Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5krJ1Xhwje_039KzhjM5nFaQGOI.roa
File: 5krJ1Xhwje_039KzhjM5nFaQGOI.roa (raw, json)
Hash identifier: cL7q9v7uv6u1CnDEhcODsrQ6HSXbBK4f/Iv3FGQacSA=
Subject key identifier: E6:4A:C9:D5:78:70:8D:EF:F4:DF:D2:B3:86:33:39:9C:56:90:18:E2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185C6EED8A8CDF8C0B8CB950AECE95BC3A2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5krJ1Xhwje_039KzhjM5nFaQGOI.roa
Signing time: Wed 18 Jan 2023 22:10:19 +0000
ROA not before: Wed 18 Jan 2023 22:10:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c6:ee:d8:a8:cd:f8:c0:b8:cb:95:0a:ec:e9:5b:c3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 18 22:10:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e64ac9d578708deff4dfd2b38633399c569018e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7f:18:ce:f9:fb:69:84:bf:e6:fe:bb:52:a8:
5e:d8:33:9b:6b:ca:79:04:61:46:ce:d6:2d:88:bc:
ed:c9:ac:01:59:09:05:02:1f:aa:9b:cf:10:59:b1:
82:da:e8:2f:b4:f0:83:49:91:9a:d4:98:a3:aa:1e:
f8:54:38:23:07:91:a3:bc:de:d1:57:43:1f:65:0b:
84:d6:f4:8d:3b:51:33:e0:6c:ce:60:97:c4:fa:cc:
5d:a8:cb:ff:7c:16:a7:f6:8c:ed:ec:83:64:f1:5a:
32:2e:bc:45:54:d9:88:7d:fb:b5:31:38:fd:3c:10:
b6:d4:18:f1:23:ea:25:a9:d6:1b:fd:93:87:b9:01:
85:65:e3:84:35:6e:39:d4:cf:cd:d9:85:4a:37:45:
9d:bd:d4:2a:54:6a:e2:8b:7f:10:42:17:a4:44:4f:
87:55:54:23:98:ab:2f:39:4e:0c:06:3f:28:39:7b:
20:8f:54:c9:af:1f:9c:5e:ab:f4:aa:d5:62:c6:c9:
ef:63:45:5e:4d:41:f6:f7:71:d4:4a:94:2a:a6:ba:
c0:80:51:83:95:63:76:76:5d:b4:59:32:99:b6:91:
47:11:ae:0a:3d:ae:d4:c0:0d:2e:e1:1e:19:fe:8f:
62:1c:b5:eb:c0:c9:87:84:71:a9:3f:eb:d5:e5:72:
52:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4A:C9:D5:78:70:8D:EF:F4:DF:D2:B3:86:33:39:9C:56:90:18:E2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5krJ1Xhwje_039KzhjM5nFaQGOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:6f:38:5c:e6:45:bd:c1:47:9b:00:65:08:bc:89:a1:bf:7d:
44:f0:b2:4a:54:bb:2b:2e:f1:89:ca:f2:d7:86:ae:f7:ea:0d:
13:e9:c7:3e:43:cb:48:6d:84:d5:59:34:ee:00:7e:72:1d:cc:
3b:59:55:67:9b:75:8f:41:b5:dd:41:6d:08:8c:24:7e:14:88:
6d:af:ce:e6:34:d4:d4:c0:4e:94:1a:e0:f1:27:0f:31:2d:10:
87:91:a6:c0:96:43:72:02:99:fe:8c:44:d7:3b:f9:24:4d:00:
52:80:19:49:36:f4:20:32:f1:59:f5:c5:b3:e0:dd:5f:12:43:
81:9d:fe:41:f7:4b:93:a8:9a:2d:3c:df:7b:17:11:c3:1c:27:
5e:31:ea:0c:d3:a6:4c:82:0c:36:65:ba:91:04:79:ee:66:a4:
bd:94:1f:1e:40:d4:bf:dc:a6:4d:11:ba:af:97:4c:e8:98:50:
89:b2:24:00:39:4a:43:55:8e:7b:8d:34:23:fd:ec:78:4d:b5:
b7:db:f5:e7:4e:83:fd:17:64:b4:b5:5d:83:07:bd:8b:ae:a5:
ac:5f:99:df:be:69:3d:f3:ef:45:d7:61:c0:12:33:5c:4a:22:
e9:e5:fc:49:ef:8a:15:9b:aa:dc:e1:42:c2:5f:8f:f3:65:c6:
e9:bb:7b:63
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYXG7tiozfjAuMuVCuzpW8OiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTE4MjIxMDE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjRhYzlkNTc4NzA4ZGVmZjRkZmQyYjM4NjMzMzk5YzU2OTAxOGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX8Yzvn7aYS/5v67Uqhe2DOba8p5
BGFGztYtiLztyawBWQkFAh+qm88QWbGC2ugvtPCDSZGa1Jijqh74VDgjB5GjvN7R
V0MfZQuE1vSNO1Ez4GzOYJfE+sxdqMv/fBan9ozt7INk8VoyLrxFVNmIffu1MTj9
PBC21BjxI+olqdYb/ZOHuQGFZeOENW451M/N2YVKN0WdvdQqVGrii38QQhekRE+H
VVQjmKsvOU4MBj8oOXsgj1TJrx+cXqv0qtVixsnvY0VeTUH293HUSpQqprrAgFGD
lWN2dl20WTKZtpFHEa4KPa7UwA0u4R4Z/o9iHLXrwMmHhHGpP+vV5XJSKQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOZKydV4cI3v9N/Ss4YzOZxWkBjiMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNWtySjFYaHdqZV8wMzlLemhqTTVuRmFRR09JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKtvOFzmRb3BR5sAZQi8
iaG/fUTwskpUuysu8YnK8teGrvfqDRPpxz5Dy0hthNVZNO4AfnIdzDtZVWebdY9B
td1BbQiMJH4UiG2vzuY01NTATpQa4PEnDzEtEIeRpsCWQ3ICmf6MRNc7+SRNAFKA
GUk29CAy8Vn1xbPg3V8SQ4Gd/kH3S5Oomi0833sXEcMcJ14x6gzTpkyCDDZlupEE
ee5mpL2UHx5A1L/cpk0Ruq+XTOiYUImyJAA5SkNVjnuNNCP97HhNtbfb9edOg/0X
ZLS1XYMHvYuupaxfmd++aT3z70XXYcASM1xKIunl/EnvihWbqtzhQsJfj/Nlxum7
e2M=
-----END CERTIFICATE-----
Generated at Sat May 3 14:01:19 2025 by rpki-client