Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1qCXZevxLE_E3NZQnaQwwn2nwPw.roa
File: 1qCXZevxLE_E3NZQnaQwwn2nwPw.roa (raw, json)
Hash identifier: AlB3wOUoM7uU1YzS6fZhtrMEjpHiNPVk6y0dfMj9J14=
Subject key identifier: D6:A0:97:65:EB:F1:2C:4F:C4:DC:D6:50:9D:A4:30:C2:7D:A7:C0:FC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01866026C201EDC4FAE73756B2B2FD747F53
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1qCXZevxLE_E3NZQnaQwwn2nwPw.roa
Signing time: Fri 17 Feb 2023 16:13:17 +0000
ROA not before: Fri 17 Feb 2023 16:13:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:60:26:c2:01:ed:c4:fa:e7:37:56:b2:b2:fd:74:7f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 17 16:13:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6a09765ebf12c4fc4dcd6509da430c27da7c0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e1:a4:bd:34:86:0a:29:91:3a:8d:ef:19:94:
5e:b0:b4:08:56:cd:45:d0:10:17:88:90:28:a7:91:
ad:e8:e7:ee:c7:9d:69:30:41:3f:4b:99:a8:bc:e0:
34:de:bb:da:83:78:c2:fc:bd:38:d3:9f:91:2f:34:
76:d2:66:25:18:ee:fa:d4:4c:a6:4c:20:32:6e:7e:
1d:37:df:11:2f:5d:7a:0c:52:e3:69:72:29:c1:99:
56:f0:b5:6d:d1:13:0b:0d:c6:81:32:d1:c8:50:a7:
23:1e:33:14:fb:82:68:a5:a2:f9:64:0e:e1:41:42:
a4:ec:4c:12:8e:69:28:ea:1d:2c:3c:3e:81:86:94:
cb:cf:20:a9:ec:b3:be:b2:c6:12:f3:e2:6d:ef:8b:
8e:df:7e:68:c4:2d:af:1e:da:4c:34:9f:80:ab:46:
40:e0:4f:2c:bc:2f:94:84:26:3c:65:e0:35:a8:18:
5c:c4:dc:7f:9a:b8:f7:a5:00:d8:b3:00:50:03:e5:
31:83:d2:c9:89:d3:a4:72:8e:bd:3e:19:c5:74:50:
be:00:9c:e4:88:c1:55:db:00:97:51:25:59:3d:5d:
19:87:fb:31:ee:9d:ae:dc:78:3c:3e:2a:71:f7:60:
76:40:71:69:6c:25:a2:6a:03:42:18:37:d2:30:82:
33:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A0:97:65:EB:F1:2C:4F:C4:DC:D6:50:9D:A4:30:C2:7D:A7:C0:FC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1qCXZevxLE_E3NZQnaQwwn2nwPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:aa:c9:36:9b:33:24:de:88:df:5b:32:3b:4a:98:13:e1:ca:
eb:cc:e6:7c:7c:21:4e:dc:68:2f:c9:dc:b3:fa:b3:05:e8:7a:
66:42:44:c2:30:61:b0:3b:67:be:00:1e:d3:62:76:c4:c5:f4:
6c:85:1b:f4:f1:7d:cc:56:d0:fb:e7:f7:45:75:0b:d9:bb:46:
78:c6:97:04:64:64:36:bd:fe:28:2a:0a:fd:9c:bb:ea:89:14:
00:0e:bc:33:57:07:62:e1:6d:de:4d:94:a9:ec:66:64:95:d4:
86:6b:92:60:34:d1:ab:87:23:39:b6:fc:4c:ca:93:bd:7e:e9:
fc:3d:15:37:c8:05:dd:11:85:31:c4:45:c3:cd:66:e6:e7:cf:
d9:4b:ac:e6:00:69:5b:0f:35:63:ca:f7:d2:2a:7b:39:95:32:
50:d3:d3:87:8d:ea:92:05:3e:de:03:e9:52:44:5b:a9:3b:48:
92:ec:f7:30:10:fa:1b:92:34:7f:6a:62:5c:b2:6d:1f:bd:9c:
d7:99:86:63:4c:80:ba:83:ae:c2:b2:e6:4e:fc:eb:e6:44:a5:
d1:22:f5:6c:69:2a:43:45:7f:e3:d0:b5:a6:05:9b:00:da:6c:
95:36:12:cc:91:55:ed:ed:ce:48:f1:43:3f:df:c3:d9:f4:b1:
19:2d:37:f7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZgJsIB7cT65zdWsrL9dH9TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjE3MTYxMzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmEwOTc2NWViZjEyYzRmYzRkY2Q2NTA5ZGE0MzBjMjdkYTdjMGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweGkvTSGCimROo3vGZResLQIVs1F
0BAXiJAop5Gt6Ofux51pMEE/S5movOA03rvag3jC/L0405+RLzR20mYlGO761Eym
TCAybn4dN98RL116DFLjaXIpwZlW8LVt0RMLDcaBMtHIUKcjHjMU+4JopaL5ZA7h
QUKk7EwSjmko6h0sPD6BhpTLzyCp7LO+ssYS8+Jt74uO335oxC2vHtpMNJ+Aq0ZA
4E8svC+UhCY8ZeA1qBhcxNx/mrj3pQDYswBQA+Uxg9LJidOkco69PhnFdFC+AJzk
iMFV2wCXUSVZPV0Zh/sx7p2u3Hg8Pipx92B2QHFpbCWiagNCGDfSMIIzXwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNagl2Xr8SxPxNzWUJ2kMMJ9p8D8MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMXFDWFpldnhMRV9FM05aUW5hUXd3bjJud1B3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA+qyTabMyTeiN9bMjtK
mBPhyuvM5nx8IU7caC/J3LP6swXoemZCRMIwYbA7Z74AHtNidsTF9GyFG/TxfcxW
0Pvn90V1C9m7RnjGlwRkZDa9/igqCv2cu+qJFAAOvDNXB2Lhbd5NlKnsZmSV1IZr
kmA00auHIzm2/EzKk71+6fw9FTfIBd0RhTHERcPNZubnz9lLrOYAaVsPNWPK99Iq
ezmVMlDT04eN6pIFPt4D6VJEW6k7SJLs9zAQ+huSNH9qYlyybR+9nNeZhmNMgLqD
rsKy5k786+ZEpdEi9WxpKkNFf+PQtaYFmwDabJU2EsyRVe3tzkjxQz/fw9n0sRkt
N/c=
-----END CERTIFICATE-----
Generated at Thu May 1 18:07:37 2025 by rpki-client