Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C41TdJlilwhXVmulvEcAneaHvlA.roa
File: C41TdJlilwhXVmulvEcAneaHvlA.roa (raw, json)
Hash identifier: ItpbZgs6rbd/AFS270lxFx+jff++ORbi8b7EFWmgD8s=
Subject key identifier: 0B:8D:53:74:99:62:97:08:57:56:6B:A5:BC:47:00:9D:E6:87:BE:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185B85223A78C17E861098A410A33E6E0AA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C41TdJlilwhXVmulvEcAneaHvlA.roa
Signing time: Mon 16 Jan 2023 02:04:28 +0000
ROA not before: Mon 16 Jan 2023 02:04:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:b852:4fa/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b8:52:23:a7:8c:17:e8:61:09:8a:41:0a:33:e6:e0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 16 02:04:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b8d53749962970857566ba5bc47009de687be50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b3:cf:ab:89:fd:a3:23:6e:36:19:b3:12:46:
6a:c1:62:db:d2:59:2d:d8:4b:23:d0:a4:0b:46:7a:
c4:a7:d7:b4:18:6e:26:cf:82:0b:6a:3a:40:d3:e8:
c5:b9:c4:bf:d7:86:87:3a:fa:d5:c4:b1:1f:f7:d3:
f8:68:9e:a1:75:e5:a5:15:e8:7d:30:48:07:ac:ad:
f2:69:07:56:7f:77:2f:12:69:bd:e2:43:ce:11:01:
9a:6e:5b:a9:81:e6:13:6f:84:64:ae:ad:5e:ec:8b:
04:35:52:ab:2e:9e:6d:2f:d4:4b:b8:6f:dd:ce:9b:
29:b6:52:e9:6e:51:77:15:0a:1f:48:eb:0b:a2:ea:
b6:73:b9:35:b3:7e:45:f4:6d:ed:ad:1f:05:b1:db:
7b:2f:54:c0:4b:5a:97:c5:2c:12:25:c8:31:58:a2:
3e:b8:5d:e3:f7:14:d6:76:44:41:7b:b0:a0:32:73:
63:e4:fa:98:91:75:a6:0e:6f:99:85:b9:57:64:60:
1f:7e:ec:0b:59:26:c3:ea:20:3d:ac:c7:9a:05:d0:
ef:54:b7:2a:77:1d:58:13:03:a7:fe:d5:85:65:eb:
c3:51:51:6d:ba:d1:0a:31:4f:49:e9:41:41:5e:62:
63:3d:cc:e8:5b:c6:97:61:a5:af:f9:77:81:a0:c1:
66:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8D:53:74:99:62:97:08:57:56:6B:A5:BC:47:00:9D:E6:87:BE:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C41TdJlilwhXVmulvEcAneaHvlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:dd:fb:c2:ac:c4:66:9b:5f:de:b0:09:b1:ad:13:b9:7f:08:
f5:10:4e:3c:16:52:bb:61:94:02:ab:d7:59:72:ff:ea:a6:71:
6f:fc:97:8f:e0:90:62:93:1a:3f:c4:3e:ef:95:e5:32:95:b5:
69:41:ed:b4:37:04:01:87:46:53:6d:86:82:d3:a2:2c:11:ba:
c0:0f:80:64:1d:be:f6:01:a4:0e:ea:79:69:38:3f:2d:21:d3:
0c:b5:ea:9e:56:3b:59:69:43:6f:ef:a2:92:58:ca:2a:0e:6f:
0d:f4:cf:f7:f9:f3:61:67:59:fd:16:7d:c9:a8:19:57:77:38:
f6:32:de:bf:ef:bd:d0:0a:f6:f7:95:3b:49:e2:ab:46:f0:ff:
7b:f8:39:a4:86:01:10:9a:b4:42:38:08:fe:fa:d6:33:f5:04:
44:80:a4:81:d5:71:f5:7b:8e:47:9e:bc:18:7c:90:8d:c2:64:
81:b8:e3:fe:f2:c4:a5:27:ed:16:b2:bd:28:e0:18:a2:b4:9a:
a0:9c:9a:74:04:5a:12:2a:a6:d5:2a:22:88:37:25:e5:17:4c:
96:a3:6b:fe:65:5c:4c:67:fd:ae:db:8f:ae:83:75:d0:7e:fc:
b8:41:de:80:87:77:ca:fa:ba:c4:d6:db:80:cf:77:6c:e5:e2:
dd:24:79:0f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYW4UiOnjBfoYQmKQQoz5uCqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTE2MDIwNDI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjhkNTM3NDk5NjI5NzA4NTc1NjZiYTViYzQ3MDA5ZGU2ODdiZTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrPPq4n9oyNuNhmzEkZqwWLb0lkt
2Esj0KQLRnrEp9e0GG4mz4ILajpA0+jFucS/14aHOvrVxLEf99P4aJ6hdeWlFeh9
MEgHrK3yaQdWf3cvEmm94kPOEQGablupgeYTb4Rkrq1e7IsENVKrLp5tL9RLuG/d
zpsptlLpblF3FQofSOsLouq2c7k1s35F9G3trR8Fsdt7L1TAS1qXxSwSJcgxWKI+
uF3j9xTWdkRBe7CgMnNj5PqYkXWmDm+ZhblXZGAffuwLWSbD6iA9rMeaBdDvVLcq
dx1YEwOn/tWFZevDUVFtutEKMU9J6UFBXmJjPczoW8aXYaWv+XeBoMFmSQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAuNU3SZYpcIV1ZrpbxHAJ3mh75QMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQzQxVGRKbGlsd2hYVm11bHZFY0FuZWFIdmxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFvd+8KsxGabX96wCbGt
E7l/CPUQTjwWUrthlAKr11ly/+qmcW/8l4/gkGKTGj/EPu+V5TKVtWlB7bQ3BAGH
RlNthoLToiwRusAPgGQdvvYBpA7qeWk4Py0h0wy16p5WO1lpQ2/vopJYyioObw30
z/f582FnWf0WfcmoGVd3OPYy3r/vvdAK9veVO0niq0bw/3v4OaSGARCatEI4CP76
1jP1BESApIHVcfV7jkeevBh8kI3CZIG44/7yxKUn7RayvSjgGKK0mqCcmnQEWhIq
ptUqIog3JeUXTJaja/5lXExn/a7bj66DddB+/LhB3oCHd8r6usTW24DPd2zl4t0k
eQ8=
-----END CERTIFICATE-----
Generated at Thu May 1 14:27:32 2025 by rpki-client