Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8q-aI-4JMHGxksXR0EUs6ykymFY.roa
File: 8q-aI-4JMHGxksXR0EUs6ykymFY.roa (raw, json)
Hash identifier: dAw2rTdyPj37GJsIzssThm9NCndkX6dj6D/vXr6xlxM=
Subject key identifier: F2:AF:9A:23:EE:09:30:71:B1:92:C5:D1:D0:45:2C:EB:29:32:98:56
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 86C3BE0A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8q-aI-4JMHGxksXR0EUs6ykymFY.roa
Signing time: Tue 24 May 2022 04:12:30 +0000
ROA not before: Tue 24 May 2022 04:12:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:ddb5:bc5/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:e0ec:efe1/128 maxlen: 128
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2260975114 (0x86c3be0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 24 04:12:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2af9a23ee093071b192c5d1d0452ceb29329856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f3:84:3c:80:a3:7e:6e:6d:32:af:98:38:ab:
6c:d5:94:48:1d:c0:17:95:8f:1d:dc:25:6f:bd:f4:
2f:76:a1:4e:86:37:95:8d:75:d1:5c:86:bc:51:76:
6f:88:df:38:15:2f:3f:b5:07:07:ce:92:88:17:b3:
7a:4f:93:d4:a5:bb:df:39:36:e6:2e:d5:89:3a:01:
1a:41:90:8d:1e:72:c9:26:ce:fa:d7:70:2f:11:f8:
c0:a2:9f:cb:3d:a3:bd:8d:4c:3e:dd:46:27:44:dc:
09:ce:40:70:cb:8d:d0:4f:62:f1:71:36:e8:69:68:
ad:25:a2:8d:79:87:b9:c2:a1:fa:58:9d:1c:f6:bc:
69:d2:d0:1f:da:04:92:9a:86:db:1b:44:42:d7:5b:
9e:84:4f:9f:06:bb:30:f6:08:9b:12:09:47:2b:8a:
f7:e2:92:69:c5:91:4e:00:71:38:e2:af:0b:e6:d2:
11:99:7b:03:6a:b4:df:37:f8:51:ed:63:35:8f:87:
7a:90:34:1c:e1:a3:2f:d3:07:f0:20:e1:9a:c2:cc:
b8:44:a0:3f:9d:e5:9d:5b:9c:1f:05:83:ce:22:c6:
2a:62:d3:9c:e3:4d:94:d5:14:19:26:9a:d9:36:f3:
f6:55:a7:9b:cb:71:d1:fb:7b:6f:45:37:1a:c5:5d:
d5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AF:9A:23:EE:09:30:71:B1:92:C5:D1:D0:45:2C:EB:29:32:98:56
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8q-aI-4JMHGxksXR0EUs6ykymFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:a3:b7:8e:d0:30:78:66:25:d8:1b:e1:d3:98:07:68:92:28:
c5:31:6f:ce:95:4c:6e:83:27:e6:07:5a:ba:0f:cc:24:dd:43:
de:7e:fe:d0:ec:f0:da:e3:26:e5:f6:74:a7:ee:b7:11:b8:74:
f9:d7:a0:20:c5:90:b1:38:a4:0e:4d:83:dd:3b:2b:af:9d:38:
a3:3f:5d:77:ea:41:34:10:9f:77:69:1d:74:62:35:f1:38:e7:
a5:59:9c:da:81:27:5e:dc:6f:19:49:22:af:43:03:d9:7b:df:
de:de:9a:fc:cb:19:24:fb:56:02:37:27:c8:8c:24:19:4a:24:
c1:be:85:52:d9:b0:2f:77:25:fa:e6:ef:f9:44:77:49:4f:13:
8d:2e:1a:c1:e6:71:26:4e:a0:18:05:3d:cc:8b:24:e6:a0:42:
62:fb:3d:4c:0f:26:e5:0e:1a:d8:56:af:26:3c:ca:f0:8f:76:
02:c7:e6:9a:38:02:3d:ca:17:e3:5b:83:96:58:5a:9d:46:f7:
54:66:37:e6:97:e3:0e:9e:d6:a4:6c:3d:16:dc:30:fb:46:eb:
7d:f7:cc:54:47:42:94:c6:58:0b:4a:f3:4e:57:62:94:60:f5:
5d:d9:d8:59:7d:bb:c3:f0:df:5a:9e:60:1a:81:9b:88:85:1d:
c2:d7:9f:ae
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIbDvgowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MjQwNDEyMzBaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGYyYWY5YTIzZWUw
OTMwNzFiMTkyYzVkMWQwNDUyY2ViMjkzMjk4NTYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCQ84Q8gKN+bm0yr5g4q2zVlEgdwBeVjx3cJW+99C92oU6G
N5WNddFchrxRdm+I3zgVLz+1BwfOkogXs3pPk9Slu985NuYu1Yk6ARpBkI0ecskm
zvrXcC8R+MCin8s9o72NTD7dRidE3AnOQHDLjdBPYvFxNuhpaK0loo15h7nCofpY
nRz2vGnS0B/aBJKahtsbRELXW56ET58GuzD2CJsSCUcrivfikmnFkU4AcTjirwvm
0hGZewNqtN83+FHtYzWPh3qQNBzhoy/TB/Ag4ZrCzLhEoD+d5Z1bnB8Fg84ixipi
05zjTZTVFBkmmtk28/ZVp5vLcdH7e29FNxrFXdWJAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQU8q+aI+4JMHGxksXR0EUs6ykymFYwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS84cS1hSS00Sk1IR3hrc1hSMEVVczZ5a3ltRlkucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAUqO3jtAweGYl2Bvh05gHaJIoxTFvzpVMboMn
5gdaug/MJN1D3n7+0Ozw2uMm5fZ0p+63Ebh0+degIMWQsTikDk2D3Tsrr504oz9d
d+pBNBCfd2kddGI18TjnpVmc2oEnXtxvGUkir0MD2Xvf3t6a/MsZJPtWAjcnyIwk
GUokwb6FUtmwL3cl+ubv+UR3SU8TjS4aweZxJk6gGAU9zIsk5qBCYvs9TA8m5Q4a
2FavJjzK8I92AsfmmjgCPcoX41uDllhanUb3VGY35pfjDp7WpGw9Ftww+0brfffM
VEdClMZYC0rzTldilGD1XdnYWX27w/DfWp5gGoGbiIUdwtefrg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:59 2025 by rpki-client