Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9YUsDHAXvjrl9qlKw5T69E-xmjw.roa
File: 9YUsDHAXvjrl9qlKw5T69E-xmjw.roa (raw, json)
Hash identifier: coWfMiqV5LOtOXfqVEvuBrXaPaqbpVD2j9HlmvUxaJs=
Subject key identifier: F5:85:2C:0C:70:17:BE:3A:E5:F6:A9:4A:C3:94:FA:F4:4F:B1:9A:3C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01844D4E1703FA498A8BCE279C9D12001209
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9YUsDHAXvjrl9qlKw5T69E-xmjw.roa
Signing time: Sun 06 Nov 2022 14:17:54 +0000
ROA not before: Sun 06 Nov 2022 14:17:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:4d:4e:17:03:fa:49:8a:8b:ce:27:9c:9d:12:00:12:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 6 14:17:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5852c0c7017be3ae5f6a94ac394faf44fb19a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1e:f2:56:4d:7a:7e:3c:e2:aa:55:46:c1:e9:
e7:21:5d:66:51:a4:06:3d:4d:a6:eb:09:f2:40:6a:
84:20:34:e1:5c:17:22:b4:49:09:32:35:22:0b:a0:
b9:f8:2d:db:8f:fe:e1:69:d2:85:d0:50:ae:ca:61:
3a:4d:cf:fd:1f:dd:b9:57:a9:3f:3b:3e:d2:e3:f0:
99:a9:18:b1:0a:60:cc:b3:c5:3c:14:36:11:3d:60:
75:a9:bc:d8:9f:c8:6a:36:75:a3:29:b3:24:10:3e:
c4:89:b1:2f:08:16:ac:f7:b6:28:37:a7:9d:7c:90:
31:7d:29:35:df:ae:ad:fc:9e:da:45:b4:90:b3:d5:
8e:ec:bf:07:2e:0b:99:da:f2:b0:d4:da:84:84:59:
b9:37:b3:c0:1e:5e:5c:19:8e:b0:09:b2:7e:35:12:
53:b9:a5:4f:00:02:6e:d3:c7:a1:fd:b2:10:0f:1a:
d6:fa:32:f4:e6:d6:bc:56:e2:60:33:1c:85:be:f9:
f6:6d:14:4b:41:d8:de:84:c9:2d:d6:b0:04:bc:b1:
32:9e:72:8c:9b:e0:1e:2b:39:64:cb:27:cb:e0:68:
d6:99:ff:29:c0:cf:da:b4:04:43:48:7c:ae:ca:12:
16:64:6b:a8:5b:38:86:61:09:27:f2:9a:46:41:28:
ac:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:85:2C:0C:70:17:BE:3A:E5:F6:A9:4A:C3:94:FA:F4:4F:B1:9A:3C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9YUsDHAXvjrl9qlKw5T69E-xmjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:ba:1f:1e:d8:b0:5d:b9:2c:17:18:56:55:f5:d1:ca:e2:16:
8a:32:92:39:d6:79:f1:15:58:45:b8:8e:04:23:83:9b:3b:71:
59:21:5f:26:d7:69:cd:fd:6a:04:dd:b5:1e:24:d4:7a:ad:e7:
41:bf:c9:30:89:cf:07:06:b5:22:7a:30:18:17:0e:e7:37:2f:
c4:b8:d5:e2:0d:cb:d1:da:73:be:e8:63:7f:81:65:3f:71:1b:
54:9b:c1:ae:59:27:99:ae:d2:5e:14:cb:f5:79:5f:b7:e2:53:
53:3d:cd:e3:bb:9a:74:8f:02:7a:a0:70:63:f2:b4:32:9b:af:
6a:5c:0e:1d:9c:8d:6e:0f:27:bd:99:a0:32:72:29:59:90:bb:
26:bc:9d:54:d5:5c:cc:cd:3b:e0:76:9f:9e:b1:5f:fb:92:50:
25:a6:b8:76:0a:4c:af:3a:18:fd:72:33:57:d5:2b:51:76:4b:
6e:29:8d:2a:33:e0:8e:24:ef:e8:10:7a:e6:5a:fc:9f:86:d9:
79:0b:5b:b6:c2:55:ab:5f:f1:22:b5:f8:1d:57:d1:6a:7c:7e:
71:3d:9a:ba:20:4b:8f:de:4c:f7:90:95:db:14:68:cf:b3:c6:
59:07:fc:47:e8:70:c5:76:86:da:d9:1c:07:d3:69:6d:2d:ca:
c5:cf:12:d5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYRNThcD+kmKi84nnJ0SABIJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTA2MTQxNzU0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTg1MmMwYzcwMTdiZTNhZTVmNmE5NGFjMzk0ZmFmNDRmYjE5YTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB7yVk16fjziqlVGwennIV1mUaQG
PU2m6wnyQGqEIDThXBcitEkJMjUiC6C5+C3bj/7hadKF0FCuymE6Tc/9H925V6k/
Oz7S4/CZqRixCmDMs8U8FDYRPWB1qbzYn8hqNnWjKbMkED7EibEvCBas97YoN6ed
fJAxfSk1366t/J7aRbSQs9WO7L8HLguZ2vKw1NqEhFm5N7PAHl5cGY6wCbJ+NRJT
uaVPAAJu08eh/bIQDxrW+jL05ta8VuJgMxyFvvn2bRRLQdjehMkt1rAEvLEynnKM
m+AeKzlkyyfL4GjWmf8pwM/atARDSHyuyhIWZGuoWziGYQkn8ppGQSis0QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPWFLAxwF7465fapSsOU+vRPsZo8MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOVlVc0RIQVh2anJsOXFsS3c1VDY5RS14bWp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF66Hx7YsF25LBcYVlX1
0criFooykjnWefEVWEW4jgQjg5s7cVkhXybXac39agTdtR4k1Hqt50G/yTCJzwcG
tSJ6MBgXDuc3L8S41eINy9Hac77oY3+BZT9xG1Sbwa5ZJ5mu0l4Uy/V5X7fiU1M9
zeO7mnSPAnqgcGPytDKbr2pcDh2cjW4PJ72ZoDJyKVmQuya8nVTVXMzNO+B2n56x
X/uSUCWmuHYKTK86GP1yM1fVK1F2S24pjSoz4I4k7+gQeuZa/J+G2XkLW7bCVatf
8SK1+B1X0Wp8fnE9mrogS4/eTPeQldsUaM+zxlkH/EfocMV2htrZHAfTaW0tysXP
EtU=
-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:15 2025 by rpki-client