Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8YSGkx4CH23e4cRUDQt9PXXcBNQ.roa
File: 8YSGkx4CH23e4cRUDQt9PXXcBNQ.roa (raw, json)
Hash identifier: I7h1tSb4ULI5MwllqA6XnukwG49/MsxxV5gUFr7ZNwo=
Subject key identifier: F1:84:86:93:1E:02:1F:6D:DE:E1:C4:54:0D:0B:7D:3D:75:DC:04:D4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189717961DF46FD3B73FC4C27ACA9EE7410
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8YSGkx4CH23e4cRUDQt9PXXcBNQ.roa
Signing time: Thu 20 Jul 2023 04:05:27 +0000
ROA not before: Thu 20 Jul 2023 04:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:189:7178:8264/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:71:79:61:df:46:fd:3b:73:fc:4c:27:ac:a9:ee:74:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 04:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f18486931e021f6ddee1c4540d0b7d3d75dc04d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:97:7b:d5:fb:fd:ea:d2:1b:22:54:6a:52:68:
31:25:0d:cf:4e:c1:98:ea:ed:54:bf:d5:17:a2:a1:
a4:0d:d5:fa:92:4c:20:18:cb:a9:37:8c:c9:30:d1:
e0:ab:bc:b3:76:6a:21:bc:c4:b6:70:6b:de:b8:67:
67:5b:ac:73:58:2b:8b:68:62:d8:e8:e5:01:fd:68:
1f:d9:40:f9:7d:c2:68:f1:b5:70:15:39:0e:63:3a:
42:33:99:59:f5:2b:a4:c4:33:a1:cb:bb:1b:bf:0e:
cd:52:42:51:2d:93:c3:2a:63:c8:38:a9:df:2b:22:
c8:1d:72:64:c2:7e:65:14:e0:8b:b6:af:69:50:12:
b6:5d:86:29:2b:32:36:ed:c0:92:6e:9a:6a:e4:ac:
2e:2d:b9:25:ac:7b:24:9b:f7:21:10:0b:6f:06:82:
4f:3b:b4:49:15:66:63:95:8e:34:9d:ad:9a:87:9f:
2b:c4:39:cb:9a:3b:30:73:60:fb:d7:7d:73:b8:6c:
54:0e:8e:db:5e:b0:51:72:d1:4c:17:34:4e:0b:74:
bc:b9:9d:2f:b3:9f:cb:1d:df:48:1b:53:a4:58:ae:
ce:70:7b:15:12:a6:a4:0f:3b:11:5f:42:0d:66:6e:
87:26:3c:44:57:2a:6a:51:38:75:b9:fb:f8:93:c7:
91:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:84:86:93:1E:02:1F:6D:DE:E1:C4:54:0D:0B:7D:3D:75:DC:04:D4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8YSGkx4CH23e4cRUDQt9PXXcBNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:20:7e:fe:88:61:e7:d8:c7:a9:5b:34:be:a6:ff:4c:f8:4f:
12:aa:02:fa:c9:a0:65:73:cc:d6:f3:08:e3:f0:56:5b:9e:5b:
f8:ff:61:52:a3:e3:1a:0b:22:cb:c4:0f:6d:7d:0a:84:df:51:
7c:6d:ce:54:f5:d2:bf:31:e3:8d:c7:85:86:52:06:d9:4b:f1:
14:f0:a8:36:8e:ff:14:1b:b0:3e:4e:a4:36:a3:2d:28:f8:63:
5b:32:fd:77:fb:67:48:87:b9:b6:ff:18:16:e2:25:a7:0b:5a:
80:e4:95:68:fc:53:5f:85:00:a1:b6:00:92:cf:18:a2:33:98:
fe:93:69:fb:9d:e4:09:88:0d:30:de:b3:11:64:8c:8f:f7:36:
de:1f:02:02:2d:90:3c:f9:82:6c:fd:7d:a9:87:06:d7:97:0b:
14:03:e0:0c:0c:24:af:1f:d5:d3:56:73:a7:03:bb:4f:02:be:
63:9d:a4:94:b0:3c:11:9c:f8:82:31:be:8c:43:0f:3c:ac:90:
92:4d:bf:56:1a:d5:c3:39:5b:f9:49:f4:2f:ef:30:47:2d:07:
4a:95:cf:c0:00:a7:3d:41:ce:25:75:e8:62:81:8d:eb:ce:90:
cd:55:b3:04:58:de:3c:3f:30:60:d5:9c:74:d0:cf:ea:93:ba:
24:3a:67:b8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlxeWHfRv07c/xMJ6yp7nQQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzIwMDQwNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTg0ODY5MzFlMDIxZjZkZGVlMWM0NTQwZDBiN2QzZDc1ZGMwNGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZd71fv96tIbIlRqUmgxJQ3PTsGY
6u1Uv9UXoqGkDdX6kkwgGMupN4zJMNHgq7yzdmohvMS2cGveuGdnW6xzWCuLaGLY
6OUB/Wgf2UD5fcJo8bVwFTkOYzpCM5lZ9SukxDOhy7sbvw7NUkJRLZPDKmPIOKnf
KyLIHXJkwn5lFOCLtq9pUBK2XYYpKzI27cCSbppq5KwuLbklrHskm/chEAtvBoJP
O7RJFWZjlY40na2ah58rxDnLmjswc2D7131zuGxUDo7bXrBRctFMFzROC3S8uZ0v
s5/LHd9IG1OkWK7OcHsVEqakDzsRX0INZm6HJjxEVypqUTh1ufv4k8eR+QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPGEhpMeAh9t3uHEVA0LfT113ATUMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOFlTR2t4NENIMjNlNGNSVURRdDlQWFhjQk5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJYgfv6IYefYx6lbNL6m
/0z4TxKqAvrJoGVzzNbzCOPwVlueW/j/YVKj4xoLIsvED219CoTfUXxtzlT10r8x
443HhYZSBtlL8RTwqDaO/xQbsD5OpDajLSj4Y1sy/Xf7Z0iHubb/GBbiJacLWoDk
lWj8U1+FAKG2AJLPGKIzmP6Tafud5AmIDTDesxFkjI/3Nt4fAgItkDz5gmz9famH
BteXCxQD4AwMJK8f1dNWc6cDu08CvmOdpJSwPBGc+IIxvoxDDzyskJJNv1Ya1cM5
W/lJ9C/vMEctB0qVz8AApz1BziV16GKBjevOkM1VswRY3jw/MGDVnHTQz+qTuiQ6
Z7g=
-----END CERTIFICATE-----
Generated at Thu May 1 18:43:17 2025 by rpki-client