Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/31Dz3E9AkqOxwC3ky5K3s_U6b9I.roa
File: 31Dz3E9AkqOxwC3ky5K3s_U6b9I.roa (raw, json)
Hash identifier: tvrBKpSZhKRdTjS5GgB3GvMkeRCZ6k2UwmXdrqcuRa0=
Subject key identifier: DF:50:F3:DC:4F:40:92:A3:B1:C0:2D:E4:CB:92:B7:B3:F5:3A:6F:D2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D5E4F21A3A0A2821563FE3B55747721C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/31Dz3E9AkqOxwC3ky5K3s_U6b9I.roa
Signing time: Tue 08 Aug 2023 16:04:58 +0000
ROA not before: Tue 08 Aug 2023 16:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:189:d5e4:53f5/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:e4:f2:1a:3a:0a:28:21:56:3f:e3:b5:57:47:72:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 16:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df50f3dc4f4092a3b1c02de4cb92b7b3f53a6fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bb:55:71:84:10:3a:b8:7c:00:aa:2b:4e:7c:
fa:f3:bf:a9:1f:3e:fe:b5:71:ad:23:e2:91:55:96:
95:f7:df:72:31:d5:20:dc:c9:43:7f:52:76:ac:87:
6a:5d:1f:00:66:5d:03:4d:d2:af:e8:c9:2d:86:52:
7a:aa:be:bc:24:b9:da:d5:c9:bb:00:b1:ce:fd:77:
12:78:6a:ad:e9:07:52:28:fa:9b:01:29:71:9e:9c:
cb:12:48:2c:c3:16:11:28:5d:6e:ae:29:d4:bc:df:
fe:bc:26:c2:e8:c2:09:b4:95:0d:46:2f:31:aa:ee:
7e:01:8c:47:c6:af:56:cc:82:1d:dd:1a:7b:9e:c3:
98:20:54:98:53:45:22:6b:c1:8f:a5:94:7a:1d:1b:
eb:0f:02:e0:9b:15:15:41:ca:e1:54:ec:9f:07:02:
3d:21:48:7c:c9:c3:52:cd:3d:8f:9e:72:fa:fb:d4:
f7:77:1e:9c:67:a1:4b:09:ff:ca:eb:0f:6b:26:50:
d8:1b:a2:01:09:b9:18:bc:67:ec:b8:d3:fa:52:34:
3b:d2:d6:17:28:f6:a6:f1:13:3f:11:52:cd:64:51:
e5:5e:2a:b6:b0:45:54:4d:88:67:50:e3:be:86:30:
d9:fd:47:67:13:bc:67:46:96:6a:86:d7:e8:f7:b2:
28:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:50:F3:DC:4F:40:92:A3:B1:C0:2D:E4:CB:92:B7:B3:F5:3A:6F:D2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/31Dz3E9AkqOxwC3ky5K3s_U6b9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:25:cf:40:95:1d:09:d5:6a:5c:55:a7:c5:27:dc:aa:57:ca:
16:27:8d:44:08:55:0e:65:67:93:3d:f0:08:63:85:b3:8c:29:
0f:a3:a1:b5:1e:5b:2e:f4:eb:16:3d:f2:97:ac:c3:73:07:f7:
81:43:21:9a:48:3b:90:e8:ef:5e:c4:df:9d:2f:eb:45:ca:eb:
79:ee:96:9b:e7:f2:18:fd:c7:e1:e5:07:ba:c3:3c:d3:c8:18:
81:75:75:cd:3d:39:18:d2:b1:a0:04:7b:b3:24:45:c3:ff:4b:
d9:6c:dc:ac:5e:9b:78:a0:40:0f:af:48:36:35:35:74:22:a5:
1f:1b:d5:02:4f:7c:70:99:63:af:71:5d:43:08:1b:62:0a:16:
ed:e6:bb:c2:f7:8f:d3:4c:c3:0f:0a:1f:7a:83:e3:c7:ea:5d:
a4:67:ba:80:11:ee:58:eb:d5:68:46:eb:ae:d2:3b:8d:21:f7:
26:67:f3:ac:f9:85:d9:67:dc:88:a6:10:37:61:b9:08:8c:4e:
2c:f2:95:70:a7:f1:fc:4f:4b:e7:83:e6:16:f2:b1:17:d8:d4:
29:b5:9a:80:2e:d3:4c:22:d8:b2:e4:b4:4a:56:b4:36:2c:08:
bb:39:ca:0c:77:b2:ec:d9:5f:9d:6d:58:60:35:ef:1a:7f:8e:
4b:fb:a3:b5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnV5PIaOgooIVY/47VXR3IcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODA4MTYwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjUwZjNkYzRmNDA5MmEzYjFjMDJkZTRjYjkyYjdiM2Y1M2E2ZmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLtVcYQQOrh8AKorTnz687+pHz7+
tXGtI+KRVZaV999yMdUg3MlDf1J2rIdqXR8AZl0DTdKv6MkthlJ6qr68JLna1cm7
ALHO/XcSeGqt6QdSKPqbASlxnpzLEkgswxYRKF1urinUvN/+vCbC6MIJtJUNRi8x
qu5+AYxHxq9WzIId3Rp7nsOYIFSYU0Uia8GPpZR6HRvrDwLgmxUVQcrhVOyfBwI9
IUh8ycNSzT2PnnL6+9T3dx6cZ6FLCf/K6w9rJlDYG6IBCbkYvGfsuNP6UjQ70tYX
KPam8RM/EVLNZFHlXiq2sEVUTYhnUOO+hjDZ/UdnE7xnRpZqhtfo97IonQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFN9Q89xPQJKjscAt5MuSt7P1Om/SMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMzFEejNFOUFrcU94d0Mza3k1SzNzX1U2YjlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAIlz0CVHQnValxVp8Un
3KpXyhYnjUQIVQ5lZ5M98AhjhbOMKQ+jobUeWy706xY98pesw3MH94FDIZpIO5Do
717E350v60XK63nulpvn8hj9x+HlB7rDPNPIGIF1dc09ORjSsaAEe7MkRcP/S9ls
3Kxem3igQA+vSDY1NXQipR8b1QJPfHCZY69xXUMIG2IKFu3mu8L3j9NMww8KH3qD
48fqXaRnuoAR7ljr1WhG667SO40h9yZn86z5hdln3IimEDdhuQiMTizylXCn8fxP
S+eD5hbysRfY1Cm1moAu00wi2LLktEpWtDYsCLs5ygx3suzZX51tWGA17xp/jkv7
o7U=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:43 2025 by rpki-client