Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B7WFO5MO8u3EPoCNTiLJR-78pvM.roa
File: B7WFO5MO8u3EPoCNTiLJR-78pvM.roa (raw, json)
Hash identifier: T7UaclCrIx1jSEMEAKRI0Dxaa+RbwNNmKSOe8d8XTaE=
Subject key identifier: 07:B5:85:3B:93:0E:F2:ED:C4:3E:80:8D:4E:22:C9:47:EE:FC:A6:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185BBF87D2F1962814E6C030A63CCEC9C8E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B7WFO5MO8u3EPoCNTiLJR-78pvM.roa
Signing time: Mon 16 Jan 2023 19:05:02 +0000
ROA not before: Mon 16 Jan 2023 19:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:bbf7:c46d/128 maxlen: 128
2001:67c:64:ffff:0:185:ba40:6692/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bb:f8:7d:2f:19:62:81:4e:6c:03:0a:63:cc:ec:9c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 16 19:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07b5853b930ef2edc43e808d4e22c947eefca6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:87:b9:84:8d:47:ef:7b:1b:1f:1d:4f:86:7b:
2d:85:ad:04:2e:7b:2a:ff:95:11:eb:a2:37:01:b7:
2b:d7:37:8c:a2:23:cb:5b:51:c8:51:38:63:08:71:
76:6d:84:1f:85:85:10:f5:ec:23:65:7c:e0:56:4c:
e4:fb:80:87:d2:77:9f:62:13:1a:83:74:bd:f9:31:
24:b0:06:f5:1c:a6:8a:04:66:4b:9c:85:7d:2e:eb:
29:19:8a:d9:9a:62:51:41:5e:6a:26:b9:e1:c4:8b:
1a:9a:11:07:0b:b6:bb:31:54:bd:40:be:dc:7a:a9:
52:af:6e:df:d5:5e:d2:07:82:43:a2:3a:e6:2c:bb:
29:83:0f:e2:ef:3e:92:3f:48:35:5d:21:4c:ee:5a:
14:13:cd:74:8b:9c:5b:99:6b:71:fe:25:ee:16:b5:
2a:6c:03:a1:53:9a:bb:ed:b8:87:79:75:a3:59:f0:
0a:7c:ad:d8:71:8a:c7:fe:e6:ca:85:2d:f2:5a:0d:
13:35:9e:1e:0c:11:39:79:19:b6:99:89:ce:fe:ae:
67:0c:a8:f7:d6:c9:a9:da:c7:eb:44:a2:ec:18:1e:
17:66:33:6c:e9:76:58:56:1c:4e:ee:99:c7:11:b0:
49:6f:91:19:69:3c:c1:59:99:be:71:07:19:76:ab:
3a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B5:85:3B:93:0E:F2:ED:C4:3E:80:8D:4E:22:C9:47:EE:FC:A6:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B7WFO5MO8u3EPoCNTiLJR-78pvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:10:3c:d2:2b:0f:8e:32:9c:76:0e:9e:a9:33:e2:7d:4e:90:
51:dc:71:1d:bb:9f:18:e6:75:b8:ef:a4:34:0f:4e:0a:18:92:
94:9a:b2:71:87:f9:a7:79:fb:ce:44:a1:a1:6b:81:d8:33:06:
b9:ab:20:75:7d:d1:ee:30:9d:fe:00:f2:2a:ed:d0:cf:34:b0:
6e:f4:f4:c8:9a:6b:ab:d1:20:c6:97:c3:89:37:02:1e:19:19:
a3:14:38:c8:69:63:d2:bc:f9:ae:5f:8b:67:b8:20:85:2e:32:
2d:b1:22:0d:1f:d5:6e:fa:20:b8:de:b9:77:1e:45:c5:21:3a:
0d:36:72:4a:e2:07:44:ea:94:99:7c:c9:62:6f:16:b6:20:be:
f1:07:ab:c3:02:b6:13:f8:32:95:29:08:05:53:1a:d5:a5:47:
6f:df:ef:67:d4:fc:16:79:22:9a:14:5a:a2:03:c2:b4:62:ad:
f3:69:b7:ea:a3:1c:7e:6e:a0:66:3f:19:a4:ff:19:a8:f5:a6:
85:60:bd:72:26:42:94:ea:14:86:9b:ea:13:49:12:b1:23:24:
fd:65:3c:ca:6d:12:8c:ec:fd:96:ae:a7:03:36:a3:7d:22:44:
5a:15:1c:b1:65:3d:71:0f:3a:d6:3d:ec:9f:06:75:3d:f7:9d:
92:f4:ce:e3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYW7+H0vGWKBTmwDCmPM7JyOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTE2MTkwNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2I1ODUzYjkzMGVmMmVkYzQzZTgwOGQ0ZTIyYzk0N2VlZmNhNmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoe5hI1H73sbHx1Phnstha0ELnsq
/5UR66I3Abcr1zeMoiPLW1HIUThjCHF2bYQfhYUQ9ewjZXzgVkzk+4CH0nefYhMa
g3S9+TEksAb1HKaKBGZLnIV9LuspGYrZmmJRQV5qJrnhxIsamhEHC7a7MVS9QL7c
eqlSr27f1V7SB4JDojrmLLspgw/i7z6SP0g1XSFM7loUE810i5xbmWtx/iXuFrUq
bAOhU5q77biHeXWjWfAKfK3YcYrH/ubKhS3yWg0TNZ4eDBE5eRm2mYnO/q5nDKj3
1smp2sfrRKLsGB4XZjNs6XZYVhxO7pnHEbBJb5EZaTzBWZm+cQcZdqs6ewIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAe1hTuTDvLtxD6AjU4iyUfu/KbzMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQjdXRk81TU84dTNFUG9DTlRpTEpSLTc4cHZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKgQPNIrD44ynHYOnqkz
4n1OkFHccR27nxjmdbjvpDQPTgoYkpSasnGH+ad5+85EoaFrgdgzBrmrIHV90e4w
nf4A8irt0M80sG709Miaa6vRIMaXw4k3Ah4ZGaMUOMhpY9K8+a5fi2e4IIUuMi2x
Ig0f1W76ILjeuXceRcUhOg02ckriB0TqlJl8yWJvFrYgvvEHq8MCthP4MpUpCAVT
GtWlR2/f72fU/BZ5IpoUWqIDwrRirfNpt+qjHH5uoGY/GaT/Gaj1poVgvXImQpTq
FIab6hNJErEjJP1lPMptEozs/ZaupwM2o30iRFoVHLFlPXEPOtY97J8GdT33nZL0
zuM=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:09 2025 by rpki-client