Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/928NIjHehIIbvnvd0seL4qpTtjQ.roa
File: 928NIjHehIIbvnvd0seL4qpTtjQ.roa (raw, json)
Hash identifier: 8eyFTEAMsHyieXJ3kj0irnohRscPdpFyZSjjZBPAWmw=
Subject key identifier: F7:6F:0D:22:31:DE:84:82:1B:BE:7B:DD:D2:C7:8B:E2:AA:53:B6:34
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 906AA2EA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/928NIjHehIIbvnvd0seL4qpTtjQ.roa
Signing time: Mon 27 Jun 2022 23:09:44 +0000
ROA not before: Mon 27 Jun 2022 23:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2422907626 (0x906aa2ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 27 23:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f76f0d2231de84821bbe7bddd2c78be2aa53b634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5d:cd:2d:ed:96:7e:28:92:e0:68:77:46:cb:
cd:c6:dc:f5:22:a5:14:f9:2c:5c:41:d6:55:d6:14:
4f:48:0e:e6:dc:28:9c:9e:79:f2:b3:24:4e:e6:3f:
2d:e8:6e:ed:f1:da:93:15:f2:56:0d:b3:d6:b8:3f:
7b:be:d1:87:50:0f:a2:9b:f9:20:3c:f9:b4:e2:e2:
90:73:1d:40:10:98:7b:70:a8:e8:28:ec:16:2b:e8:
a1:1a:41:23:dd:8f:cf:46:e4:bf:38:2e:b2:fd:82:
87:39:a4:64:75:06:b9:4c:d0:68:73:bb:28:7b:9b:
2d:72:94:36:2e:d3:48:ef:26:ab:a7:01:02:ca:bf:
62:bc:ff:9e:f1:97:da:55:60:9c:66:6e:94:c4:24:
ae:a7:c3:58:70:e0:17:aa:a8:00:a6:39:08:3d:c9:
d0:01:cf:b4:db:85:01:28:80:ed:c6:73:e2:84:4b:
63:10:65:75:eb:49:69:20:ef:5a:54:91:2c:8e:30:
a2:3f:b1:9c:3b:36:9f:9b:e5:f7:b0:82:cb:81:37:
45:96:8c:4f:2e:4d:a7:4e:26:71:86:c9:6c:99:d2:
fd:25:97:ed:b4:44:71:e2:35:87:78:45:cc:d7:11:
66:02:1b:b5:36:de:84:bd:3b:2c:cd:6f:51:f8:95:
0f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6F:0D:22:31:DE:84:82:1B:BE:7B:DD:D2:C7:8B:E2:AA:53:B6:34
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/928NIjHehIIbvnvd0seL4qpTtjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:8e:b5:56:79:80:3a:9a:a4:b4:ce:a2:03:66:51:db:a1:86:
30:bd:f8:e9:42:06:64:19:44:c4:49:b2:a2:ff:e9:f4:39:c3:
d4:4b:9c:ed:06:df:e6:95:47:a4:5b:3f:55:63:36:ca:9d:06:
91:e6:ab:37:88:60:3e:85:b0:34:d5:08:c1:12:4a:08:a4:b2:
8f:cf:e8:58:e9:37:e2:e4:92:e6:e0:40:7f:07:dd:44:c9:4d:
9b:dc:ea:51:4d:d7:06:d5:99:59:1c:0a:36:07:70:44:16:61:
21:1d:0b:38:71:12:ea:4b:3c:2f:1c:cb:8c:f6:d9:90:c9:d5:
66:01:1c:ae:83:b5:cb:db:c2:e5:b7:c3:a4:9f:ca:0c:d3:09:
5e:31:03:cc:ab:a6:9e:e9:97:ad:ac:c0:c5:f3:9c:76:c4:ce:
5b:81:80:f2:44:95:64:fe:f2:81:9b:ab:62:65:5c:b9:d8:52:
7d:c8:0a:da:1d:5e:af:5c:b6:94:de:25:41:f3:a6:15:65:ae:
4a:de:be:11:8c:3f:20:30:99:44:8f:b4:74:1c:1e:e5:bc:90:
25:65:1d:98:3d:7b:e2:33:89:38:e3:3c:08:26:02:a9:2c:98:
e1:39:fc:22:c7:90:13:5a:47:09:8b:c5:42:6e:db:84:8b:81:
d9:38:b4:6b
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAJBqouowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MjcyMzA5NDRaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGY3NmYwZDIyMzFk
ZTg0ODIxYmJlN2JkZGQyYzc4YmUyYWE1M2I2MzQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCBXc0t7ZZ+KJLgaHdGy83G3PUipRT5LFxB1lXWFE9IDubc
KJyeefKzJE7mPy3obu3x2pMV8lYNs9a4P3u+0YdQD6Kb+SA8+bTi4pBzHUAQmHtw
qOgo7BYr6KEaQSPdj89G5L84LrL9goc5pGR1BrlM0Ghzuyh7my1ylDYu00jvJqun
AQLKv2K8/57xl9pVYJxmbpTEJK6nw1hw4BeqqACmOQg9ydABz7TbhQEogO3Gc+KE
S2MQZXXrSWkg71pUkSyOMKI/sZw7Np+b5fewgsuBN0WWjE8uTadOJnGGyWyZ0v0l
l+20RHHiNYd4RczXEWYCG7U23oS9OyzNb1H4lQ8BAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQU928NIjHehIIbvnvd0seL4qpTtjQwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS85MjhOSWpIZWhJSWJ2bnZkMHNlTDRxcFR0alEucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAmo61VnmAOpqktM6iA2ZR26GGML346UIGZBlE
xEmyov/p9DnD1Euc7Qbf5pVHpFs/VWM2yp0GkearN4hgPoWwNNUIwRJKCKSyj8/o
WOk34uSS5uBAfwfdRMlNm9zqUU3XBtWZWRwKNgdwRBZhIR0LOHES6ks8LxzLjPbZ
kMnVZgEcroO1y9vC5bfDpJ/KDNMJXjEDzKumnumXrazAxfOcdsTOW4GA8kSVZP7y
gZurYmVcudhSfcgK2h1er1y2lN4lQfOmFWWuSt6+EYw/IDCZRI+0dBwe5byQJWUd
mD174jOJOOM8CCYCqSyY4Tn8IseQE1pHCYvFQm7bhIuB2Ti0aw==
-----END CERTIFICATE-----
Generated at Sun May 4 22:14:23 2025 by rpki-client