Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5K6rJORU0MV2Ars0OJbAb8hmAf0.roa
File: 5K6rJORU0MV2Ars0OJbAb8hmAf0.roa (raw, json)
Hash identifier: LWnq8mf8NZsoI9lK1QDhh/RoB2OwaQbQffKQYEZLHb4=
Subject key identifier: E4:AE:AB:24:E4:54:D0:C5:76:02:BB:34:38:96:C0:6F:C8:66:01:FD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01852001025E8F4DA1E46E90E196A1FFA29E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5K6rJORU0MV2Ars0OJbAb8hmAf0.roa
Signing time: Sat 17 Dec 2022 12:13:35 +0000
ROA not before: Sat 17 Dec 2022 12:13:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:20:01:02:5e:8f:4d:a1:e4:6e:90:e1:96:a1:ff:a2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 17 12:13:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4aeab24e454d0c57602bb343896c06fc86601fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:db:ce:22:0d:0d:88:de:90:e9:6c:91:23:ca:
5f:5a:b0:81:33:d4:92:e4:14:41:ea:61:35:14:70:
ac:5e:1d:28:b7:58:a1:d5:d0:c8:f3:dc:ae:c6:82:
2a:76:a5:29:f8:3f:21:5d:88:f7:c3:7a:40:06:fd:
db:d5:1a:17:8d:86:ee:40:3a:e1:70:08:75:27:73:
a3:fd:bb:a0:7e:a9:ae:d3:fe:80:46:ff:b3:7c:b7:
c4:36:34:e6:05:4e:4a:64:13:8a:e4:fc:9b:53:65:
ef:3f:3a:76:50:ee:f1:de:a5:d2:c0:0b:72:b2:02:
ec:e1:6b:c7:db:67:d3:20:4e:be:1e:b4:6f:c6:ac:
eb:af:a6:43:f1:d2:34:90:a6:57:3f:aa:29:72:c8:
be:25:74:cc:5c:26:c7:84:60:9f:e6:35:0e:ec:d4:
45:94:e5:aa:30:fa:8f:6b:f4:53:db:ab:25:ad:a2:
c4:34:0c:12:52:f5:49:cc:95:c6:82:9c:03:34:9e:
25:d8:15:1f:05:82:98:ae:08:d0:0f:ef:29:8a:51:
a9:96:f2:7a:e3:6d:95:79:cb:b1:5f:91:e0:d5:a2:
25:2d:b6:1e:4b:b6:1f:a8:34:a1:3f:14:a9:33:c4:
f2:97:7d:83:92:ec:1c:58:52:8f:22:ef:fb:3c:40:
cc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AE:AB:24:E4:54:D0:C5:76:02:BB:34:38:96:C0:6F:C8:66:01:FD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5K6rJORU0MV2Ars0OJbAb8hmAf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:62:42:8f:09:18:59:ed:92:cf:03:53:b6:a9:d5:e3:ab:6a:
7f:a3:d0:fd:08:23:08:8c:05:a6:2c:9a:57:fe:80:91:f4:9e:
cc:bd:f2:9c:97:e2:e3:17:85:22:da:db:15:39:c9:37:42:1c:
f3:55:b1:de:50:03:a1:b7:f1:be:09:61:e7:1b:4e:85:5c:13:
e8:42:ad:ae:94:97:e9:bc:95:2d:c6:dc:8e:7a:cb:18:71:c1:
d6:8d:9f:de:b1:ef:59:73:8e:5b:50:55:ff:7c:15:f6:8b:7e:
0f:0f:7b:40:53:db:b7:7c:b7:07:c9:6b:9f:55:64:0f:d5:d7:
4a:a0:ab:b2:37:9a:79:7f:31:b1:82:68:72:94:b8:ee:2b:f4:
5f:bd:cb:50:b8:da:fb:35:6a:79:23:3b:3e:a1:01:3e:ee:d9:
a1:5c:e8:22:86:ba:93:6f:1b:b6:c1:df:31:9c:a7:a8:52:f1:
d6:47:ef:9e:25:98:2a:21:85:fb:15:d9:4b:ae:72:bd:fb:d6:
6c:f8:f0:69:3d:c4:32:86:c4:41:29:97:d2:71:3e:ff:11:e4:
2e:c4:0d:84:bc:ac:46:24:1d:7f:50:77:2f:ad:e9:1d:da:97:
46:66:87:b1:95:6f:41:fb:38:cd:ac:83:8d:3f:35:00:0e:d5:
97:17:1a:ce
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUgAQJej02h5G6Q4Zah/6KeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjE3MTIxMzM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGFlYWIyNGU0NTRkMGM1NzYwMmJiMzQzODk2YzA2ZmM4NjYwMWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9vOIg0NiN6Q6WyRI8pfWrCBM9SS
5BRB6mE1FHCsXh0ot1ih1dDI89yuxoIqdqUp+D8hXYj3w3pABv3b1RoXjYbuQDrh
cAh1J3Oj/bugfqmu0/6ARv+zfLfENjTmBU5KZBOK5PybU2XvPzp2UO7x3qXSwAty
sgLs4WvH22fTIE6+HrRvxqzrr6ZD8dI0kKZXP6opcsi+JXTMXCbHhGCf5jUO7NRF
lOWqMPqPa/RT26slraLENAwSUvVJzJXGgpwDNJ4l2BUfBYKYrgjQD+8pilGplvJ6
422VecuxX5Hg1aIlLbYeS7YfqDShPxSpM8Tyl32DkuwcWFKPIu/7PEDM3QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOSuqyTkVNDFdgK7NDiWwG/IZgH9MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNUs2ckpPUlUwTVYyQXJzME9KYkFiOGhtQWYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAViQo8JGFntks8DU7ap
1eOran+j0P0IIwiMBaYsmlf+gJH0nsy98pyX4uMXhSLa2xU5yTdCHPNVsd5QA6G3
8b4JYecbToVcE+hCra6Ul+m8lS3G3I56yxhxwdaNn96x71lzjltQVf98FfaLfg8P
e0BT27d8twfJa59VZA/V10qgq7I3mnl/MbGCaHKUuO4r9F+9y1C42vs1ankjOz6h
AT7u2aFc6CKGupNvG7bB3zGcp6hS8dZH754lmCohhfsV2Uuucr371mz48Gk9xDKG
xEEpl9JxPv8R5C7EDYS8rEYkHX9Qdy+t6R3al0Zmh7GVb0H7OM2sg40/NQAO1ZcX
Gs4=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:37:41 2025 by rpki-client