Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8K2fAImaCZB7wvob67JL8qiTjWk.roa
File: 8K2fAImaCZB7wvob67JL8qiTjWk.roa (raw, json)
Hash identifier: 8QZx5duhNS9P7uQQKEuBa60dfFXGq2TEdxwhSuxx7v0=
Subject key identifier: F0:AD:9F:00:89:9A:09:90:7B:C2:FA:1B:EB:B2:4B:F2:A8:93:8D:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188D9915389631B01201EC3E755EDB58687
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8K2fAImaCZB7wvob67JL8qiTjWk.roa
Signing time: Tue 20 Jun 2023 16:09:19 +0000
ROA not before: Tue 20 Jun 2023 16:09:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d9:91:53:89:63:1b:01:20:1e:c3:e7:55:ed:b5:86:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 20 16:09:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0ad9f00899a09907bc2fa1bebb24bf2a8938d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:27:57:da:36:19:04:01:46:03:c2:fb:1a:
88:fe:f2:70:2a:62:b3:9b:60:5b:d8:bd:ac:2c:80:
b6:85:32:ed:85:ef:ad:26:f6:65:ea:da:8c:5e:a5:
3a:4b:97:2d:5f:68:b3:cb:14:ba:98:90:be:5c:cd:
bb:c1:c3:77:58:7d:ad:79:70:3f:5f:79:2b:0e:fc:
f3:7f:4b:3a:05:67:d0:dc:d6:0b:0e:5e:b3:09:56:
8e:65:c5:99:d5:56:cb:94:0e:c3:1e:2b:b0:75:56:
07:58:5f:24:73:88:5b:86:6c:e5:64:5b:de:51:b0:
95:b1:7c:01:75:ff:69:7d:11:45:63:4f:0f:e2:b4:
45:e3:5a:05:43:49:94:e6:e4:67:b1:ab:fc:18:71:
cc:19:98:2c:45:cc:e6:f8:d6:17:9e:78:7a:3a:0c:
b7:24:a7:c1:0c:06:81:f7:c5:b8:b8:d9:83:98:f9:
cd:f3:6d:36:45:2c:fd:8f:15:01:12:26:c8:ed:44:
fd:61:11:6b:23:e3:86:ec:0b:54:55:18:ec:77:a5:
8c:26:e2:fe:3f:32:8e:65:f6:64:c3:ba:e8:3e:45:
42:c3:ad:91:77:95:f4:09:ed:1d:59:22:69:20:e0:
af:d2:05:13:77:6d:73:cd:6e:98:82:e8:f8:3d:ee:
3c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AD:9F:00:89:9A:09:90:7B:C2:FA:1B:EB:B2:4B:F2:A8:93:8D:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8K2fAImaCZB7wvob67JL8qiTjWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:94:3c:d2:71:52:46:c4:29:d4:df:a4:92:ea:ee:85:75:3e:
05:2a:dd:ae:b4:a7:c8:6e:08:92:40:ff:ec:89:5b:2f:37:3d:
47:5f:3b:05:0f:cb:ad:da:f2:d9:25:4b:3d:af:18:85:b0:09:
63:8b:1e:5f:85:21:98:fc:2e:cb:42:c8:fc:74:cf:df:1b:71:
a9:8e:8f:51:7b:cf:63:48:ac:c9:bf:3c:9c:e6:77:19:d1:8c:
45:2d:eb:32:cf:4e:98:1a:d1:53:b8:c6:0e:43:fa:44:8e:d0:
49:14:8b:e1:69:6c:d6:2c:e5:5a:36:d0:c9:6f:ce:c5:f0:61:
ca:1d:cc:7b:f8:7d:5e:9a:07:f9:38:74:5a:7e:54:2d:59:a4:
b3:e5:00:14:70:e8:0f:03:31:ac:da:63:30:4c:37:9c:e1:44:
21:61:fa:ea:e9:d8:00:3d:44:57:c9:8b:cc:a0:f4:3c:8a:d1:
9b:cd:6e:dc:91:9e:b6:98:bf:42:48:2e:cf:50:01:35:05:17:
cd:bf:92:56:c5:fb:ab:e6:50:4d:f2:7a:bd:74:d8:e4:54:5a:
cc:f3:46:e4:97:3c:a3:01:11:40:a3:be:6c:50:18:ca:28:11:
5d:a1:bd:ea:ca:b7:73:13:c3:89:be:15:64:46:e6:82:cb:ad:
44:51:9e:70
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYjZkVOJYxsBIB7D51XttYaHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjIwMTYwOTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGFkOWYwMDg5OWEwOTkwN2JjMmZhMWJlYmIyNGJmMmE4OTM4ZDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvucnV9o2GQQBRgPC+xqI/vJwKmKz
m2Bb2L2sLIC2hTLthe+tJvZl6tqMXqU6S5ctX2izyxS6mJC+XM27wcN3WH2teXA/
X3krDvzzf0s6BWfQ3NYLDl6zCVaOZcWZ1VbLlA7DHiuwdVYHWF8kc4hbhmzlZFve
UbCVsXwBdf9pfRFFY08P4rRF41oFQ0mU5uRnsav8GHHMGZgsRczm+NYXnnh6Ogy3
JKfBDAaB98W4uNmDmPnN8202RSz9jxUBEibI7UT9YRFrI+OG7AtUVRjsd6WMJuL+
PzKOZfZkw7roPkVCw62Rd5X0Ce0dWSJpIOCv0gUTd21zzW6Yguj4Pe48gQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPCtnwCJmgmQe8L6G+uyS/Kok41pMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOEsyZkFJbWFDWkI3d3ZvYjY3Skw4cWlUaldrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJyUPNJxUkbEKdTfpJLq
7oV1PgUq3a60p8huCJJA/+yJWy83PUdfOwUPy63a8tklSz2vGIWwCWOLHl+FIZj8
LstCyPx0z98bcamOj1F7z2NIrMm/PJzmdxnRjEUt6zLPTpga0VO4xg5D+kSO0EkU
i+FpbNYs5Vo20MlvzsXwYcodzHv4fV6aB/k4dFp+VC1ZpLPlABRw6A8DMazaYzBM
N5zhRCFh+urp2AA9RFfJi8yg9DyK0ZvNbtyRnraYv0JILs9QATUFF82/klbF+6vm
UE3yer102ORUWszzRuSXPKMBEUCjvmxQGMooEV2hverKt3MTw4m+FWRG5oLLrURR
nnA=
-----END CERTIFICATE-----
Generated at Fri May 2 11:59:46 2025 by rpki-client