Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4KfJHzaOJ5O1aXgzN6OCvBpP8Do.roa
File: 4KfJHzaOJ5O1aXgzN6OCvBpP8Do.roa (raw, json)
Hash identifier: vcsKuRTG+A+CaZ/JIFIfQpZ3OsVB0wJiG/LZYYbYqW8=
Subject key identifier: E0:A7:C9:1F:36:8E:27:93:B5:69:78:33:37:A3:82:BC:1A:4F:F0:3A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869A1BE9DD89DB20486251D95A0911B32D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4KfJHzaOJ5O1aXgzN6OCvBpP8Do.roa
Signing time: Tue 28 Feb 2023 22:19:25 +0000
ROA not before: Tue 28 Feb 2023 22:19:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9a:1b:e9:dd:89:db:20:48:62:51:d9:5a:09:11:b3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 22:19:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0a7c91f368e2793b569783337a382bc1a4ff03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d3:cc:35:49:7b:9e:c6:b8:3e:bc:97:ef:9e:
02:10:78:2e:4b:93:2b:3a:0e:87:9d:ae:d3:3d:30:
26:a5:41:d0:54:b2:f2:b6:90:e5:4d:ed:47:3b:4a:
0e:e2:54:7c:75:7f:19:34:89:63:7c:62:cb:99:3d:
b0:d2:1a:c7:70:ed:b4:d9:c1:50:8f:f5:df:c0:e2:
9f:c7:98:d0:f2:21:21:96:80:21:35:b5:70:e0:89:
5c:e8:fd:ec:a2:75:36:fe:7e:cd:0a:d2:4a:44:6d:
22:ac:c6:4a:1f:29:4f:2e:f9:5b:ba:89:69:a1:c1:
41:8a:b7:ba:ac:d8:2b:92:2c:97:80:b4:e9:f4:3e:
6f:0c:bd:6a:85:bd:c1:ce:27:b0:f6:11:c6:40:40:
39:29:93:7f:3f:24:28:c7:1d:2d:7f:08:1f:d3:a8:
0b:f3:29:b0:d3:e7:36:7f:0d:73:45:d4:64:39:1b:
ca:40:85:df:3c:d1:7c:60:da:04:cb:a6:f7:8c:f7:
47:57:02:21:71:1d:71:62:14:21:ec:8a:de:a2:11:
53:87:eb:0a:30:21:08:7d:2f:60:8c:67:72:92:6b:
0a:9a:d0:e3:0a:e3:8e:7c:00:13:27:d3:76:30:87:
43:a2:5b:2c:a4:9f:53:ec:bd:af:bf:33:3b:e3:58:
46:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A7:C9:1F:36:8E:27:93:B5:69:78:33:37:A3:82:BC:1A:4F:F0:3A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4KfJHzaOJ5O1aXgzN6OCvBpP8Do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:a5:6d:98:1b:d4:92:1e:4d:5a:1f:c1:dd:b0:94:16:de:84:
4e:3f:a5:10:04:8b:7f:bd:da:9c:84:ad:23:f2:cc:1d:3f:bb:
82:c4:6d:00:cd:e6:93:82:b8:48:af:ef:49:e5:34:94:8c:ff:
90:6b:47:d2:28:ee:35:52:03:1d:bb:51:65:69:cd:54:19:ec:
c2:81:e5:6a:dc:d7:81:f1:2c:29:8e:42:5c:d2:53:f6:0b:a1:
dd:d4:b7:7e:9f:50:48:c9:70:27:7d:5a:01:76:d1:bd:a8:78:
6e:fe:b9:58:3c:9a:3d:ca:04:71:b1:7d:09:4f:1f:41:8d:5c:
4b:96:12:d0:fd:dd:5b:71:da:11:7f:db:10:fd:f1:6e:50:d1:
3b:c4:ce:63:1d:cc:0a:8e:3b:08:c8:af:3a:ef:1d:bf:da:6b:
7a:f5:b5:26:25:bf:a2:e3:91:31:b5:f2:c8:9b:6d:d8:88:47:
44:f4:f6:d6:f7:dd:85:bb:78:d3:6f:71:55:36:e4:b6:b5:c1:
87:1c:35:bf:d3:6a:fd:79:95:77:ae:31:64:2c:cd:18:2c:82:
e8:31:ff:82:8b:f8:b9:7a:0f:78:6f:75:96:dc:06:1a:64:3c:
d2:87:23:7b:a6:ff:0b:80:de:71:87:05:1b:57:0d:70:b4:69:
de:6f:b9:01
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaaG+ndidsgSGJR2VoJEbMtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjI4MjIxOTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGE3YzkxZjM2OGUyNzkzYjU2OTc4MzMzN2EzODJiYzFhNGZmMDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdPMNUl7nsa4PryX754CEHguS5Mr
Og6Hna7TPTAmpUHQVLLytpDlTe1HO0oO4lR8dX8ZNIljfGLLmT2w0hrHcO202cFQ
j/XfwOKfx5jQ8iEhloAhNbVw4Ilc6P3sonU2/n7NCtJKRG0irMZKHylPLvlbuolp
ocFBire6rNgrkiyXgLTp9D5vDL1qhb3Bziew9hHGQEA5KZN/PyQoxx0tfwgf06gL
8ymw0+c2fw1zRdRkORvKQIXfPNF8YNoEy6b3jPdHVwIhcR1xYhQh7IreohFTh+sK
MCEIfS9gjGdykmsKmtDjCuOOfAATJ9N2MIdDolsspJ9T7L2vvzM741hGHwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOCnyR82jieTtWl4MzejgrwaT/A6MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNEtmSkh6YU9KNU8xYVhnek42T0N2QnBQOERvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADOlbZgb1JIeTVofwd2w
lBbehE4/pRAEi3+92pyErSPyzB0/u4LEbQDN5pOCuEiv70nlNJSM/5BrR9Io7jVS
Ax27UWVpzVQZ7MKB5Wrc14HxLCmOQlzSU/YLod3Ut36fUEjJcCd9WgF20b2oeG7+
uVg8mj3KBHGxfQlPH0GNXEuWEtD93Vtx2hF/2xD98W5Q0TvEzmMdzAqOOwjIrzrv
Hb/aa3r1tSYlv6LjkTG18sibbdiIR0T09tb33YW7eNNvcVU25La1wYccNb/Tav15
lXeuMWQszRgsgugx/4KL+Ll6D3hvdZbcBhpkPNKHI3um/wuA3nGHBRtXDXC0ad5v
uQE=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:12 2025 by rpki-client