Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ANvHNq7ViAgscI8SuiTe1D2z6FE.roa
File: ANvHNq7ViAgscI8SuiTe1D2z6FE.roa (raw, json)
Hash identifier: PStV8ZM8O2Dk1A1MefJ35df59jEE2AWePZ0MA8veCek=
Subject key identifier: 00:DB:C7:36:AE:D5:88:08:2C:70:8F:12:BA:24:DE:D4:3D:B3:E8:51
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01870AF5B5475E3448AF1D29D86A33C57854
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ANvHNq7ViAgscI8SuiTe1D2z6FE.roa
Signing time: Wed 22 Mar 2023 20:14:47 +0000
ROA not before: Wed 22 Mar 2023 20:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0a:f5:b5:47:5e:34:48:af:1d:29:d8:6a:33:c5:78:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 22 20:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00dbc736aed588082c708f12ba24ded43db3e851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1f:67:c5:40:78:91:9f:df:cd:a5:f0:59:6b:
d4:55:fa:9a:f4:e4:c6:3c:94:f7:3d:62:17:f7:c8:
c4:c4:b6:01:b0:b8:ea:16:e3:30:92:44:35:7c:b7:
a8:30:55:6c:41:4f:50:e9:9c:ff:06:54:3b:d6:84:
e2:c4:6b:e6:f2:f5:4d:62:53:fb:4b:81:fa:2c:a7:
70:46:cc:ce:f6:52:2b:b1:69:48:98:e7:cc:7c:e7:
0c:cf:6b:96:a2:dc:0e:df:cf:e5:38:8e:10:4a:81:
97:36:b4:55:25:85:6e:43:76:b7:9e:09:92:bc:42:
da:b0:c7:93:81:58:d8:dd:e6:fd:ba:10:37:d3:c6:
34:d0:6a:a3:3f:80:33:95:4f:5a:83:2a:71:f7:45:
1b:c9:aa:b8:44:9a:1e:8e:f3:8a:0e:14:17:9f:4d:
d8:6c:ea:ed:80:fb:91:c8:52:15:c5:da:6b:6b:f6:
30:aa:80:78:be:06:95:d2:55:7f:79:5b:04:72:93:
85:32:74:73:8b:63:b8:eb:93:63:53:6c:d8:a6:d4:
ea:ae:3b:6f:41:4b:a4:cf:a5:69:af:dc:da:1b:e1:
fc:d2:46:0b:fa:b4:33:da:1f:54:6c:10:b6:8a:2e:
d5:30:1e:ec:74:f5:64:dd:de:f5:59:db:0e:ed:d4:
06:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DB:C7:36:AE:D5:88:08:2C:70:8F:12:BA:24:DE:D4:3D:B3:E8:51
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ANvHNq7ViAgscI8SuiTe1D2z6FE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:ce:ae:ac:93:57:97:20:9d:ce:91:a1:a5:67:3a:68:ab:1f:
0e:df:d7:0e:eb:35:36:e9:6a:b3:54:37:76:bb:32:90:ae:b7:
33:55:7a:fd:cf:84:de:6c:ab:b9:ed:2a:63:9f:c0:d0:79:3a:
0e:f5:89:b6:ce:12:61:89:7d:38:eb:b7:b1:5c:da:1d:6d:74:
78:1d:fd:5d:c7:45:30:b8:b0:17:3f:88:1d:f9:27:a8:30:6f:
21:bd:a5:94:08:6e:f5:e8:f5:53:8c:39:2d:cc:fa:e3:5e:e8:
64:6c:ba:62:fb:b7:76:b1:92:52:73:3e:8c:b6:d3:5d:46:2e:
ef:d9:29:88:9a:2e:54:43:dc:e7:63:01:93:cd:00:2a:04:68:
eb:ca:ff:05:3f:17:4a:4e:75:5e:f9:4d:4b:3d:35:03:a9:43:
ca:3a:a7:d0:e9:ec:2f:41:06:b5:a3:95:38:4d:0d:92:78:57:
a7:26:91:14:8f:92:a5:1d:be:6b:e0:c1:51:4c:f8:43:78:0b:
6b:1b:0b:0f:43:e6:07:a5:e2:61:df:5c:14:2f:a9:ff:e9:b7:
fb:98:77:b0:89:10:58:bf:fd:76:c5:15:6c:5d:1c:51:82:aa:
ba:71:99:4c:6a:a5:67:b7:e1:a4:e5:2e:90:ce:8f:25:6e:c4:
16:2d:65:91
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYcK9bVHXjRIrx0p2GozxXhUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzIyMjAxNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGRiYzczNmFlZDU4ODA4MmM3MDhmMTJiYTI0ZGVkNDNkYjNlODUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgh9nxUB4kZ/fzaXwWWvUVfqa9OTG
PJT3PWIX98jExLYBsLjqFuMwkkQ1fLeoMFVsQU9Q6Zz/BlQ71oTixGvm8vVNYlP7
S4H6LKdwRszO9lIrsWlImOfMfOcMz2uWotwO38/lOI4QSoGXNrRVJYVuQ3a3ngmS
vELasMeTgVjY3eb9uhA308Y00GqjP4AzlU9agypx90Ubyaq4RJoejvOKDhQXn03Y
bOrtgPuRyFIVxdpra/YwqoB4vgaV0lV/eVsEcpOFMnRzi2O465NjU2zYptTqrjtv
QUukz6Vpr9zaG+H80kYL+rQz2h9UbBC2ii7VMB7sdPVk3d71WdsO7dQGSQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFADbxzau1YgILHCPErok3tQ9s+hRMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQU52SE5xN1ZpQWdzY0k4U3VpVGUxRDJ6NkZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB3OrqyTV5cgnc6RoaVn
OmirHw7f1w7rNTbparNUN3a7MpCutzNVev3PhN5sq7ntKmOfwNB5Og71ibbOEmGJ
fTjrt7Fc2h1tdHgd/V3HRTC4sBc/iB35J6gwbyG9pZQIbvXo9VOMOS3M+uNe6GRs
umL7t3axklJzPoy2011GLu/ZKYiaLlRD3OdjAZPNACoEaOvK/wU/F0pOdV75TUs9
NQOpQ8o6p9Dp7C9BBrWjlThNDZJ4V6cmkRSPkqUdvmvgwVFM+EN4C2sbCw9D5gel
4mHfXBQvqf/pt/uYd7CJEFi//XbFFWxdHFGCqrpxmUxqpWe34aTlLpDOjyVuxBYt
ZZE=
-----END CERTIFICATE-----
Generated at Fri May 2 12:39:21 2025 by rpki-client