Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/327CgNr24vd-DEPZ35VPU1_REg0.roa
File: 327CgNr24vd-DEPZ35VPU1_REg0.roa (raw, json)
Hash identifier: Ptsq8p3jCMSDuxA0HmSInvtMyyhtlyppcNTl02t1oVg=
Subject key identifier: DF:6E:C2:80:DA:F6:E2:F7:7E:0C:43:D9:DF:95:4F:53:5F:D1:12:0D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182B863F404F58FF429B80DCA96A8B1BA50
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/327CgNr24vd-DEPZ35VPU1_REg0.roa
Signing time: Fri 19 Aug 2022 23:15:34 +0000
ROA not before: Fri 19 Aug 2022 23:15:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b8:63:f4:04:f5:8f:f4:29:b8:0d:ca:96:a8:b1:ba:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 23:15:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df6ec280daf6e2f77e0c43d9df954f535fd1120d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:dd:21:69:de:87:48:59:16:cd:02:02:bd:46:
75:db:33:76:3a:74:1c:bf:b4:f4:88:0e:4a:50:bf:
b6:d0:17:69:e6:03:53:80:c8:69:05:1f:43:21:af:
bd:75:c9:59:5e:69:16:31:4b:ff:b0:ca:e1:62:b5:
f6:d1:28:39:88:41:77:f2:ca:d5:14:b0:5f:7e:e6:
86:7c:40:b8:96:ae:00:cc:58:8e:8e:da:3c:3d:11:
39:1c:a9:5c:ef:7b:53:f3:6e:62:1b:db:03:e0:41:
e5:b2:60:e1:76:30:3a:67:ab:5d:ec:bf:1b:ed:9b:
bc:f2:be:ff:a3:bf:a0:b4:c3:59:c2:71:30:31:69:
77:9b:ba:06:2c:73:e4:91:27:ce:4b:86:e9:fa:30:
9a:b0:92:f5:ea:2e:80:c9:02:f5:09:9d:39:bb:2f:
5f:af:f8:e3:cb:15:ee:ec:c8:dd:e6:0f:0b:0e:f8:
cc:f5:3d:23:fc:20:5f:47:66:6c:dd:eb:ff:5e:22:
9c:41:d0:49:7f:1b:73:d1:32:88:45:b5:5c:dc:88:
6f:6a:85:a6:8a:fb:88:01:f0:e9:64:f6:58:59:c3:
86:24:53:09:a9:4c:f2:e0:5d:4a:ae:74:59:bb:03:
31:52:ee:86:93:35:17:0d:a4:db:a3:22:80:96:99:
b3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6E:C2:80:DA:F6:E2:F7:7E:0C:43:D9:DF:95:4F:53:5F:D1:12:0D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/327CgNr24vd-DEPZ35VPU1_REg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:d4:43:7e:bf:9f:d2:f9:6d:bb:09:87:14:5c:49:d7:7d:5f:
f5:d6:5a:a2:a8:89:e3:bb:71:34:8a:4d:72:91:d7:3b:75:7e:
99:8a:6c:93:44:20:28:f8:b3:63:f9:e9:e1:4e:8f:09:49:f4:
f8:0d:89:d5:ce:b2:21:15:ae:e3:7b:14:37:8e:7b:6d:96:ae:
fa:2a:d0:18:d3:66:7b:1b:9c:67:fb:1a:2b:a0:6f:9b:a5:cd:
00:ac:82:e2:cd:4b:a1:80:0e:f9:df:d0:37:05:d2:9d:6c:4e:
c2:4b:8d:df:c0:fe:5b:76:bc:c3:82:a4:24:23:b6:a4:f2:a6:
93:ae:62:31:06:fe:32:fd:db:10:10:bd:cf:84:34:6b:1d:d2:
2d:0f:68:23:82:d0:52:86:73:fc:20:83:27:2b:19:ec:09:02:
cf:33:a5:dd:ec:9b:68:27:43:9b:0f:fb:9b:be:55:cf:43:ab:
a1:0a:e8:81:68:5b:49:c1:fa:07:e4:bc:fa:14:7b:29:56:25:
39:b7:cd:c9:b6:9d:a0:e3:3d:2e:e8:3f:b4:0a:7c:eb:8c:43:
3c:df:5c:d1:51:87:77:cf:b3:d5:22:89:4e:0c:8d:ab:e9:16:
eb:6e:91:69:d9:8d:5b:1b:dd:38:5a:b5:85:9f:25:0e:c7:70:
09:af:7d:88
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYK4Y/QE9Y/0KbgNypaosbpQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODE5MjMxNTM0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjZlYzI4MGRhZjZlMmY3N2UwYzQzZDlkZjk1NGY1MzVmZDExMjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+d0had6HSFkWzQICvUZ12zN2OnQc
v7T0iA5KUL+20Bdp5gNTgMhpBR9DIa+9dclZXmkWMUv/sMrhYrX20Sg5iEF38srV
FLBffuaGfEC4lq4AzFiOjto8PRE5HKlc73tT825iG9sD4EHlsmDhdjA6Z6td7L8b
7Zu88r7/o7+gtMNZwnEwMWl3m7oGLHPkkSfOS4bp+jCasJL16i6AyQL1CZ05uy9f
r/jjyxXu7Mjd5g8LDvjM9T0j/CBfR2Zs3ev/XiKcQdBJfxtz0TKIRbVc3IhvaoWm
ivuIAfDpZPZYWcOGJFMJqUzy4F1KrnRZuwMxUu6GkzUXDaTboyKAlpmznwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFN9uwoDa9uL3fgxD2d+VT1Nf0RINMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMzI3Q2dOcjI0dmQtREVQWjM1VlBVMV9SRWcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAI/UQ36/n9L5bbsJhxRc
Sdd9X/XWWqKoieO7cTSKTXKR1zt1fpmKbJNEICj4s2P56eFOjwlJ9PgNidXOsiEV
ruN7FDeOe22Wrvoq0BjTZnsbnGf7Giugb5ulzQCsguLNS6GADvnf0DcF0p1sTsJL
jd/A/lt2vMOCpCQjtqTyppOuYjEG/jL92xAQvc+ENGsd0i0PaCOC0FKGc/wggycr
GewJAs8zpd3sm2gnQ5sP+5u+Vc9Dq6EK6IFoW0nB+gfkvPoUeylWJTm3zcm2naDj
PS7oP7QKfOuMQzzfXNFRh3fPs9UiiU4MjavpFutukWnZjVsb3ThatYWfJQ7HcAmv
fYg=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:30 2025 by rpki-client