Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4PQvkax34v-thbdw_jBARi2Tl3Y.roa
File: 4PQvkax34v-thbdw_jBARi2Tl3Y.roa (raw, json)
Hash identifier: d/xDxFR6sXcNlaHe/k+5foGMXBNdGrmY4S5Bm3w6eOE=
Subject key identifier: E0:F4:2F:91:AC:77:E2:FF:AD:85:B7:70:FE:30:40:46:2D:93:97:76
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182E0832D0643F57D3B39AF08B56692BED3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4PQvkax34v-thbdw_jBARi2Tl3Y.roa
Signing time: Sat 27 Aug 2022 18:14:29 +0000
ROA not before: Sat 27 Aug 2022 18:14:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e0:83:2d:06:43:f5:7d:3b:39:af:08:b5:66:92:be:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 27 18:14:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0f42f91ac77e2ffad85b770fe3040462d939776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7d:8c:ed:41:fd:76:e3:17:4f:55:90:3a:b3:
01:83:38:da:a3:1a:6d:ce:bb:a3:6f:46:c7:e5:5a:
fd:9f:ce:83:26:3b:f5:89:af:bb:b1:dd:2c:a3:3c:
5e:4e:87:71:ff:a1:9d:62:fe:fa:b5:07:0f:2e:17:
60:0a:84:82:35:2e:25:ea:23:57:e1:79:18:13:65:
ad:3b:21:a2:d4:70:e5:4b:93:78:2c:8c:55:73:87:
2b:49:d9:ab:76:23:a0:c6:59:4b:2e:01:10:f9:60:
ce:15:0c:f5:bd:8b:3b:07:10:f4:30:49:cd:10:00:
d8:38:3e:44:76:5f:2c:df:d4:ef:c0:76:fc:5c:bb:
99:7c:4d:16:60:7b:40:c8:c9:82:01:38:49:e4:38:
a0:58:c0:a1:8f:59:e0:19:2d:48:43:91:7e:3e:31:
25:24:e9:91:d0:1d:f8:58:90:76:a7:98:a4:22:44:
0f:18:98:34:4f:45:91:3e:69:02:4a:62:18:4e:7f:
a5:79:6f:84:0f:cb:e3:a3:b5:38:93:5b:60:a0:36:
c6:c9:48:41:e4:b5:52:61:86:76:ec:b8:5b:11:a3:
89:5c:f5:80:86:ca:92:73:4b:c9:84:08:ca:de:9a:
e7:45:0f:fe:41:9c:01:31:cb:72:dd:72:47:01:4d:
4c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F4:2F:91:AC:77:E2:FF:AD:85:B7:70:FE:30:40:46:2D:93:97:76
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4PQvkax34v-thbdw_jBARi2Tl3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:d0:bb:87:ff:5b:61:fa:b2:65:e4:4f:2c:a7:8d:d4:ab:13:
23:6d:15:f1:cc:1b:82:b6:3b:cc:44:42:70:86:09:b8:2f:3e:
a3:d8:87:44:16:3f:8a:5b:51:71:4b:b8:6a:04:5d:b4:cc:fc:
3e:cc:d5:25:a2:20:6c:e8:d9:dc:ee:df:1a:bc:28:86:0f:33:
cd:38:82:06:68:65:d2:be:74:e9:e2:b9:b2:61:07:77:53:b3:
c4:80:d0:24:51:e0:68:c0:31:cf:73:ec:ae:1f:56:87:e9:c2:
4f:76:47:e8:c6:d2:72:2b:52:1f:f2:33:2f:10:bf:fc:de:9f:
1a:e7:68:0d:08:b0:aa:69:c4:f1:16:dc:89:b5:c7:04:2b:32:
69:1b:ed:df:8f:2c:68:16:06:e4:5f:42:25:3b:49:ad:a2:af:
c2:6c:1c:e3:de:72:7a:c1:a1:7c:3a:b0:ce:6a:b7:32:a9:ab:
1c:78:8d:d4:0d:a9:d2:32:df:83:3c:5f:a5:29:fb:a8:ea:71:
16:84:b9:cb:3a:14:79:db:2e:91:5d:07:6d:12:69:aa:c6:ad:
81:22:4a:7d:c6:d9:3c:03:76:c6:33:5f:6a:ed:fd:55:99:f9:
63:89:5f:19:54:97:a5:f1:21:45:4c:39:b1:da:37:dc:23:78:
c5:85:82:dd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYLggy0GQ/V9OzmvCLVmkr7TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODI3MTgxNDI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGY0MmY5MWFjNzdlMmZmYWQ4NWI3NzBmZTMwNDA0NjJkOTM5Nzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhn2M7UH9duMXT1WQOrMBgzjaoxpt
zrujb0bH5Vr9n86DJjv1ia+7sd0sozxeTodx/6GdYv76tQcPLhdgCoSCNS4l6iNX
4XkYE2WtOyGi1HDlS5N4LIxVc4crSdmrdiOgxllLLgEQ+WDOFQz1vYs7BxD0MEnN
EADYOD5Edl8s39TvwHb8XLuZfE0WYHtAyMmCAThJ5DigWMChj1ngGS1IQ5F+PjEl
JOmR0B34WJB2p5ikIkQPGJg0T0WRPmkCSmIYTn+leW+ED8vjo7U4k1tgoDbGyUhB
5LVSYYZ27LhbEaOJXPWAhsqSc0vJhAjK3prnRQ/+QZwBMcty3XJHAU1MlwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOD0L5Gsd+L/rYW3cP4wQEYtk5d2MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNFBRdmtheDM0di10aGJkd19qQkFSaTJUbDNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIfQu4f/W2H6smXkTyyn
jdSrEyNtFfHMG4K2O8xEQnCGCbgvPqPYh0QWP4pbUXFLuGoEXbTM/D7M1SWiIGzo
2dzu3xq8KIYPM804ggZoZdK+dOniubJhB3dTs8SA0CRR4GjAMc9z7K4fVofpwk92
R+jG0nIrUh/yMy8Qv/zenxrnaA0IsKppxPEW3Im1xwQrMmkb7d+PLGgWBuRfQiU7
Sa2ir8JsHOPecnrBoXw6sM5qtzKpqxx4jdQNqdIy34M8X6Up+6jqcRaEucs6FHnb
LpFdB20SaarGrYEiSn3G2TwDdsYzX2rt/VWZ+WOJXxlUl6XxIUVMObHaN9wjeMWF
gt0=
-----END CERTIFICATE-----
Generated at Sun May 4 11:26:18 2025 by rpki-client