Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4Wk9d0BZQ9aAFJk_x7Try3fhlV8.roa
File: 4Wk9d0BZQ9aAFJk_x7Try3fhlV8.roa (raw, json)
Hash identifier: OfjXfKE5EzWaeGLK8weVch/K/g1DSAVoDF2dpYo274Y=
Subject key identifier: E1:69:3D:77:40:59:43:D6:80:14:99:3F:C7:B4:EB:CB:77:E1:95:5F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183B8580D9A2DF7094016779586BF1BD8A3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4Wk9d0BZQ9aAFJk_x7Try3fhlV8.roa
Signing time: Sat 08 Oct 2022 16:05:21 +0000
ROA not before: Sat 08 Oct 2022 16:05:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:b857:c0e9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b8:58:0d:9a:2d:f7:09:40:16:77:95:86:bf:1b:d8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 8 16:05:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1693d77405943d68014993fc7b4ebcb77e1955f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:51:b9:9e:9d:9d:59:57:5d:c0:21:08:41:ad:
f6:a4:17:0c:8b:4a:a3:91:be:fa:82:01:17:fd:17:
36:6a:1e:87:28:1b:24:24:44:ac:6b:b4:0d:17:48:
3c:1d:ea:eb:b1:2f:ef:f5:42:09:d0:4b:7c:10:b4:
02:21:89:5c:17:e9:49:0e:df:1a:c2:1f:97:ce:84:
a2:22:07:68:72:6c:8b:30:c3:ee:49:fa:1e:ca:f9:
00:82:6e:2d:b8:b8:54:82:84:09:fd:f1:9a:da:9e:
a4:32:25:80:ff:08:6f:d0:c2:b0:40:3b:96:9f:d8:
bc:01:b1:f0:85:d5:f7:4b:68:3c:33:b1:90:3f:69:
a7:c7:cf:b5:e9:7a:14:e9:19:30:e0:ed:84:7f:81:
48:39:da:32:75:40:b8:37:6e:81:c5:9e:c8:52:54:
fb:66:05:9a:fd:14:a6:e7:bd:01:04:57:a8:a4:e7:
bc:5c:eb:fd:cb:82:69:e4:b9:6d:ad:b5:b7:f8:b6:
1c:64:71:71:3b:8f:18:eb:76:dc:54:b7:d1:d3:b0:
f1:52:0c:b3:02:04:51:59:c1:3d:5a:ea:5a:6b:d6:
56:6b:e0:14:04:2d:c0:0c:46:e1:e8:b3:cb:c6:b3:
49:28:10:32:af:8f:03:d8:44:d5:1c:36:6f:27:1f:
f3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:69:3D:77:40:59:43:D6:80:14:99:3F:C7:B4:EB:CB:77:E1:95:5F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4Wk9d0BZQ9aAFJk_x7Try3fhlV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:a4:dd:92:5d:0b:b0:d3:60:b0:77:eb:c1:50:33:89:3f:96:
55:42:4c:72:cc:92:5b:49:c4:4f:ab:8b:06:34:7a:7c:2f:fb:
80:b9:74:1b:18:80:87:95:dd:bb:80:30:75:70:53:36:fe:26:
fe:e6:35:b3:fb:dd:bc:56:17:67:cc:f2:c2:00:4e:a9:f7:e8:
1d:a3:e4:7f:cf:0d:21:0e:e3:a8:ee:20:57:6d:69:e7:35:e0:
f4:b2:59:66:c9:f6:8c:d5:b0:f6:11:3c:69:9d:f4:ab:c8:3d:
43:29:31:65:b5:2a:0c:22:76:0d:df:87:e9:4a:d5:4a:c1:e2:
b0:d6:15:81:7a:29:3d:d8:10:b3:47:67:11:fd:13:ed:4f:8b:
8b:70:46:59:00:48:6d:93:17:70:0e:7f:ff:24:6d:61:9f:c5:
40:bb:2a:70:fb:1c:53:52:f3:c1:55:73:79:ce:96:f9:95:bd:
a7:b9:e8:d1:48:f0:06:f9:cb:4b:d1:e5:cc:4e:83:ef:e7:4e:
3f:c0:e2:d8:70:22:2e:80:19:89:e5:62:98:b0:e1:b7:2b:73:
fa:3c:8b:15:cf:3d:17:5a:04:e8:9d:7b:d8:84:1b:d5:1b:b0:
35:d6:cb:35:7c:61:3f:2e:37:dc:ae:b7:af:60:2b:5c:fc:1a:
8c:53:a1:54
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYO4WA2aLfcJQBZ3lYa/G9ijMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDA4MTYwNTIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTY5M2Q3NzQwNTk0M2Q2ODAxNDk5M2ZjN2I0ZWJjYjc3ZTE5NTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklG5np2dWVddwCEIQa32pBcMi0qj
kb76ggEX/Rc2ah6HKBskJESsa7QNF0g8HerrsS/v9UIJ0Et8ELQCIYlcF+lJDt8a
wh+XzoSiIgdocmyLMMPuSfoeyvkAgm4tuLhUgoQJ/fGa2p6kMiWA/whv0MKwQDuW
n9i8AbHwhdX3S2g8M7GQP2mnx8+16XoU6Rkw4O2Ef4FIOdoydUC4N26BxZ7IUlT7
ZgWa/RSm570BBFeopOe8XOv9y4Jp5LltrbW3+LYcZHFxO48Y63bcVLfR07DxUgyz
AgRRWcE9Wupaa9ZWa+AUBC3ADEbh6LPLxrNJKBAyr48D2ETVHDZvJx/z0wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOFpPXdAWUPWgBSZP8e068t34ZVfMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNFdrOWQwQlpROWFBRkprX3g3VHJ5M2ZobFY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF2k3ZJdC7DTYLB368FQ
M4k/llVCTHLMkltJxE+riwY0enwv+4C5dBsYgIeV3buAMHVwUzb+Jv7mNbP73bxW
F2fM8sIATqn36B2j5H/PDSEO46juIFdtaec14PSyWWbJ9ozVsPYRPGmd9KvIPUMp
MWW1Kgwidg3fh+lK1UrB4rDWFYF6KT3YELNHZxH9E+1Pi4twRlkASG2TF3AOf/8k
bWGfxUC7KnD7HFNS88FVc3nOlvmVvae56NFI8Ab5y0vR5cxOg+/nTj/A4thwIi6A
GYnlYpiw4bcrc/o8ixXPPRdaBOide9iEG9UbsDXWyzV8YT8uN9yut69gK1z8GoxT
oVQ=
-----END CERTIFICATE-----
Generated at Thu May 1 06:11:21 2025 by rpki-client