqfJ0Mi8KCuC6dj0KtCEK5a4kBaB37qBbk5ZCFzTADvmd29+6x
LedqvKe1hs4bFxd31K46+aeID4h836qBdVFV71TjDJlzJkY/nnzKhdG5+mf9cRUM
zVWxvemzbE83CNaWnTyQ/92HbjSCCxehJMaM43x88tgyAOLN6G/wST/DG/c787Cx
TwjQhUy4/wW5TlDuUj+NVU+2FQZUibBLs0XStfmiyiyYOOV/Way6TrMbPyuckc3h
4aaXfrXks/MW2lN00X7olNP0pMFEWep9KJMPFzC/8h97pRLsioCOishfRy/ezaBl
15s=
-----END CERTIFICATE-----
Generated at Fri May 2 14:06:10 2025 by rpki-client