Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2RKZoH6gXMaFRqNDMoslIaObH0Q.roa
File: 2RKZoH6gXMaFRqNDMoslIaObH0Q.roa (raw, json)
Hash identifier: B/9gIKGfPXwt/KMuFV/rs+0kXl0lsXqnohPJmwAGTsQ=
Subject key identifier: D9:12:99:A0:7E:A0:5C:C6:85:46:A3:43:32:8B:25:21:A3:9B:1F:44
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01898C1C3764CD0B5531360E2148E95F93CE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2RKZoH6gXMaFRqNDMoslIaObH0Q.roa
Signing time: Tue 25 Jul 2023 08:13:26 +0000
ROA not before: Tue 25 Jul 2023 08:13:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8c:1c:37:64:cd:0b:55:31:36:0e:21:48:e9:5f:93:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 25 08:13:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d91299a07ea05cc68546a343328b2521a39b1f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:d9:80:43:b4:39:d1:a4:33:ad:dd:4f:81:
79:8a:2a:7e:59:92:26:54:ce:1d:9b:a0:1c:28:a1:
a4:e2:30:72:00:bd:39:b4:53:48:f0:6e:44:39:f7:
ac:3e:e4:53:e0:5a:d0:fa:02:f7:0a:91:1f:b2:4b:
a2:60:33:e6:a9:8d:2e:6d:13:7a:31:cf:dc:03:08:
e1:07:99:bd:06:65:5a:0a:ff:a6:72:e0:c4:2f:a7:
7e:8e:4a:af:0b:46:69:1c:7a:ff:8d:d4:3f:59:b3:
d1:18:21:36:e4:d6:08:a7:9c:27:e9:fc:21:9b:9b:
98:81:4b:9d:a1:2c:e4:21:67:4f:90:ce:4f:1a:57:
38:0c:11:5e:22:66:05:97:54:50:ee:1d:ea:66:6d:
8d:a2:75:62:e7:46:64:90:a4:30:39:09:35:72:b7:
0b:31:b9:53:e7:1f:f1:60:7e:6c:19:3f:a5:eb:e9:
da:3a:ce:3a:1a:25:a6:5f:a3:3a:59:bf:f9:31:68:
5d:36:46:48:c1:20:0f:44:7b:e7:32:e7:f9:ab:cf:
40:6b:12:15:81:8b:3f:5e:8f:0c:50:8b:6a:37:92:
fd:5e:30:94:80:08:89:b5:7f:7c:a5:11:ef:7e:63:
19:4c:01:c6:a9:c4:b1:21:33:64:30:67:f1:c4:34:
db:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:12:99:A0:7E:A0:5C:C6:85:46:A3:43:32:8B:25:21:A3:9B:1F:44
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2RKZoH6gXMaFRqNDMoslIaObH0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:bf:0c:89:32:a1:0f:75:8a:82:4e:bd:c8:07:f7:1d:8f:c3:
70:68:0d:94:66:c7:10:0e:39:6a:29:4b:c4:4c:7b:a6:a3:87:
c7:7c:2f:f7:b6:44:dc:f1:bb:46:9c:c7:7e:5f:50:3c:3e:7e:
26:ba:c1:e0:9a:cc:04:80:c9:05:1f:a7:25:e1:5f:75:c4:f0:
f9:e2:3d:d5:c5:a4:52:af:34:fb:40:8a:69:9c:eb:b9:4e:c2:
26:1c:43:5a:2c:3d:af:ca:12:4b:12:13:7f:fc:25:6b:e9:cb:
cf:61:f9:50:c9:39:2c:2c:bc:31:b3:a1:b3:88:1c:05:fb:47:
7b:cb:b3:5d:a7:05:76:53:c4:16:47:f4:7c:73:93:93:6f:e6:
a8:63:76:c2:94:ef:cd:5c:a6:d9:81:b8:25:2c:6b:32:71:4b:
07:a9:e2:ef:d2:fa:80:94:36:86:9f:2a:67:e0:74:6a:3a:8e:
d6:db:0f:11:83:6a:1e:fb:cb:f8:d9:2d:d3:78:8c:75:de:34:
bb:36:85:98:08:37:06:3c:21:ae:e2:da:df:10:b2:7b:98:30:
bf:f6:b9:ff:d8:ca:77:9c:68:4b:e3:54:42:7a:be:f5:2a:41:
bc:f0:ea:63:28:f1:c9:86:29:ac:16:b0:85:06:64:04:a4:7e:
08:a2:ab:3e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmMHDdkzQtVMTYOIUjpX5POMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzI1MDgxMzI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTEyOTlhMDdlYTA1Y2M2ODU0NmEzNDMzMjhiMjUyMWEzOWIxZjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5jZgEO0OdGkM63dT4F5iip+WZIm
VM4dm6AcKKGk4jByAL05tFNI8G5EOfesPuRT4FrQ+gL3CpEfskuiYDPmqY0ubRN6
Mc/cAwjhB5m9BmVaCv+mcuDEL6d+jkqvC0ZpHHr/jdQ/WbPRGCE25NYIp5wn6fwh
m5uYgUudoSzkIWdPkM5PGlc4DBFeImYFl1RQ7h3qZm2NonVi50ZkkKQwOQk1crcL
MblT5x/xYH5sGT+l6+naOs46GiWmX6M6Wb/5MWhdNkZIwSAPRHvnMuf5q89AaxIV
gYs/Xo8MUItqN5L9XjCUgAiJtX98pRHvfmMZTAHGqcSxITNkMGfxxDTbwQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNkSmaB+oFzGhUajQzKLJSGjmx9EMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMlJLWm9INmdYTWFGUnFORE1vc2xJYU9iSDBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGO/DIkyoQ91ioJOvcgH
9x2Pw3BoDZRmxxAOOWopS8RMe6ajh8d8L/e2RNzxu0acx35fUDw+fia6weCazASA
yQUfpyXhX3XE8PniPdXFpFKvNPtAimmc67lOwiYcQ1osPa/KEksSE3/8JWvpy89h
+VDJOSwsvDGzobOIHAX7R3vLs12nBXZTxBZH9Hxzk5Nv5qhjdsKU781cptmBuCUs
azJxSwep4u/S+oCUNoafKmfgdGo6jtbbDxGDah77y/jZLdN4jHXeNLs2hZgINwY8
Ia7i2t8QsnuYML/2uf/YynecaEvjVEJ6vvUqQbzw6mMo8cmGKawWsIUGZASkfgii
qz4=
-----END CERTIFICATE-----
Generated at Fri May 2 04:30:19 2025 by rpki-client