Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5rFOd878eTuRgtHoo8ZgEMJrlsM.roa
File: 5rFOd878eTuRgtHoo8ZgEMJrlsM.roa (raw, json)
Hash identifier: Spvhu/tKstHkFbFzbwAuxdWIje5YozLQ2e+g/w3+8N0=
Subject key identifier: E6:B1:4E:77:CE:FC:79:3B:91:82:D1:E8:A3:C6:60:10:C2:6B:96:C3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186F6F7996A3A7C04253D7451DC7586CC3C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5rFOd878eTuRgtHoo8ZgEMJrlsM.roa
Signing time: Sat 18 Mar 2023 23:04:27 +0000
ROA not before: Sat 18 Mar 2023 23:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:f6f7:7d51/128 maxlen: 128
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f6:f7:99:6a:3a:7c:04:25:3d:74:51:dc:75:86:cc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 18 23:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6b14e77cefc793b9182d1e8a3c66010c26b96c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:05:56:e3:b8:0f:e5:a0:40:fe:21:2b:36:c4:
61:ab:ac:28:09:49:dc:c2:50:53:58:0b:7c:6f:43:
bd:de:26:f8:90:db:9b:36:d2:4e:cc:ba:9e:64:1b:
2c:c6:ae:d5:f9:10:09:81:29:0e:1d:ee:40:f4:44:
34:58:43:83:e8:9c:dc:2d:b9:a3:dd:76:ee:d6:89:
dc:4e:cf:ed:1f:de:db:7f:81:d5:8a:85:87:43:23:
d6:4f:fe:c9:5d:e4:fa:84:45:94:61:11:ef:99:2e:
2d:2d:f0:13:b5:ce:d1:83:25:f4:5c:85:45:a3:8a:
80:06:c0:06:e8:8e:b2:6a:ee:e7:b0:de:bf:90:6e:
fd:0f:36:92:43:cf:d4:89:ef:2a:ca:58:7c:55:74:
1d:14:b1:cf:57:63:9b:f1:6e:e6:f9:c8:c5:48:07:
13:66:df:dd:a0:47:6d:da:38:a6:02:74:79:00:96:
c2:0b:12:9b:55:2c:69:dc:94:4c:9c:45:d6:a3:32:
1e:c4:90:82:40:83:dc:51:44:1e:83:f0:26:53:74:
a5:ee:55:0b:f0:73:fb:bd:da:35:35:f5:21:c4:35:
02:e8:a3:d3:16:ed:7d:b5:ba:a7:a0:da:c9:9a:73:
3c:44:74:9a:ea:31:c6:f0:23:08:bc:a1:36:f9:91:
3b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B1:4E:77:CE:FC:79:3B:91:82:D1:E8:A3:C6:60:10:C2:6B:96:C3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5rFOd878eTuRgtHoo8ZgEMJrlsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:ab:56:ac:c9:82:20:af:cc:72:0a:6c:46:a8:ef:e3:2b:ec:
7e:4b:e9:9b:26:f2:10:84:b8:57:9b:22:26:6e:5f:d9:09:54:
78:7f:27:0f:c1:cf:1c:47:d6:d4:7d:dc:7d:04:fd:41:27:67:
5d:85:32:6e:9c:67:a6:ed:e8:ce:47:ef:6e:a7:1b:02:46:88:
b7:55:cd:7b:04:ef:92:35:ac:74:e6:05:a9:7d:ca:81:ee:bd:
3e:3b:2a:a5:75:1c:7b:43:db:7f:cd:19:dd:de:a8:39:bf:f3:
c9:14:97:96:98:98:f2:90:58:e8:5d:53:7e:6f:42:1c:4d:4c:
72:ed:75:02:fa:a9:f4:7c:f4:b3:ef:5a:89:3e:c6:9a:9e:e3:
e9:9f:2c:f7:b0:e0:1d:67:41:3e:da:31:bd:7b:1a:10:a6:ce:
82:04:0e:0a:5a:8f:8f:62:5b:eb:e5:8f:19:eb:ea:bc:73:6a:
8a:08:37:fa:22:f7:20:3a:87:a2:1b:b7:fb:4f:c5:b1:05:80:
60:5f:2f:f7:28:ef:7f:5b:32:b2:12:34:f2:2f:27:e8:a3:f2:
4a:f2:c3:03:b1:13:32:aa:ff:2c:be:52:2e:28:cc:28:6c:c5:
94:bf:28:56:b6:72:b4:0b:c3:7b:85:81:e8:b9:52:c5:0a:7f:
d2:ef:70:21
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYb295lqOnwEJT10Udx1hsw8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzE4MjMwNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmIxNGU3N2NlZmM3OTNiOTE4MmQxZThhM2M2NjAxMGMyNmI5NmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wVW47gP5aBA/iErNsRhq6woCUnc
wlBTWAt8b0O93ib4kNubNtJOzLqeZBssxq7V+RAJgSkOHe5A9EQ0WEOD6JzcLbmj
3Xbu1oncTs/tH97bf4HVioWHQyPWT/7JXeT6hEWUYRHvmS4tLfATtc7RgyX0XIVF
o4qABsAG6I6yau7nsN6/kG79DzaSQ8/Uie8qylh8VXQdFLHPV2Ob8W7m+cjFSAcT
Zt/doEdt2jimAnR5AJbCCxKbVSxp3JRMnEXWozIexJCCQIPcUUQeg/AmU3Sl7lUL
8HP7vdo1NfUhxDUC6KPTFu19tbqnoNrJmnM8RHSa6jHG8CMIvKE2+ZE78wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOaxTnfO/Hk7kYLR6KPGYBDCa5bDMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNXJGT2Q4NzhlVHVSZ3RIb284WmdFTUpybHNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKKrVqzJgiCvzHIKbEao
7+Mr7H5L6Zsm8hCEuFebIiZuX9kJVHh/Jw/BzxxH1tR93H0E/UEnZ12FMm6cZ6bt
6M5H726nGwJGiLdVzXsE75I1rHTmBal9yoHuvT47KqV1HHtD23/NGd3eqDm/88kU
l5aYmPKQWOhdU35vQhxNTHLtdQL6qfR89LPvWok+xpqe4+mfLPew4B1nQT7aMb17
GhCmzoIEDgpaj49iW+vljxnr6rxzaooIN/oi9yA6h6Ibt/tPxbEFgGBfL/co739b
MrISNPIvJ+ij8krywwOxEzKq/yy+Ui4ozChsxZS/KFa2crQLw3uFgei5UsUKf9Lv
cCE=
-----END CERTIFICATE-----
Generated at Thu May 1 08:12:36 2025 by rpki-client