Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5kwFXhtjY1i8SnYIN24zLAkHpns.roa
File: 5kwFXhtjY1i8SnYIN24zLAkHpns.roa (raw, json)
Hash identifier: n6I43GXeUs1rrGbBd/3Mt84gKjoZu/wObpjXAqhJ+hQ=
Subject key identifier: E6:4C:05:5E:1B:63:63:58:BC:4A:76:08:37:6E:33:2C:09:07:A6:7B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183F8BBAA108158442DC0130EC39EAFE513
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5kwFXhtjY1i8SnYIN24zLAkHpns.roa
Signing time: Fri 21 Oct 2022 04:09:51 +0000
ROA not before: Fri 21 Oct 2022 04:09:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f8:bb:aa:10:81:58:44:2d:c0:13:0e:c3:9e:af:e5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 21 04:09:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e64c055e1b636358bc4a7608376e332c0907a67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:88:66:0b:18:66:cf:32:d7:9a:6a:df:5d:e3:
5d:9d:a3:0e:ef:c0:d5:5b:8b:55:cf:e7:af:ae:e9:
f6:b2:f4:88:90:6b:e3:90:db:30:72:bb:08:59:05:
94:f2:0c:8c:b8:66:e2:7a:c3:72:47:fc:34:e1:31:
11:f2:10:21:2d:05:38:8f:f3:e1:17:33:ac:c9:75:
a7:f3:f8:c2:b5:6f:df:8a:62:6c:ac:ce:51:15:f4:
ba:d6:78:28:19:85:eb:56:1b:d8:e5:d0:85:38:7d:
12:8c:65:33:bc:99:4b:85:77:b0:41:47:3e:58:0c:
7c:9a:03:6a:60:62:46:f8:ac:d8:e0:e4:5c:5f:81:
e9:f9:51:ba:c0:3a:33:01:13:17:e7:b3:94:68:a7:
4d:09:57:a6:95:14:33:05:4e:f8:40:ab:04:f8:c3:
e1:05:96:76:0c:62:e7:60:cc:4c:3f:8c:e2:1b:80:
60:57:53:4f:97:d1:66:47:91:1c:14:68:90:b1:e4:
71:6d:3b:a3:48:b7:96:94:51:92:09:ad:b8:71:f3:
7c:00:84:32:c5:9f:73:5e:69:65:93:63:0d:32:2f:
4c:0c:67:7a:fc:84:a8:97:4e:b4:e3:6b:2c:b6:40:
4f:52:d6:6c:c2:12:03:26:d7:9a:7c:a4:5d:47:7c:
eb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4C:05:5E:1B:63:63:58:BC:4A:76:08:37:6E:33:2C:09:07:A6:7B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5kwFXhtjY1i8SnYIN24zLAkHpns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:c2:53:65:e3:74:6e:4c:99:7e:ed:46:bf:4b:46:fa:28:c3:
dc:b6:65:aa:8a:ce:14:6b:36:7b:ae:2e:61:dd:cf:0b:35:4e:
80:69:ed:6c:ad:2e:cb:33:87:56:a4:50:f0:a4:97:cd:c5:e6:
d1:5d:5c:60:11:ff:36:11:d7:c3:1d:b4:9d:6b:f1:4b:ed:25:
24:5f:79:05:29:ba:38:ed:c4:ca:38:e0:04:1f:04:b8:1f:7e:
10:a6:60:8f:8d:8f:13:f6:7c:91:97:32:01:7e:05:df:d7:a1:
5a:94:29:6e:ff:a8:db:0a:a3:c8:4b:56:8a:4d:e6:6d:56:84:
22:dd:80:53:71:0a:08:51:c1:05:09:18:b5:f5:22:37:c1:00:
13:5e:46:22:e4:8e:b2:45:e2:f0:ff:ae:d7:3a:a6:c5:ed:e1:
93:0c:30:eb:c2:41:d8:79:76:9b:14:87:13:cc:6a:4a:22:56:
62:07:4b:5a:37:da:6f:fd:03:71:ac:f6:3b:59:b1:89:2c:31:
6f:f7:d2:bf:b6:cf:2c:40:27:db:6e:7d:e9:d4:19:41:67:c8:
b3:d1:d6:df:be:2f:1f:1f:72:c4:86:3f:1e:7d:82:71:70:82:
74:49:4f:1f:2e:e8:e5:91:b3:3c:e8:8e:48:df:58:f7:ff:b1:
0d:23:2d:ba
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYP4u6oQgVhELcATDsOer+UTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDIxMDQwOTUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjRjMDU1ZTFiNjM2MzU4YmM0YTc2MDgzNzZlMzMyYzA5MDdhNjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoohmCxhmzzLXmmrfXeNdnaMO78DV
W4tVz+evrun2svSIkGvjkNswcrsIWQWU8gyMuGbiesNyR/w04TER8hAhLQU4j/Ph
FzOsyXWn8/jCtW/fimJsrM5RFfS61ngoGYXrVhvY5dCFOH0SjGUzvJlLhXewQUc+
WAx8mgNqYGJG+KzY4ORcX4Hp+VG6wDozARMX57OUaKdNCVemlRQzBU74QKsE+MPh
BZZ2DGLnYMxMP4ziG4BgV1NPl9FmR5EcFGiQseRxbTujSLeWlFGSCa24cfN8AIQy
xZ9zXmllk2MNMi9MDGd6/ISol06042sstkBPUtZswhIDJteafKRdR3zrdwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOZMBV4bY2NYvEp2CDduMywJB6Z7MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNWt3RlhodGpZMWk4U25ZSU4yNHpMQWtIcG5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFvCU2XjdG5MmX7tRr9L
Rvoow9y2ZaqKzhRrNnuuLmHdzws1ToBp7WytLsszh1akUPCkl83F5tFdXGAR/zYR
18MdtJ1r8UvtJSRfeQUpujjtxMo44AQfBLgffhCmYI+NjxP2fJGXMgF+Bd/XoVqU
KW7/qNsKo8hLVopN5m1WhCLdgFNxCghRwQUJGLX1IjfBABNeRiLkjrJF4vD/rtc6
psXt4ZMMMOvCQdh5dpsUhxPMakoiVmIHS1o32m/9A3Gs9jtZsYksMW/30r+2zyxA
J9tufenUGUFnyLPR1t++Lx8fcsSGPx59gnFwgnRJTx8u6OWRszzojkjfWPf/sQ0j
Lbo=
-----END CERTIFICATE-----
Generated at Thu May 1 23:00:35 2025 by rpki-client