Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Afo8nF--n72gU1a6FicfmLPI8Vs.roa
File: Afo8nF--n72gU1a6FicfmLPI8Vs.roa (raw, json)
Hash identifier: NfDj5UP0uoJ3skMZ+gGzL/fHOrAUzfv91AhYUXL5FVk=
Subject key identifier: 01:FA:3C:9C:5F:BE:9F:BD:A0:53:56:BA:16:27:1F:98:B3:C8:F1:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C7C49EAF22467F3DF2BA41D47BFE6D5B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Afo8nF--n72gU1a6FicfmLPI8Vs.roa
Signing time: Sat 05 Aug 2023 22:14:58 +0000
ROA not before: Sat 05 Aug 2023 22:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c7:c4:9e:af:22:46:7f:3d:f2:ba:41:d4:7b:fe:6d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 22:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01fa3c9c5fbe9fbda05356ba16271f98b3c8f15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:39:2e:59:1d:00:80:16:84:05:5d:93:25:5c:
a0:38:77:67:7e:05:1f:57:36:d7:6f:c0:28:98:8f:
75:c3:8f:ea:97:52:32:5b:d5:22:36:f9:fd:f9:93:
3c:02:d0:d9:24:59:d4:d9:c4:e7:00:b3:49:29:a7:
8e:0a:42:a3:02:53:10:3a:1c:28:42:ef:d7:e1:2b:
da:1d:f4:8f:ea:87:72:03:77:be:db:94:0a:83:59:
99:f2:06:15:dd:11:34:d0:fc:5c:e5:9a:5e:0d:81:
80:5b:47:98:7f:f4:ab:5d:8f:47:24:bd:19:ce:ea:
cf:cd:ad:ad:98:cc:3a:60:9d:54:e8:2c:16:8a:62:
28:4f:b3:2d:68:66:f8:e2:91:6a:5a:6c:43:49:01:
7f:ab:20:1b:8a:14:d1:75:3a:84:ff:e1:44:e2:3f:
b2:6b:4a:6d:83:15:7f:ee:d3:4c:5a:e7:66:1f:a8:
af:b1:32:2e:55:27:0e:f0:eb:48:3e:e7:62:97:05:
f6:b0:cd:52:f3:e7:a2:3e:c9:63:a9:31:28:4d:d5:
ce:dc:48:d9:d1:b9:0a:dc:fe:4b:f6:f5:ca:33:48:
3e:0f:b3:4c:4b:46:55:97:b3:58:30:e7:39:d2:d4:
06:b1:8e:90:01:c8:c4:57:7b:99:4d:21:06:2d:53:
97:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FA:3C:9C:5F:BE:9F:BD:A0:53:56:BA:16:27:1F:98:B3:C8:F1:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Afo8nF--n72gU1a6FicfmLPI8Vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:22:94:28:73:db:f8:89:df:21:9f:38:87:f9:56:89:1f:fd:
59:eb:f6:fc:2c:70:11:e1:e1:72:3e:ac:05:6a:1f:83:3b:6c:
72:bf:6e:5b:04:be:1b:13:f9:c1:13:41:38:50:4b:ff:9f:9c:
5f:52:89:45:ac:36:60:ab:fc:43:18:d2:8c:8a:9e:f8:f1:53:
79:24:c9:7a:76:d0:27:fc:28:54:13:c1:fa:8b:9c:35:11:d0:
9d:95:b1:3d:6b:cd:06:60:76:3a:fe:65:d3:35:d9:ac:ca:aa:
cf:39:3c:44:f6:79:04:10:4d:b2:f4:b4:79:85:b1:b0:27:c3:
fb:20:64:34:89:22:45:33:af:ee:4d:06:c3:d1:0b:dc:9f:4f:
0c:ff:38:ea:47:88:47:37:03:43:78:15:3c:8f:a9:af:7c:51:
1b:90:7d:a4:09:86:cb:e5:72:7c:fc:75:89:f0:19:cd:36:58:
6b:f6:50:f7:2e:c8:85:06:02:d7:cc:2f:7f:17:54:9d:e5:e2:
42:09:7b:9e:1b:84:88:65:6c:f7:04:09:4f:6b:01:92:9f:60:
b9:7f:16:c5:f4:56:2a:c4:96:f4:6f:13:79:88:2c:00:4d:e9:
e3:71:7c:6e:06:f7:44:32:ed:47:88:3a:c4:14:a1:3d:db:7b:
0f:f7:d0:38
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnHxJ6vIkZ/PfK6QdR7/m1bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODA1MjIxNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWZhM2M5YzVmYmU5ZmJkYTA1MzU2YmExNjI3MWY5OGIzYzhmMTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTkuWR0AgBaEBV2TJVygOHdnfgUf
VzbXb8AomI91w4/ql1IyW9UiNvn9+ZM8AtDZJFnU2cTnALNJKaeOCkKjAlMQOhwo
Qu/X4SvaHfSP6odyA3e+25QKg1mZ8gYV3RE00Pxc5ZpeDYGAW0eYf/SrXY9HJL0Z
zurPza2tmMw6YJ1U6CwWimIoT7MtaGb44pFqWmxDSQF/qyAbihTRdTqE/+FE4j+y
a0ptgxV/7tNMWudmH6ivsTIuVScO8OtIPudilwX2sM1S8+eiPsljqTEoTdXO3EjZ
0bkK3P5L9vXKM0g+D7NMS0ZVl7NYMOc50tQGsY6QAcjEV3uZTSEGLVOXAQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAH6PJxfvp+9oFNWuhYnH5izyPFbMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQWZvOG5GLS1uNzJnVTFhNkZpY2ZtTFBJOFZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADQilChz2/iJ3yGfOIf5
Vokf/Vnr9vwscBHh4XI+rAVqH4M7bHK/blsEvhsT+cETQThQS/+fnF9SiUWsNmCr
/EMY0oyKnvjxU3kkyXp20Cf8KFQTwfqLnDUR0J2VsT1rzQZgdjr+ZdM12azKqs85
PET2eQQQTbL0tHmFsbAnw/sgZDSJIkUzr+5NBsPRC9yfTwz/OOpHiEc3A0N4FTyP
qa98URuQfaQJhsvlcnz8dYnwGc02WGv2UPcuyIUGAtfML38XVJ3l4kIJe54bhIhl
bPcECU9rAZKfYLl/FsX0VirElvRvE3mILABN6eNxfG4G90Qy7UeIOsQUoT3bew/3
0Dg=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:22 2025 by rpki-client