Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2q5J0ONFvnH2YrBxzncoA87BHOY.roa
File: 2q5J0ONFvnH2YrBxzncoA87BHOY.roa (raw, json)
Hash identifier: Yjy0yCex+IzltvoYqNA8vqmxrRMwcIoeoBB7eTfLgFE=
Subject key identifier: DA:AE:49:D0:E3:45:BE:71:F6:62:B0:71:CE:77:28:03:CE:C1:1C:E6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187161F0EA3F17A367B70070C6E008A80FC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2q5J0ONFvnH2YrBxzncoA87BHOY.roa
Signing time: Sat 25 Mar 2023 00:15:46 +0000
ROA not before: Sat 25 Mar 2023 00:15:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:16:1f:0e:a3:f1:7a:36:7b:70:07:0c:6e:00:8a:80:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 25 00:15:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=daae49d0e345be71f662b071ce772803cec11ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f4:c6:29:b7:08:9b:02:c4:b1:37:7c:e3:db:
e5:a2:d0:a4:05:77:09:15:bf:fd:f0:7b:e5:88:ee:
50:de:f3:22:c1:86:a6:70:f4:8a:7f:65:16:e2:fd:
03:81:12:8a:d6:98:6e:ac:e3:f5:3d:36:38:01:fc:
d7:60:7d:cf:db:c2:40:3a:ab:f9:e9:67:5d:2d:b6:
dc:e2:bb:88:40:d4:b4:4d:eb:5c:f5:4b:06:0a:cb:
0c:48:c3:fe:03:29:f7:86:48:85:cd:f9:b3:d1:e1:
ec:ec:69:1a:b1:3b:5d:33:1b:30:7b:c5:05:cf:01:
3a:e9:6f:2b:2d:f1:6b:bb:5a:06:27:08:f3:ed:fc:
81:10:5f:b5:a7:37:c3:89:ab:bd:b1:be:54:1f:b8:
f4:ba:18:88:39:62:c1:45:3a:82:cc:ab:c2:aa:62:
a0:b4:2e:b6:36:43:55:16:74:19:e5:63:c5:fe:3f:
20:64:34:d6:0c:77:b8:cf:de:57:45:7c:46:0f:68:
f9:69:53:72:cd:e6:1e:7a:78:75:d2:6e:ad:9f:cf:
ca:d1:2a:46:30:35:90:59:7f:f2:31:c0:3a:18:6f:
5c:78:5c:9a:98:1b:6f:e6:bc:fc:6d:a5:e6:41:c5:
69:d1:92:bb:b4:b3:28:d7:c8:71:18:b6:d0:99:e1:
32:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AE:49:D0:E3:45:BE:71:F6:62:B0:71:CE:77:28:03:CE:C1:1C:E6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2q5J0ONFvnH2YrBxzncoA87BHOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:90:57:30:34:30:45:ef:36:52:91:d6:24:01:e0:6c:73:c5:
f4:cd:24:11:b7:7f:87:e0:1b:d3:27:4c:d7:82:fd:18:8f:07:
92:ab:20:44:db:c1:64:c0:50:d8:f6:92:d7:da:03:5c:c5:ef:
6d:4a:20:2b:32:71:3a:33:6b:55:5b:9c:dc:41:7a:99:5b:4f:
88:2d:6b:94:74:1c:bb:e7:08:09:13:60:cd:98:02:a9:91:5b:
32:29:95:e3:07:30:32:2b:af:86:50:b7:05:b1:48:4e:60:0f:
d9:80:3f:0f:14:29:56:2a:6d:c4:24:b6:1f:40:7e:1c:fb:84:
b9:22:c6:93:c2:75:9f:f4:9a:e7:b3:98:5c:a8:06:6d:87:93:
8e:9e:92:c4:68:65:ec:c4:be:d1:3a:59:b3:84:e8:58:4d:6b:
72:c5:cc:6e:75:e9:94:48:51:72:72:27:5b:7c:44:c7:06:75:
da:c9:22:fd:ee:d4:40:c1:01:83:4e:b9:69:d4:d7:f8:9d:a9:
a8:ca:60:e7:70:fe:bb:6f:1a:d1:bc:cc:63:fc:6d:5e:11:df:
e1:7c:f3:0c:77:07:78:37:b5:ec:ac:80:2a:7c:9a:0d:a9:79:
c0:2b:8b:e2:c0:c5:3b:d9:e7:f3:31:04:e6:e6:73:8b:60:f5:
f6:8f:7b:41
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYcWHw6j8Xo2e3AHDG4AioD8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzI1MDAxNTQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWFlNDlkMGUzNDViZTcxZjY2MmIwNzFjZTc3MjgwM2NlYzExY2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/TGKbcImwLEsTd849vlotCkBXcJ
Fb/98HvliO5Q3vMiwYamcPSKf2UW4v0DgRKK1phurOP1PTY4AfzXYH3P28JAOqv5
6WddLbbc4ruIQNS0Tetc9UsGCssMSMP+Ayn3hkiFzfmz0eHs7GkasTtdMxswe8UF
zwE66W8rLfFru1oGJwjz7fyBEF+1pzfDiau9sb5UH7j0uhiIOWLBRTqCzKvCqmKg
tC62NkNVFnQZ5WPF/j8gZDTWDHe4z95XRXxGD2j5aVNyzeYeenh10m6tn8/K0SpG
MDWQWX/yMcA6GG9ceFyamBtv5rz8baXmQcVp0ZK7tLMo18hxGLbQmeEysQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNquSdDjRb5x9mKwcc53KAPOwRzmMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMnE1SjBPTkZ2bkgyWXJCeHpuY29BODdCSE9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADaQVzA0MEXvNlKR1iQB
4GxzxfTNJBG3f4fgG9MnTNeC/RiPB5KrIETbwWTAUNj2ktfaA1zF721KICsycToz
a1VbnNxBeplbT4gta5R0HLvnCAkTYM2YAqmRWzIpleMHMDIrr4ZQtwWxSE5gD9mA
Pw8UKVYqbcQkth9Afhz7hLkixpPCdZ/0muezmFyoBm2Hk46eksRoZezEvtE6WbOE
6FhNa3LFzG516ZRIUXJyJ1t8RMcGddrJIv3u1EDBAYNOuWnU1/idqajKYOdw/rtv
GtG8zGP8bV4R3+F88wx3B3g3teysgCp8mg2pecAri+LAxTvZ5/MxBObmc4tg9faP
e0E=
-----END CERTIFICATE-----
Generated at Sat May 3 11:59:25 2025 by rpki-client