Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Xcf4BZBTbWcWyAhMO0TZcef-RE.roa
File: 2Xcf4BZBTbWcWyAhMO0TZcef-RE.roa (raw, json)
Hash identifier: MnWG3fmWfg4/UGxgSni2maAssIn7wx2qWNQ5PDh+2XE=
Subject key identifier: D9:77:1F:E0:16:41:4D:B5:9C:5B:20:21:30:ED:13:65:C7:9F:F9:11
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181D55A86C5139A218A3B41192B2BCE35DE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Xcf4BZBTbWcWyAhMO0TZcef-RE.roa
Signing time: Wed 06 Jul 2022 21:11:28 +0000
ROA not before: Wed 06 Jul 2022 21:11:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d5:5a:86:c5:13:9a:21:8a:3b:41:19:2b:2b:ce:35:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 6 21:11:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9771fe016414db59c5b202130ed1365c79ff911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:db:9e:36:b7:60:ea:06:2d:36:f6:bf:ce:1f:
ad:a9:46:87:e1:eb:2c:35:bc:87:b4:19:0b:19:6a:
4a:9e:a3:40:7a:75:ec:b6:2e:88:eb:53:04:48:78:
00:18:32:3b:c7:88:09:cd:5f:20:35:a1:79:9e:b3:
97:81:cb:c6:cf:cd:93:be:15:46:82:10:91:74:a6:
c7:5f:7c:0e:ec:f6:da:78:18:7b:00:86:ef:04:f2:
27:2c:5b:71:f8:ea:15:18:79:16:bc:ad:49:10:b3:
33:0b:8a:f2:87:30:a9:59:39:44:bd:67:e6:39:22:
f2:0a:c0:2a:ff:1d:da:0e:8e:8a:77:83:46:11:26:
c4:dd:e5:00:65:ce:03:78:5f:8f:38:52:54:30:23:
24:ae:f4:a7:86:ab:66:fd:75:e9:87:9b:b7:9c:b0:
7a:55:82:73:ad:5f:81:eb:da:39:fe:62:8b:c3:fc:
8b:c1:70:97:03:b9:ce:f6:cd:46:55:7e:c3:fd:93:
50:68:44:d6:8f:15:1d:ca:5d:56:e7:e1:96:86:f6:
87:23:fb:96:13:cd:1d:17:35:01:b7:04:aa:52:69:
cf:b9:98:0d:af:37:3f:e6:cd:25:c3:4d:c7:f0:a0:
8d:ff:37:9b:0b:15:a3:0b:5d:fd:15:86:c7:d5:de:
e9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:77:1F:E0:16:41:4D:B5:9C:5B:20:21:30:ED:13:65:C7:9F:F9:11
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Xcf4BZBTbWcWyAhMO0TZcef-RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b2:7c:8c:00:e4:40:29:7d:9a:79:1e:cb:20:c8:c0:47:0c:ce:
58:75:67:90:d4:ee:61:12:d4:46:01:3e:cc:0c:3f:1e:e7:20:
c0:d8:1f:f7:21:29:7e:56:9b:31:c8:e2:c5:c7:11:30:15:2e:
e3:ef:f6:20:e8:af:28:5d:9c:cb:88:01:1e:f2:73:c1:ed:05:
a3:f0:93:3f:1a:61:d2:8c:d6:56:ad:6a:a5:1a:b0:4c:10:df:
26:18:e4:6d:15:fb:b0:26:61:be:36:77:25:83:20:cb:11:0f:
ca:78:69:c1:ab:87:08:c3:f4:fd:7c:26:c0:e2:86:86:30:dd:
fd:1e:c4:b5:e9:dd:67:e7:3e:74:fe:71:0d:0c:c4:50:6b:90:
db:24:dc:cf:55:c7:8e:98:67:46:66:f0:cb:67:a2:46:68:a2:
f8:07:cd:a3:88:8d:0a:01:c5:39:25:91:10:7c:2a:d3:c9:1f:
4e:43:a3:9d:b5:00:82:1c:12:a2:c2:e1:91:3a:89:5c:e0:c7:
b9:80:73:dc:de:ef:52:95:c6:03:84:92:2e:e0:f8:ff:34:84:
27:f4:a1:47:29:26:35:82:a7:64:e0:79:0d:b9:6d:08:a5:f7:
3b:c9:4e:b1:6a:b3:0f:33:f6:50:24:db:52:9c:3e:a6:e6:36:
21:ec:ca:10
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYHVWobFE5ohijtBGSsrzjXeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzA2MjExMTI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTc3MWZlMDE2NDE0ZGI1OWM1YjIwMjEzMGVkMTM2NWM3OWZmOTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidueNrdg6gYtNva/zh+tqUaH4ess
NbyHtBkLGWpKnqNAenXsti6I61MESHgAGDI7x4gJzV8gNaF5nrOXgcvGz82TvhVG
ghCRdKbHX3wO7PbaeBh7AIbvBPInLFtx+OoVGHkWvK1JELMzC4ryhzCpWTlEvWfm
OSLyCsAq/x3aDo6Kd4NGESbE3eUAZc4DeF+POFJUMCMkrvSnhqtm/XXph5u3nLB6
VYJzrV+B69o5/mKLw/yLwXCXA7nO9s1GVX7D/ZNQaETWjxUdyl1W5+GWhvaHI/uW
E80dFzUBtwSqUmnPuZgNrzc/5s0lw03H8KCN/zebCxWjC139FYbH1d7plwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNl3H+AWQU21nFsgITDtE2XHn/kRMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMlhjZjRCWkJUYldjV3lBaE1PMFRaY2VmLVJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALJ8jADkQCl9mnkeyyDI
wEcMzlh1Z5DU7mES1EYBPswMPx7nIMDYH/chKX5WmzHI4sXHETAVLuPv9iDoryhd
nMuIAR7yc8HtBaPwkz8aYdKM1lataqUasEwQ3yYY5G0V+7AmYb42dyWDIMsRD8p4
acGrhwjD9P18JsDihoYw3f0exLXp3WfnPnT+cQ0MxFBrkNsk3M9Vx46YZ0Zm8Mtn
okZoovgHzaOIjQoBxTklkRB8KtPJH05Do521AIIcEqLC4ZE6iVzgx7mAc9ze71KV
xgOEki7g+P80hCf0oUcpJjWCp2TgeQ25bQil9zvJTrFqsw8z9lAk21KcPqbmNiHs
yhA=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:28 2025 by rpki-client