Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4AW22bjdckVc2WEevwkj5eG0abw.roa
File: 4AW22bjdckVc2WEevwkj5eG0abw.roa (raw, json)
Hash identifier: 6Qd4S+P/FDEFI+zqvUSnnLfE7xAxqqMckX7RrTq4zKw=
Subject key identifier: E0:05:B6:D9:B8:DD:72:45:5C:D9:61:1E:BF:09:23:E5:E1:B4:69:BC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01886A6AD040CF6DDBB913BC941A01E2B3FE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4AW22bjdckVc2WEevwkj5eG0abw.roa
Signing time: Tue 30 May 2023 02:09:24 +0000
ROA not before: Tue 30 May 2023 02:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6a:6a:d0:40:cf:6d:db:b9:13:bc:94:1a:01:e2:b3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 30 02:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e005b6d9b8dd72455cd9611ebf0923e5e1b469bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d4:4a:66:a9:b1:fa:df:44:ab:f2:0d:54:93:
1e:6a:d1:2b:92:6d:89:43:29:34:6f:c6:7a:9e:75:
5f:f4:9f:50:5f:62:af:2f:12:75:30:49:e7:6c:10:
c1:34:1b:19:21:13:6d:fe:be:27:75:76:33:74:32:
20:6f:d8:28:0e:2d:3b:1d:62:5d:24:30:99:9f:e6:
b9:ea:47:64:9e:82:f1:66:a6:c0:91:28:f7:72:0c:
46:a7:0d:e4:42:d8:5f:b8:cb:36:be:4f:ad:ec:7d:
74:88:89:2d:57:95:6b:c4:5e:7d:83:35:02:39:85:
9b:fb:60:73:33:52:d6:9a:70:12:f9:a5:c2:a6:cf:
2f:3b:8e:9e:24:7b:cd:07:22:85:13:c7:d7:75:c3:
a3:de:b4:1d:7f:0c:8d:c0:2e:0d:fa:76:f4:77:d6:
2a:c4:b7:db:44:e9:b5:98:6b:c8:8b:b8:1c:24:80:
1a:c6:3f:cb:ad:c9:8f:34:64:79:05:26:aa:2e:50:
fe:46:3f:61:fa:3e:bd:be:87:f2:cc:c2:ee:aa:e7:
82:9e:29:66:77:59:b4:05:4e:46:1d:c6:6d:2c:fd:
54:b4:21:37:35:80:d7:4f:cc:50:f5:10:ea:69:b2:
ef:8d:64:6e:1d:00:8c:47:05:ae:f9:eb:ec:d5:97:
de:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:05:B6:D9:B8:DD:72:45:5C:D9:61:1E:BF:09:23:E5:E1:B4:69:BC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4AW22bjdckVc2WEevwkj5eG0abw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:eb:c0:88:23:55:d8:49:76:f6:dd:4f:51:9a:6e:63:f7:2b:
c4:0e:36:df:1c:01:59:18:65:08:85:ce:f4:d8:1f:9b:8c:76:
d1:09:aa:f7:4e:8c:5c:ec:37:d2:2c:74:c0:fb:81:7b:92:37:
04:45:09:f8:e7:40:d8:32:4a:7f:25:25:bc:3c:76:9b:2d:d0:
b2:7d:29:da:6f:e4:2f:7f:90:51:77:7a:6a:e2:8a:10:50:08:
66:b3:5c:57:bf:52:d9:10:bf:25:86:e0:fe:74:ec:52:f3:91:
de:81:b8:84:34:df:07:99:31:0a:62:0f:02:b6:4d:bd:b4:c0:
06:4e:10:72:0a:70:8a:5c:0c:0d:80:00:ab:98:b2:be:89:f1:
67:5b:e7:e2:e8:e5:e1:dd:c7:6f:3b:f7:2d:99:08:12:8b:3f:
24:09:2a:06:ff:7f:71:0e:30:3b:65:71:f7:9d:0f:f1:92:9b:
c0:9b:c9:dd:34:e1:0c:ed:18:fa:03:35:54:94:3b:0c:da:04:
f2:05:b8:a8:ed:e4:af:6d:df:7c:12:14:ac:48:ad:f9:33:18:
78:83:cb:ec:e2:e3:aa:0d:23:ac:dc:5a:9c:b3:4a:65:2b:af:
9c:2f:7e:d4:9f:1e:19:49:a0:d5:07:f1:d9:98:7b:b1:30:11:
c8:93:fe:da
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhqatBAz23buRO8lBoB4rP+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTMwMDIwOTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDA1YjZkOWI4ZGQ3MjQ1NWNkOTYxMWViZjA5MjNlNWUxYjQ2OWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9RKZqmx+t9Eq/INVJMeatErkm2J
Qyk0b8Z6nnVf9J9QX2KvLxJ1MEnnbBDBNBsZIRNt/r4ndXYzdDIgb9goDi07HWJd
JDCZn+a56kdknoLxZqbAkSj3cgxGpw3kQthfuMs2vk+t7H10iIktV5VrxF59gzUC
OYWb+2BzM1LWmnAS+aXCps8vO46eJHvNByKFE8fXdcOj3rQdfwyNwC4N+nb0d9Yq
xLfbROm1mGvIi7gcJIAaxj/LrcmPNGR5BSaqLlD+Rj9h+j69vofyzMLuqueCnilm
d1m0BU5GHcZtLP1UtCE3NYDXT8xQ9RDqabLvjWRuHQCMRwWu+evs1Zfe5wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOAFttm43XJFXNlhHr8JI+XhtGm8MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNEFXMjJiamRja1ZjMldFZXZ3a2o1ZUcwYWJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHnrwIgjVdhJdvbdT1Ga
bmP3K8QONt8cAVkYZQiFzvTYH5uMdtEJqvdOjFzsN9IsdMD7gXuSNwRFCfjnQNgy
Sn8lJbw8dpst0LJ9Kdpv5C9/kFF3emriihBQCGazXFe/UtkQvyWG4P507FLzkd6B
uIQ03weZMQpiDwK2Tb20wAZOEHIKcIpcDA2AAKuYsr6J8Wdb5+Lo5eHdx2879y2Z
CBKLPyQJKgb/f3EOMDtlcfedD/GSm8Cbyd004QztGPoDNVSUOwzaBPIFuKjt5K9t
33wSFKxIrfkzGHiDy+zi46oNI6zcWpyzSmUrr5wvftSfHhlJoNUH8dmYe7EwEciT
/to=
-----END CERTIFICATE-----
Generated at Thu May 1 20:51:33 2025 by rpki-client