Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CHBdHt8_w6X0eEiHM4d0MgxF8iw.roa
File: CHBdHt8_w6X0eEiHM4d0MgxF8iw.roa (raw, json)
Hash identifier: 5ONtYvr207aD8sGvoCz6lAPtbXZ7NnK0MTMag910ytU=
Subject key identifier: 08:70:5D:1E:DF:3F:C3:A5:F4:78:48:87:33:87:74:32:0C:45:F2:2C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B9FFD58D076CC898CD8A99F715F3FA49
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CHBdHt8_w6X0eEiHM4d0MgxF8iw.roa
Signing time: Thu 03 Aug 2023 06:04:58 +0000
ROA not before: Thu 03 Aug 2023 06:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:189:b9ff:59bd/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b9:ff:d5:8d:07:6c:c8:98:cd:8a:99:f7:15:f3:fa:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 06:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08705d1edf3fc3a5f4784887338774320c45f22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fb:2a:d5:6d:d9:9d:d9:cd:c6:75:76:0c:fc:
16:fe:46:ee:9e:97:27:ad:f2:32:2f:09:03:15:33:
d7:12:4c:38:4a:e0:de:d9:48:96:96:0e:77:67:ac:
e3:b3:85:34:1d:58:02:59:98:d2:6c:b4:23:5f:2b:
09:d6:99:ad:f1:58:4e:46:51:97:25:59:c2:31:1c:
b9:72:64:d2:58:5d:c6:44:1c:01:ed:da:f9:03:78:
4a:ff:d3:c6:e3:be:9a:3b:6c:14:26:14:dd:b1:64:
58:5c:5c:a3:3d:46:c1:36:2d:33:90:e4:6c:91:75:
12:18:6f:7c:af:37:37:b4:69:34:1c:0c:4e:e3:b4:
2b:34:89:b0:2c:ff:47:3b:1a:2d:dd:ab:11:0c:f2:
5a:7f:b5:61:1c:e3:28:de:8b:e9:7a:c2:80:76:37:
01:8e:d5:0e:a8:b6:ad:8c:e9:67:6e:85:e1:97:f2:
e7:3d:26:db:54:85:9e:90:4b:eb:29:46:9b:0e:f7:
0d:06:64:3b:6a:ab:3d:86:3f:0d:9e:0a:b4:ce:40:
1d:90:84:2d:95:b6:56:98:69:d7:80:2b:f8:e2:42:
1d:a5:b4:75:8e:96:a5:9f:84:4a:46:f2:5c:70:31:
9c:d5:80:63:06:0c:d6:c6:b9:25:35:8c:e6:04:87:
b4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:70:5D:1E:DF:3F:C3:A5:F4:78:48:87:33:87:74:32:0C:45:F2:2C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CHBdHt8_w6X0eEiHM4d0MgxF8iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:7d:b8:58:62:56:d4:bb:fa:4c:7d:fa:68:61:00:c7:c3:fd:
d1:09:85:ea:c2:af:8b:c7:32:4c:1e:5c:ee:69:22:56:b4:69:
0d:d1:dc:ac:ee:77:46:e1:b7:ef:ec:5c:a3:ca:9e:bd:03:14:
6a:4f:70:09:3a:99:62:ec:bb:53:95:ec:46:8f:42:64:9b:4c:
df:af:2c:2c:ed:ec:53:6f:32:f9:eb:9b:b7:8e:45:72:ae:be:
d7:ba:04:22:c6:e2:39:4b:8d:b2:fb:32:12:ec:5d:e3:54:33:
db:ad:17:d3:65:f5:21:86:3f:df:83:16:2e:7a:0b:e9:9e:57:
2d:45:b0:85:1d:10:81:06:a2:ec:d4:c1:a8:dc:8a:c5:ee:2d:
6d:58:b3:6a:fa:a5:ce:de:58:c6:64:de:df:de:17:ae:64:3a:
e2:56:e0:16:89:b1:99:1b:ca:cc:c0:35:f8:98:ae:59:e2:86:
69:35:bd:14:ff:5f:64:b9:d5:6b:34:82:ac:db:07:0b:74:6d:
6a:05:95:69:84:cc:9c:50:4a:e6:69:21:db:df:6d:38:6b:a2:
44:f5:cb:9f:05:f7:a7:d7:be:24:88:47:f2:d2:a2:8c:99:09:
a5:7c:d0:ef:89:9c:9c:dc:db:b3:14:ee:ef:92:61:2a:ad:c5:
f4:42:96:f6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYm5/9WNB2zImM2KmfcV8/pJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODAzMDYwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODcwNWQxZWRmM2ZjM2E1ZjQ3ODQ4ODczMzg3NzQzMjBjNDVmMjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfsq1W3ZndnNxnV2DPwW/kbunpcn
rfIyLwkDFTPXEkw4SuDe2UiWlg53Z6zjs4U0HVgCWZjSbLQjXysJ1pmt8VhORlGX
JVnCMRy5cmTSWF3GRBwB7dr5A3hK/9PG476aO2wUJhTdsWRYXFyjPUbBNi0zkORs
kXUSGG98rzc3tGk0HAxO47QrNImwLP9HOxot3asRDPJaf7VhHOMo3ovpesKAdjcB
jtUOqLatjOlnboXhl/LnPSbbVIWekEvrKUabDvcNBmQ7aqs9hj8Nngq0zkAdkIQt
lbZWmGnXgCv44kIdpbR1jpaln4RKRvJccDGc1YBjBgzWxrklNYzmBIe06wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAhwXR7fP8Ol9HhIhzOHdDIMRfIsMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQ0hCZEh0OF93NlgwZUVpSE00ZDBNZ3hGOGl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGd9uFhiVtS7+kx9+mhh
AMfD/dEJherCr4vHMkweXO5pIla0aQ3R3Kzud0bht+/sXKPKnr0DFGpPcAk6mWLs
u1OV7EaPQmSbTN+vLCzt7FNvMvnrm7eORXKuvte6BCLG4jlLjbL7MhLsXeNUM9ut
F9Nl9SGGP9+DFi56C+meVy1FsIUdEIEGouzUwajcisXuLW1Ys2r6pc7eWMZk3t/e
F65kOuJW4BaJsZkbyszANfiYrlnihmk1vRT/X2S51Ws0gqzbBwt0bWoFlWmEzJxQ
SuZpIdvfbThrokT1y58F96fXviSIR/LSooyZCaV80O+JnJzc27MU7u+SYSqtxfRC
lvY=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:15 2025 by rpki-client