Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7AC1kcrgJ0c6l5_JabPeiltUXCc.roa
File: 7AC1kcrgJ0c6l5_JabPeiltUXCc.roa (raw, json)
Hash identifier: ePMfvHL//vF4lIrUvGKkxx0Xcdkrhteam4wBC+PfJ+E=
Subject key identifier: EC:00:B5:91:CA:E0:27:47:3A:97:9F:C9:69:B3:DE:8A:5B:54:5C:27
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018800A14770C05F9A9A5221F4986BE397BB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7AC1kcrgJ0c6l5_JabPeiltUXCc.roa
Signing time: Tue 09 May 2023 13:09:09 +0000
ROA not before: Tue 09 May 2023 13:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:00:a1:47:70:c0:5f:9a:9a:52:21:f4:98:6b:e3:97:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 9 13:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec00b591cae027473a979fc969b3de8a5b545c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b3:9d:db:1a:56:72:cf:21:fa:2b:01:0e:99:
c6:6d:8f:92:47:a7:0c:be:dc:2b:79:35:33:f7:c7:
ec:54:66:f9:e4:a8:bd:97:ec:ba:69:60:0e:cf:6c:
cc:ac:96:e7:21:40:8b:12:a4:c3:e9:66:0c:87:79:
58:5b:87:86:20:ac:b0:02:93:b4:32:64:2e:81:12:
de:7f:94:88:9a:e4:46:9b:6d:bf:19:47:ca:48:2f:
1c:65:c9:0a:89:78:2d:08:a8:4d:7b:97:b2:b7:5b:
2d:2c:38:45:c4:93:5f:ae:9e:66:dc:8a:8c:89:af:
7e:f9:06:59:fa:55:fe:af:49:45:9b:2b:d6:50:6e:
7b:fa:96:1d:52:00:f4:0c:79:97:db:5f:53:c2:1b:
57:a9:25:df:8e:0b:a0:e9:9f:40:be:ef:fe:eb:83:
16:50:b2:f4:28:7a:d7:19:4f:77:2d:21:d0:da:43:
41:d3:90:f6:a0:2d:6a:68:ea:09:74:dd:c7:97:14:
3e:bb:0c:4b:dc:ce:09:3b:38:04:09:e0:e2:02:31:
99:06:2c:b9:a3:f9:ef:9e:88:16:46:8e:50:7e:10:
4f:12:84:0c:cb:27:4a:d2:ac:5c:1b:44:e8:b3:dd:
1b:f7:04:33:6a:6e:05:44:10:e0:c9:dc:25:6b:6b:
b6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:00:B5:91:CA:E0:27:47:3A:97:9F:C9:69:B3:DE:8A:5B:54:5C:27
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7AC1kcrgJ0c6l5_JabPeiltUXCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:0f:0f:81:10:4e:60:41:52:08:5c:d0:63:ab:d3:4e:e9:5f:
dd:39:9c:0e:6d:ad:e8:2c:45:e3:fc:42:f4:be:98:a9:82:a4:
03:23:34:5c:de:ab:6e:24:a5:b9:03:65:c1:d0:b9:7d:c8:14:
f4:79:90:84:fb:e0:bc:34:7b:b0:94:ce:7a:46:00:36:24:c5:
3e:7c:07:08:39:01:41:6a:91:1d:33:bf:a9:e0:cb:cb:70:ee:
f0:e9:b3:c1:36:6d:4a:5b:2b:8e:cc:c9:cf:01:8d:c5:55:7a:
21:73:15:0a:d1:a4:04:1b:ad:b2:12:ca:13:a3:2e:6b:cf:ea:
27:3e:35:7f:34:57:1e:b1:bc:70:c4:68:36:16:23:87:0c:7a:
24:4f:54:98:79:4e:6e:81:9a:4f:32:d1:48:fe:c9:2d:35:04:
13:bf:aa:3d:d4:1e:fd:2b:8e:b4:57:fd:25:14:76:5a:44:1f:
13:2e:0a:8d:e3:d5:78:b3:64:72:78:1b:50:8f:c2:b0:e5:2e:
58:32:fe:93:c4:91:65:93:ff:81:d3:f3:08:14:16:1d:ac:d7:
86:1d:34:f5:fb:b9:47:4d:d0:67:5d:4d:4e:fd:9c:d7:91:da:
9b:a0:ea:b7:59:f1:b2:63:01:ab:c6:34:8d:b4:33:48:54:be:
26:21:31:22
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYgAoUdwwF+amlIh9Jhr45e7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTA5MTMwOTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzAwYjU5MWNhZTAyNzQ3M2E5NzlmYzk2OWIzZGU4YTViNTQ1YzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrOd2xpWcs8h+isBDpnGbY+SR6cM
vtwreTUz98fsVGb55Ki9l+y6aWAOz2zMrJbnIUCLEqTD6WYMh3lYW4eGIKywApO0
MmQugRLef5SImuRGm22/GUfKSC8cZckKiXgtCKhNe5eyt1stLDhFxJNfrp5m3IqM
ia9++QZZ+lX+r0lFmyvWUG57+pYdUgD0DHmX219TwhtXqSXfjgug6Z9Avu/+64MW
ULL0KHrXGU93LSHQ2kNB05D2oC1qaOoJdN3HlxQ+uwxL3M4JOzgECeDiAjGZBiy5
o/nvnogWRo5QfhBPEoQMyydK0qxcG0Tos90b9wQzam4FRBDgydwla2u23QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOwAtZHK4CdHOpefyWmz3opbVFwnMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvN0FDMWtjcmdKMGM2bDVfSmFiUGVpbHRVWENjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAI4PD4EQTmBBUghc0GOr
007pX905nA5tregsReP8QvS+mKmCpAMjNFzeq24kpbkDZcHQuX3IFPR5kIT74Lw0
e7CUznpGADYkxT58Bwg5AUFqkR0zv6ngy8tw7vDps8E2bUpbK47Myc8BjcVVeiFz
FQrRpAQbrbISyhOjLmvP6ic+NX80Vx6xvHDEaDYWI4cMeiRPVJh5Tm6Bmk8y0Uj+
yS01BBO/qj3UHv0rjrRX/SUUdlpEHxMuCo3j1XizZHJ4G1CPwrDlLlgy/pPEkWWT
/4HT8wgUFh2s14YdNPX7uUdN0GddTU79nNeR2pug6rdZ8bJjAavGNI20M0hUviYh
MSI=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:55:05 2025 by rpki-client