Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3Wjk8-hTqutIBROH98NQ0-TrhYU.roa
File: 3Wjk8-hTqutIBROH98NQ0-TrhYU.roa (raw, json)
Hash identifier: ClEEfJB7qENHKz0aZkH4vu7cWmA0sYzxMZOsQsBkI3s=
Subject key identifier: DD:68:E4:F3:E8:53:AA:EB:48:05:13:87:F7:C3:50:D3:E4:EB:85:85
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D4A33D55629546653D72CB405BD5924C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3Wjk8-hTqutIBROH98NQ0-TrhYU.roa
Signing time: Sun 12 Mar 2023 07:05:13 +0000
ROA not before: Sun 12 Mar 2023 07:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:186:d4a2:6f4a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d4:a3:3d:55:62:95:46:65:3d:72:cb:40:5b:d5:92:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 12 07:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd68e4f3e853aaeb48051387f7c350d3e4eb8585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:34:04:1f:c4:a8:8a:02:a1:31:99:a0:fd:66:
29:08:d9:0b:85:46:4a:6b:f9:54:f1:16:bc:0e:08:
39:db:28:4c:b7:2a:8e:6e:fc:a3:23:22:24:98:06:
7b:06:17:40:40:b5:6b:b4:b4:90:2a:2b:7e:6c:48:
74:98:cc:95:b2:8f:74:3a:62:0f:85:b9:b7:01:d2:
5a:33:f1:f4:99:b2:0e:82:f2:33:1b:00:c7:ad:78:
22:b0:4b:3b:54:92:b6:75:08:cc:9d:ad:77:fc:04:
9b:c9:a8:a0:0a:f3:94:54:57:8e:54:9f:9f:20:d5:
43:e7:2f:14:ad:b7:ce:00:50:96:71:09:01:1d:6d:
23:cc:f3:e7:53:c2:e2:7c:70:75:c3:98:ef:24:e8:
49:f9:69:e1:1a:4c:83:25:25:d3:6d:89:69:21:d7:
22:dd:ba:b6:8f:f2:64:aa:66:e0:55:cc:0d:61:76:
ea:09:93:de:8f:58:5d:57:df:94:b3:52:57:c5:2a:
84:36:f7:1c:a0:c0:98:47:89:0d:de:0d:6f:d6:06:
97:82:64:d1:93:c0:ee:4f:c9:ea:cb:f6:54:f8:32:
36:5a:81:37:a2:68:1e:31:60:34:7e:10:db:b2:e3:
d8:7d:74:3b:28:b8:2f:e8:78:38:81:7c:1f:38:2c:
ee:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:68:E4:F3:E8:53:AA:EB:48:05:13:87:F7:C3:50:D3:E4:EB:85:85
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3Wjk8-hTqutIBROH98NQ0-TrhYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:80:bb:df:cf:75:ce:93:f3:28:8f:9d:2c:d7:75:2f:a6:75:
d6:f0:c1:5e:a1:18:7a:ed:f8:f8:d2:95:4c:e7:4f:3a:bf:0d:
fb:71:9a:f9:56:63:60:4c:c5:ec:99:42:31:f2:f3:30:6e:f8:
d9:09:5a:52:33:38:0c:9e:1b:6d:1f:27:97:d3:05:53:05:b1:
89:96:0f:08:cc:df:8b:b5:cd:a5:90:99:a2:05:7a:a2:ce:d6:
45:ee:1f:1d:1b:1a:22:3d:c3:76:a7:4b:12:3c:1f:d7:39:eb:
a0:45:37:51:81:90:33:c3:a2:af:7b:b3:9f:64:a8:4e:76:63:
43:fa:7e:bd:1a:eb:1d:f2:2f:ad:69:3c:75:9c:81:02:e7:47:
15:08:04:77:a8:be:03:12:54:7f:e1:5f:9d:46:62:e8:13:c8:
3a:2f:6f:ad:fe:76:87:25:22:54:45:b3:fc:35:94:d3:1d:58:
25:78:30:cb:62:a4:2b:2a:97:eb:e7:f3:ae:bd:8d:66:a3:39:
f0:75:59:3e:08:b1:32:4a:b6:26:19:5c:ef:cf:c1:c4:3f:de:
41:30:b4:8a:08:49:7c:29:77:55:bc:d5:c4:35:8a:5f:19:3c:
39:76:3e:45:d2:1b:81:1d:7f:dd:50:6d:b1:8e:24:39:af:18:
41:44:c0:52
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbUoz1VYpVGZT1yy0Bb1ZJMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzEyMDcwNTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDY4ZTRmM2U4NTNhYWViNDgwNTEzODdmN2MzNTBkM2U0ZWI4NTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDQEH8SoigKhMZmg/WYpCNkLhUZK
a/lU8Ra8Dgg52yhMtyqObvyjIyIkmAZ7BhdAQLVrtLSQKit+bEh0mMyVso90OmIP
hbm3AdJaM/H0mbIOgvIzGwDHrXgisEs7VJK2dQjMna13/ASbyaigCvOUVFeOVJ+f
INVD5y8UrbfOAFCWcQkBHW0jzPPnU8LifHB1w5jvJOhJ+WnhGkyDJSXTbYlpIdci
3bq2j/JkqmbgVcwNYXbqCZPej1hdV9+Us1JXxSqENvccoMCYR4kN3g1v1gaXgmTR
k8DuT8nqy/ZU+DI2WoE3omgeMWA0fhDbsuPYfXQ7KLgv6Hg4gXwfOCzucwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFN1o5PPoU6rrSAUTh/fDUNPk64WFMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvM1dqazgtaFRxdXRJQlJPSDk4TlEwLVRyaFlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAByAu9/Pdc6T8yiPnSzX
dS+mddbwwV6hGHrt+PjSlUznTzq/DftxmvlWY2BMxeyZQjHy8zBu+NkJWlIzOAye
G20fJ5fTBVMFsYmWDwjM34u1zaWQmaIFeqLO1kXuHx0bGiI9w3anSxI8H9c566BF
N1GBkDPDoq97s59kqE52Y0P6fr0a6x3yL61pPHWcgQLnRxUIBHeovgMSVH/hX51G
YugTyDovb63+doclIlRFs/w1lNMdWCV4MMtipCsql+vn8669jWajOfB1WT4IsTJK
tiYZXO/PwcQ/3kEwtIoISXwpd1W81cQ1il8ZPDl2PkXSG4Edf91QbbGOJDmvGEFE
wFI=
-----END CERTIFICATE-----
Generated at Thu May 1 14:08:05 2025 by rpki-client