Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2R7z3q1eiLMyD2sg16Q3yvXSsek.roa
File: 2R7z3q1eiLMyD2sg16Q3yvXSsek.roa (raw, json)
Hash identifier: 16wyCw24E6zHU8/WMZA8qjq9rcP3lwVU82H1rronCnc=
Subject key identifier: D9:1E:F3:DE:AD:5E:88:B3:32:0F:6B:20:D7:A4:37:CA:F5:D2:B1:E9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183F43BF01802566F1D1C73F359D0824DBD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2R7z3q1eiLMyD2sg16Q3yvXSsek.roa
Signing time: Thu 20 Oct 2022 07:11:52 +0000
ROA not before: Thu 20 Oct 2022 07:11:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f4:3b:f0:18:02:56:6f:1d:1c:73:f3:59:d0:82:4d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 20 07:11:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d91ef3dead5e88b3320f6b20d7a437caf5d2b1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0b:55:9e:1e:d2:72:ef:03:06:fc:8d:4c:0f:
3e:9a:57:7a:83:3d:d8:0c:01:ee:a9:fb:ee:6c:8a:
fc:a6:06:91:ed:8b:42:84:32:64:25:37:f1:4d:54:
b0:27:06:6c:a5:db:7f:0e:ec:be:45:b5:93:21:a9:
a1:56:9a:b8:29:80:53:1b:3d:c8:2f:06:23:60:54:
42:cc:c5:94:12:2c:ea:02:ba:d8:6d:ab:3b:31:24:
72:10:18:21:55:01:f8:80:29:d7:09:d8:0c:e9:9f:
4f:53:2a:01:33:2d:db:5a:4c:00:f4:76:b7:1a:be:
65:ff:a3:c9:11:8d:4c:25:14:6e:d8:86:74:ae:58:
25:ba:90:ce:9c:2b:09:d9:a6:00:1c:ca:33:08:bf:
c7:e8:59:e4:44:96:0a:07:d8:d9:a4:dc:16:b8:6a:
65:f6:3e:53:fd:f6:16:eb:7a:d5:91:92:6a:eb:28:
b6:2a:e9:b1:7f:5d:7e:f7:e9:c9:f1:91:4b:ed:7c:
13:90:cd:36:84:dc:19:43:f5:cb:2f:33:ff:b8:43:
2b:1c:21:2f:3e:5e:7b:b8:b2:4f:1a:33:44:de:9e:
ef:78:8a:74:9a:33:4a:8d:cf:4e:0d:d8:88:a7:24:
fb:d9:41:d8:03:b8:00:6d:9b:5f:62:a7:0d:8c:02:
27:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1E:F3:DE:AD:5E:88:B3:32:0F:6B:20:D7:A4:37:CA:F5:D2:B1:E9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2R7z3q1eiLMyD2sg16Q3yvXSsek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:0c:69:73:e8:08:5f:ab:7a:f3:6a:30:e0:8e:0f:3c:73:74:
bb:22:3d:51:7e:f5:92:c0:5b:a6:04:5b:c8:3e:aa:47:2f:4f:
c4:eb:fd:8f:10:7f:d5:fe:e5:17:0c:fb:87:b6:ba:fb:5a:0a:
b7:7b:bb:ed:bf:5e:f1:fd:ab:f1:4e:26:b6:e8:d5:22:d7:e7:
98:0c:80:f0:30:c2:19:76:94:80:9f:dd:0f:56:32:22:4f:2c:
84:8f:6b:09:a7:a1:8f:06:1f:fa:37:60:3f:1b:f6:0e:15:2c:
40:d5:0c:da:37:dc:1b:0a:11:f2:3a:76:a6:01:50:fe:a2:60:
21:73:ae:73:07:69:ac:37:03:74:ae:01:fb:47:84:2d:e7:dd:
b7:51:e7:0a:2d:f3:18:3c:ba:a0:f7:08:f3:7a:81:b5:41:35:
56:1b:8c:8c:8b:74:e8:0e:08:2a:41:34:fd:73:ca:1b:99:60:
d2:e4:7e:40:88:d9:64:b6:7c:c4:c5:9d:fd:21:46:f2:68:0a:
5c:19:77:1e:e2:4a:a6:d7:ea:4a:0b:54:dd:09:56:5a:42:a8:
e5:97:91:4e:15:c7:df:9c:6d:7e:1b:e7:ad:e8:a8:54:70:f1:
2c:44:e7:b4:c6:d6:07:bf:e2:b9:f6:9c:61:0a:04:7d:0e:d6:
3a:f2:e0:eb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYP0O/AYAlZvHRxz81nQgk29MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDIwMDcxMTUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTFlZjNkZWFkNWU4OGIzMzIwZjZiMjBkN2E0MzdjYWY1ZDJiMWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwtVnh7Scu8DBvyNTA8+mld6gz3Y
DAHuqfvubIr8pgaR7YtChDJkJTfxTVSwJwZspdt/Duy+RbWTIamhVpq4KYBTGz3I
LwYjYFRCzMWUEizqArrYbas7MSRyEBghVQH4gCnXCdgM6Z9PUyoBMy3bWkwA9Ha3
Gr5l/6PJEY1MJRRu2IZ0rlglupDOnCsJ2aYAHMozCL/H6FnkRJYKB9jZpNwWuGpl
9j5T/fYW63rVkZJq6yi2Kumxf11+9+nJ8ZFL7XwTkM02hNwZQ/XLLzP/uEMrHCEv
Pl57uLJPGjNE3p7veIp0mjNKjc9ODdiIpyT72UHYA7gAbZtfYqcNjAInXwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNke896tXoizMg9rINekN8r10rHpMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMlI3ejNxMWVpTE15RDJzZzE2UTN5dlhTc2VrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGYMaXPoCF+revNqMOCO
DzxzdLsiPVF+9ZLAW6YEW8g+qkcvT8Tr/Y8Qf9X+5RcM+4e2uvtaCrd7u+2/XvH9
q/FOJrbo1SLX55gMgPAwwhl2lICf3Q9WMiJPLISPawmnoY8GH/o3YD8b9g4VLEDV
DNo33BsKEfI6dqYBUP6iYCFzrnMHaaw3A3SuAftHhC3n3bdR5wot8xg8uqD3CPN6
gbVBNVYbjIyLdOgOCCpBNP1zyhuZYNLkfkCI2WS2fMTFnf0hRvJoClwZdx7iSqbX
6koLVN0JVlpCqOWXkU4Vx9+cbX4b563oqFRw8SxE57TG1ge/4rn2nGEKBH0O1jry
4Os=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:06:35 2025 by rpki-client