Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5tL6jWfH0Z2MH9c0PeAh5pWvQzw.roa
File: 5tL6jWfH0Z2MH9c0PeAh5pWvQzw.roa (raw, json)
Hash identifier: yKXNF9WevVBS7a4DSwoykWLdiO3jtHuo4d5+jHToRsM=
Subject key identifier: E6:D2:FA:8D:67:C7:D1:9D:8C:1F:D7:34:3D:E0:21:E6:95:AF:43:3C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01875EDAFC80B3AC1FF55CDEDF91A3F8A54A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5tL6jWfH0Z2MH9c0PeAh5pWvQzw.roa
Signing time: Sat 08 Apr 2023 03:13:42 +0000
ROA not before: Sat 08 Apr 2023 03:13:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5e:da:fc:80:b3:ac:1f:f5:5c:de:df:91:a3:f8:a5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 8 03:13:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6d2fa8d67c7d19d8c1fd7343de021e695af433c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5e:58:3b:da:52:55:a6:30:21:2f:c0:e1:c0:
7a:30:68:f0:c1:e9:5c:f9:44:e9:d2:eb:43:7b:a0:
6f:93:e0:62:e3:fd:43:fa:51:d8:ad:57:66:44:43:
f9:21:f0:32:21:29:83:a8:28:52:f7:64:34:af:55:
b7:2f:2b:27:73:3a:0d:e3:3e:38:50:72:7a:18:50:
31:58:ed:03:d8:dd:42:c9:90:a0:bd:ca:de:0f:b7:
5c:72:4e:7b:20:5f:d8:98:55:e2:22:d6:07:d1:68:
05:37:8b:8e:48:c1:45:8a:46:ce:b8:6d:d8:6f:9c:
9f:b5:b0:ed:56:ea:a6:67:e1:0d:cb:ae:8b:6f:37:
d1:7b:1c:09:48:a8:1c:dd:32:91:62:06:6a:81:1f:
6a:08:ed:76:e8:c5:13:ec:c2:84:11:d5:eb:e8:4e:
63:2a:41:85:41:94:9e:e0:9e:86:b7:45:ef:55:1c:
28:ff:37:0d:4c:41:c5:8e:1d:35:ea:d2:d8:46:6c:
d6:d7:6f:d5:61:29:b0:ac:cd:26:77:a4:73:dd:2e:
c8:f8:7d:c2:26:13:2d:ab:69:7b:75:95:09:9e:67:
e6:61:c7:ff:ba:26:d0:63:4a:e2:ce:5c:68:2b:40:
3d:38:81:30:82:45:e9:f3:de:c7:cd:ab:52:83:4c:
c6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D2:FA:8D:67:C7:D1:9D:8C:1F:D7:34:3D:E0:21:E6:95:AF:43:3C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5tL6jWfH0Z2MH9c0PeAh5pWvQzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:d7:0f:23:06:04:aa:de:65:21:d9:18:cf:77:ec:7b:8a:93:
62:78:30:c9:0f:f6:84:6d:cb:e4:4e:1b:f7:33:67:3f:ea:2f:
ea:42:d6:9a:f6:78:4d:fc:34:b2:27:48:ce:1a:55:da:10:3e:
b0:f3:86:7d:d8:2b:d2:e0:48:95:1c:c3:7a:59:77:14:c9:a8:
31:87:a6:b9:21:c6:84:ce:12:fd:f2:1d:9a:af:20:26:b1:d4:
e1:8e:79:a2:9f:6a:47:53:d6:9d:10:06:0a:39:61:33:09:4f:
5e:ae:8c:fc:9e:66:9a:82:e3:9e:bd:9d:0b:2a:e4:8c:28:72:
54:8e:45:ee:4a:f1:aa:e3:b5:ad:07:92:e0:f4:c4:72:06:49:
bf:e4:19:76:17:f1:18:07:07:e5:7b:f7:85:53:22:80:13:53:
7b:8c:8f:4a:c0:b3:69:52:42:fd:84:61:be:a0:b1:10:f5:8c:
d8:05:2f:a6:04:78:56:04:9f:03:1d:e8:1f:63:1b:ac:88:a3:
1c:de:6c:8e:58:88:3c:c4:35:fb:53:c9:ef:80:4e:c0:5e:4d:
b0:7b:9d:6d:08:6f:3c:d7:f4:52:aa:3d:2e:2e:11:3d:29:4d:
63:c8:66:30:65:c5:b7:6e:2a:67:e2:9e:0f:d9:2a:e7:3d:09:
b2:7f:af:60
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYde2vyAs6wf9Vze35Gj+KVKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDA4MDMxMzQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmQyZmE4ZDY3YzdkMTlkOGMxZmQ3MzQzZGUwMjFlNjk1YWY0MzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV5YO9pSVaYwIS/A4cB6MGjwwelc
+UTp0utDe6Bvk+Bi4/1D+lHYrVdmREP5IfAyISmDqChS92Q0r1W3LysnczoN4z44
UHJ6GFAxWO0D2N1CyZCgvcreD7dcck57IF/YmFXiItYH0WgFN4uOSMFFikbOuG3Y
b5yftbDtVuqmZ+ENy66LbzfRexwJSKgc3TKRYgZqgR9qCO126MUT7MKEEdXr6E5j
KkGFQZSe4J6Gt0XvVRwo/zcNTEHFjh016tLYRmzW12/VYSmwrM0md6Rz3S7I+H3C
JhMtq2l7dZUJnmfmYcf/uibQY0rizlxoK0A9OIEwgkXp897HzatSg0zGlQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFObS+o1nx9GdjB/XND3gIeaVr0M8MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNXRMNmpXZkgwWjJNSDljMFBlQWg1cFd2UXp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEvXDyMGBKreZSHZGM93
7HuKk2J4MMkP9oRty+ROG/czZz/qL+pC1pr2eE38NLInSM4aVdoQPrDzhn3YK9Lg
SJUcw3pZdxTJqDGHprkhxoTOEv3yHZqvICax1OGOeaKfakdT1p0QBgo5YTMJT16u
jPyeZpqC4569nQsq5IwoclSORe5K8arjta0HkuD0xHIGSb/kGXYX8RgHB+V794VT
IoATU3uMj0rAs2lSQv2EYb6gsRD1jNgFL6YEeFYEnwMd6B9jG6yIoxzebI5YiDzE
NftTye+ATsBeTbB7nW0IbzzX9FKqPS4uET0pTWPIZjBlxbduKmfing/ZKuc9CbJ/
r2A=
-----END CERTIFICATE-----
Generated at Thu May 1 01:48:09 2025 by rpki-client