Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AjOG2_byuH3cpPjxu9OeDMGbFM4.roa
File: AjOG2_byuH3cpPjxu9OeDMGbFM4.roa (raw, json)
Hash identifier: OVnTfuwJn1mZP6rmg7V8O5TpUcWlbbm5hWDDwupxkV4=
Subject key identifier: 02:33:86:DB:F6:F2:B8:7D:DC:A4:F8:F1:BB:D3:9E:0C:C1:9B:14:CE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018259EFCA048FDD1DA5E00CA14A8F062618
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AjOG2_byuH3cpPjxu9OeDMGbFM4.roa
Signing time: Mon 01 Aug 2022 15:04:23 +0000
ROA not before: Mon 01 Aug 2022 15:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:59ef:aacc/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:59:ef:ca:04:8f:dd:1d:a5:e0:0c:a1:4a:8f:06:26:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 15:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=023386dbf6f2b87ddca4f8f1bbd39e0cc19b14ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:97:c1:3d:d7:55:a9:30:6a:ee:92:bb:9b:c8:
22:b0:d1:a4:8b:f6:25:ab:0e:f0:f4:63:8d:6c:51:
3e:e3:03:b7:45:ad:1e:2c:50:21:d2:67:a3:e3:c2:
39:b2:2c:3f:95:63:17:67:16:ab:5c:c1:ee:87:21:
0b:df:db:d6:09:27:77:88:e6:4b:b7:49:ea:15:64:
8c:2a:2f:12:09:85:18:10:1f:95:c2:a6:bc:d3:b8:
85:6f:44:98:57:88:53:1d:a8:44:00:fe:c0:17:4a:
72:a4:3e:d3:5e:d9:2a:99:b1:54:49:40:13:b0:45:
35:f4:88:0e:50:af:04:d5:98:be:9c:87:14:b8:bb:
32:33:09:28:95:bf:b1:90:d0:06:0f:95:50:de:c2:
d3:35:86:b6:0f:4f:6f:04:51:48:90:a7:78:23:4e:
21:ac:11:12:50:f4:56:87:36:be:f6:8d:3a:34:d5:
b7:c0:bd:c5:b7:e1:5f:ce:b2:18:a5:e1:08:5e:d5:
d7:b8:0f:3d:a3:0c:ba:92:9a:29:19:fb:7c:72:63:
22:2e:f3:c6:86:c5:82:00:8c:e8:7f:ad:6c:82:e0:
0a:74:73:5d:78:7c:dc:e0:05:97:a7:ef:70:c3:d3:
47:07:b2:7e:42:26:51:f8:bd:a4:45:b8:2f:27:c9:
41:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:33:86:DB:F6:F2:B8:7D:DC:A4:F8:F1:BB:D3:9E:0C:C1:9B:14:CE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AjOG2_byuH3cpPjxu9OeDMGbFM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:84:37:fe:99:14:a0:ba:e0:ab:8d:00:f3:7b:56:5d:ca:9a:
73:87:9c:99:14:b2:70:08:f6:1f:ee:3f:17:1a:e1:36:8a:2a:
2a:ba:d7:95:9a:1d:df:d1:1f:60:09:32:51:54:40:77:23:a0:
de:6e:4c:c9:97:1f:64:75:b4:bd:12:f6:8c:7b:bb:41:69:c7:
75:e7:fc:a2:82:92:51:13:0a:2a:76:10:b5:48:03:2f:e0:5e:
25:cd:13:d8:b2:70:59:1d:85:9d:de:29:fb:ac:4b:1c:7c:3a:
9b:ca:2c:ce:0f:f7:0b:5a:fb:c8:12:39:50:3d:db:24:de:37:
66:ef:18:b3:ed:91:71:8a:96:a5:58:1d:3f:e2:12:52:25:c3:
c4:e6:fc:7c:03:ac:25:89:a6:92:90:e8:e4:bf:4b:87:fa:dd:
c2:89:05:82:97:85:30:3b:08:d9:d9:b5:58:e2:bd:c9:41:11:
16:a1:30:6e:a4:33:4c:93:bf:61:1a:c7:30:23:db:67:c0:77:
8d:52:36:52:54:02:04:fc:a5:b4:01:70:46:1a:ce:4a:a0:a5:
cc:e1:67:ae:5e:36:a6:58:49:fe:66:37:23:78:04:46:a4:71:
65:74:d4:6d:4b:28:1b:ec:26:e0:07:80:61:8d:6e:7f:c0:5c:
97:de:f1:b4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYJZ78oEj90dpeAMoUqPBiYYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODAxMTUwNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjMzODZkYmY2ZjJiODdkZGNhNGY4ZjFiYmQzOWUwY2MxOWIxNGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpfBPddVqTBq7pK7m8gisNGki/Yl
qw7w9GONbFE+4wO3Ra0eLFAh0mej48I5siw/lWMXZxarXMHuhyEL39vWCSd3iOZL
t0nqFWSMKi8SCYUYEB+Vwqa807iFb0SYV4hTHahEAP7AF0pypD7TXtkqmbFUSUAT
sEU19IgOUK8E1Zi+nIcUuLsyMwkolb+xkNAGD5VQ3sLTNYa2D09vBFFIkKd4I04h
rBESUPRWhza+9o06NNW3wL3Ft+FfzrIYpeEIXtXXuA89owy6kpopGft8cmMiLvPG
hsWCAIzof61sguAKdHNdeHzc4AWXp+9ww9NHB7J+QiZR+L2kRbgvJ8lBmwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAIzhtv28rh93KT48bvTngzBmxTOMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQWpPRzJfYnl1SDNjcFBqeHU5T2VETUdiRk00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADeEN/6ZFKC64KuNAPN7
Vl3KmnOHnJkUsnAI9h/uPxca4TaKKiq615WaHd/RH2AJMlFUQHcjoN5uTMmXH2R1
tL0S9ox7u0Fpx3Xn/KKCklETCip2ELVIAy/gXiXNE9iycFkdhZ3eKfusSxx8OpvK
LM4P9wta+8gSOVA92yTeN2bvGLPtkXGKlqVYHT/iElIlw8Tm/HwDrCWJppKQ6OS/
S4f63cKJBYKXhTA7CNnZtVjivclBERahMG6kM0yTv2EaxzAj22fAd41SNlJUAgT8
pbQBcEYazkqgpczhZ65eNqZYSf5mNyN4BEakcWV01G1LKBvsJuAHgGGNbn/AXJfe
8bQ=
-----END CERTIFICATE-----
Generated at Thu May 1 01:48:02 2025 by rpki-client