Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4KnoqSz53FCvL7serhXBnlKLNX8.roa
File: 4KnoqSz53FCvL7serhXBnlKLNX8.roa (raw, json)
Hash identifier: Bjx/gyMUHSn2OPiTOAv3mPaFpPEskLZnJvrOCAw4B50=
Subject key identifier: E0:A9:E8:A9:2C:F9:DC:50:AF:2F:BB:1E:AE:15:C1:9E:52:8B:35:7F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187EAF5879AA311D63899AB2332CF881658
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4KnoqSz53FCvL7serhXBnlKLNX8.roa
Signing time: Fri 05 May 2023 08:09:32 +0000
ROA not before: Fri 05 May 2023 08:09:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ea:f5:87:9a:a3:11:d6:38:99:ab:23:32:cf:88:16:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 5 08:09:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0a9e8a92cf9dc50af2fbb1eae15c19e528b357f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:64:3d:05:29:55:c6:52:29:57:7d:c2:71:
cc:18:de:7b:67:3c:7d:05:e5:f5:9e:f5:12:6f:60:
73:cc:8f:19:58:12:43:4d:2a:7a:3a:fa:2c:00:82:
f6:d8:b4:28:8d:e7:6d:f9:aa:03:8e:35:cc:5c:19:
88:6d:fb:2b:ab:c5:84:89:6b:0a:44:5f:06:eb:e3:
34:67:40:b3:21:2d:18:4f:c5:63:64:78:84:1a:7a:
62:84:2b:a7:b6:9f:d9:0d:2f:ca:c1:da:66:c5:1e:
15:e2:a5:87:23:02:a8:ec:10:2c:b6:a1:95:8b:ad:
96:00:63:ab:65:42:e9:78:5a:72:91:69:f3:7f:91:
58:a0:f5:3c:b7:a5:79:a4:db:46:db:8d:e8:f3:dc:
ee:ee:ed:e2:5b:3c:43:fd:bc:62:8e:9c:a4:dc:cd:
ff:bd:d9:09:fc:f0:bd:ea:c5:1f:23:84:36:c9:4d:
1c:7d:77:e3:6b:2f:3d:df:9c:a0:c2:e3:3f:6e:01:
3b:d2:47:7f:1c:5c:5d:67:51:de:67:00:79:da:c5:
2c:b7:c6:cc:48:81:7e:88:b8:e8:5f:90:2a:47:27:
13:bb:e7:9a:8b:c3:d8:da:e9:ee:a5:a3:e6:c0:01:
66:69:9a:c8:08:2d:b1:8c:0a:7b:89:f2:52:85:84:
43:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A9:E8:A9:2C:F9:DC:50:AF:2F:BB:1E:AE:15:C1:9E:52:8B:35:7F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4KnoqSz53FCvL7serhXBnlKLNX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:77:8d:20:54:66:e0:b5:95:24:e0:c8:a6:24:66:36:a8:c8:
69:6a:e6:a8:81:07:e5:3c:2e:ef:ff:4d:d1:9c:1e:77:10:68:
44:a9:ca:19:3d:3c:8e:62:9c:41:80:48:d0:b3:b9:a1:90:ad:
df:5e:c5:ef:71:64:fe:e6:b7:2c:4b:f1:33:b5:e5:cf:03:12:
80:d8:88:c1:bb:29:81:a1:a1:fb:55:69:d0:32:33:da:6c:0e:
9f:43:be:8f:f0:cd:00:42:fc:e0:fe:74:dd:2b:5d:a7:21:9f:
d3:17:1d:bf:71:23:d9:07:79:b4:07:24:e2:23:84:55:7d:32:
c9:33:c4:b3:9c:3a:2e:7e:08:c6:3f:c2:4d:48:5a:7b:ac:a2:
4a:b1:86:e5:c7:f4:82:c3:f0:de:9c:1a:21:64:22:99:7a:5e:
ce:3a:f8:a2:be:4f:3a:fa:7d:42:40:99:c6:5e:81:21:1e:3d:
4c:f7:03:4c:2c:ec:ab:8d:ae:c1:d3:93:9a:5c:d0:66:56:89:
a9:f2:8d:42:29:cb:c8:0c:18:03:bb:3e:ca:25:3c:67:2a:33:
96:d9:cf:ab:36:16:26:38:4c:b2:1e:8f:7c:d4:03:13:38:02:
46:04:50:58:d1:c0:3c:2c:d9:94:e7:cb:07:26:52:e9:f9:ed:
ab:85:1c:e1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYfq9YeaoxHWOJmrIzLPiBZYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTA1MDgwOTMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGE5ZThhOTJjZjlkYzUwYWYyZmJiMWVhZTE1YzE5ZTUyOGIzNTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0JkPQUpVcZSKVd9wnHMGN57Zzx9
BeX1nvUSb2BzzI8ZWBJDTSp6OvosAIL22LQojedt+aoDjjXMXBmIbfsrq8WEiWsK
RF8G6+M0Z0CzIS0YT8VjZHiEGnpihCuntp/ZDS/KwdpmxR4V4qWHIwKo7BAstqGV
i62WAGOrZULpeFpykWnzf5FYoPU8t6V5pNtG243o89zu7u3iWzxD/bxijpyk3M3/
vdkJ/PC96sUfI4Q2yU0cfXfjay8935ygwuM/bgE70kd/HFxdZ1HeZwB52sUst8bM
SIF+iLjoX5AqRycTu+eai8PY2unupaPmwAFmaZrICC2xjAp7ifJShYRDtwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOCp6Kks+dxQry+7Hq4VwZ5SizV/MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNEtub3FTejUzRkN2TDdzZXJoWEJubEtMTlg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHV3jSBUZuC1lSTgyKYk
ZjaoyGlq5qiBB+U8Lu//TdGcHncQaESpyhk9PI5inEGASNCzuaGQrd9exe9xZP7m
tyxL8TO15c8DEoDYiMG7KYGhoftVadAyM9psDp9Dvo/wzQBC/OD+dN0rXachn9MX
Hb9xI9kHebQHJOIjhFV9MskzxLOcOi5+CMY/wk1IWnusokqxhuXH9ILD8N6cGiFk
Ipl6Xs46+KK+Tzr6fUJAmcZegSEePUz3A0ws7KuNrsHTk5pc0GZWianyjUIpy8gM
GAO7PsolPGcqM5bZz6s2FiY4TLIej3zUAxM4AkYEUFjRwDws2ZTnywcmUun57auF
HOE=
-----END CERTIFICATE-----
Generated at Thu May 1 02:51:57 2025 by rpki-client