Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F191mRF5vcl7O5hc8r1rYzwKpIw.roa
File: F191mRF5vcl7O5hc8r1rYzwKpIw.roa (raw, json)
Hash identifier: wwpKDlU8MWUPhnF8f7J6SBetXbCdkSRII7191QQK+i0=
Subject key identifier: 17:5F:75:99:11:79:BD:C9:7B:3B:98:5C:F2:BD:6B:63:3C:0A:A4:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850C0C569DB851B1A65BB2CBADC68B1867
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F191mRF5vcl7O5hc8r1rYzwKpIw.roa
Signing time: Tue 13 Dec 2022 15:13:33 +0000
ROA not before: Tue 13 Dec 2022 15:13:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0c:0c:56:9d:b8:51:b1:a6:5b:b2:cb:ad:c6:8b:18:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 13 15:13:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=175f75991179bdc97b3b985cf2bd6b633c0aa48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1d:c7:ea:bc:e2:8b:ee:f0:5f:6e:31:f8:aa:
f0:4c:57:a7:7f:04:bc:7f:e6:71:09:bc:a7:18:9e:
d2:de:cb:8b:af:d3:97:ee:37:76:62:77:77:8a:4a:
97:8f:d6:8b:b2:73:e1:9c:d2:b2:17:60:f7:72:84:
fc:de:27:38:a1:25:7d:5d:47:80:da:16:b2:d9:90:
99:48:51:34:f5:5d:94:de:2f:48:35:13:11:41:ff:
fd:6a:55:1f:5b:7a:2b:ac:e6:9c:5d:3f:ca:85:d1:
76:a3:d1:7e:a1:07:08:bd:57:e2:6f:d2:9d:aa:45:
ca:11:d6:52:b8:a6:f8:d7:61:4d:aa:8e:06:74:f9:
f4:e2:f0:fe:bb:18:58:46:35:32:ee:51:77:7b:60:
83:5f:de:6c:cc:40:a6:2d:b3:3e:ac:67:74:e1:23:
8f:b2:b9:a4:f9:fa:fe:68:3e:d6:c2:74:6d:0b:18:
4a:27:c2:41:10:73:d1:d0:a9:a2:d1:51:1f:ab:65:
b9:4d:a5:fe:9a:78:83:3a:ac:19:3e:47:a1:58:26:
1d:81:3e:4d:4a:a2:5e:6d:0c:1e:14:3a:3b:a1:0f:
b7:94:c8:7e:de:0f:2f:09:d8:f5:06:36:59:7e:42:
10:88:e9:8e:db:1b:b9:f2:13:c6:46:84:f5:0c:17:
a0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5F:75:99:11:79:BD:C9:7B:3B:98:5C:F2:BD:6B:63:3C:0A:A4:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F191mRF5vcl7O5hc8r1rYzwKpIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:64:5f:58:36:2a:18:ed:13:53:53:a3:11:c7:35:bc:04:02:
fb:3c:5c:b2:99:bf:6f:15:00:b6:4c:6e:2a:c0:23:8a:af:ee:
ef:7c:19:70:a1:13:9e:9d:c3:4b:6a:45:4d:18:a2:44:1f:3c:
7b:64:46:15:db:95:b1:a8:ec:91:cf:c0:7e:ab:dc:65:50:3c:
7d:c6:24:f7:b1:ea:2f:94:d8:a7:ec:52:a2:55:f1:31:99:c6:
c0:db:7a:17:a7:54:a3:99:6c:e3:8a:81:c5:61:36:6a:1f:54:
f0:27:1a:de:c0:6c:db:76:b7:87:52:76:96:d6:d3:1e:0f:fe:
0e:00:33:c0:e6:d5:ba:6e:4c:54:41:4c:e1:e3:9f:b7:60:25:
6c:fd:cc:ed:a0:ee:d4:b6:32:01:f4:43:5b:c6:97:cc:b7:b7:
67:3f:e1:99:8a:fa:a7:33:0e:9c:cf:14:d7:ba:1c:dd:c3:18:
fe:66:05:ca:7c:ce:32:78:9d:80:70:7a:63:07:fd:13:ac:6e:
8c:7c:29:28:18:70:bb:67:f0:0e:37:ce:fe:10:80:d5:1e:09:
e3:8b:72:56:9d:5a:a8:07:30:64:2a:27:6f:61:43:05:f0:15:
7e:66:f2:c2:09:a5:51:cc:60:01:f5:ed:81:94:68:e1:c0:b9:
82:4c:90:9f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUMDFaduFGxpluyy63GixhnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjEzMTUxMzMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzVmNzU5OTExNzliZGM5N2IzYjk4NWNmMmJkNmI2MzNjMGFhNDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh3H6rzii+7wX24x+KrwTFenfwS8
f+ZxCbynGJ7S3suLr9OX7jd2Ynd3ikqXj9aLsnPhnNKyF2D3coT83ic4oSV9XUeA
2hay2ZCZSFE09V2U3i9INRMRQf/9alUfW3orrOacXT/KhdF2o9F+oQcIvVfib9Kd
qkXKEdZSuKb412FNqo4GdPn04vD+uxhYRjUy7lF3e2CDX95szECmLbM+rGd04SOP
srmk+fr+aD7WwnRtCxhKJ8JBEHPR0Kmi0VEfq2W5TaX+mniDOqwZPkehWCYdgT5N
SqJebQweFDo7oQ+3lMh+3g8vCdj1BjZZfkIQiOmO2xu58hPGRoT1DBegrwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBdfdZkReb3JezuYXPK9a2M8CqSMMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRjE5MW1SRjV2Y2w3TzVoYzhyMXJZendLcEl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAZkX1g2KhjtE1NToxHH
NbwEAvs8XLKZv28VALZMbirAI4qv7u98GXChE56dw0tqRU0YokQfPHtkRhXblbGo
7JHPwH6r3GVQPH3GJPex6i+U2KfsUqJV8TGZxsDbehenVKOZbOOKgcVhNmofVPAn
Gt7AbNt2t4dSdpbW0x4P/g4AM8Dm1bpuTFRBTOHjn7dgJWz9zO2g7tS2MgH0Q1vG
l8y3t2c/4ZmK+qczDpzPFNe6HN3DGP5mBcp8zjJ4nYBwemMH/ROsbox8KSgYcLtn
8A43zv4QgNUeCeOLcladWqgHMGQqJ29hQwXwFX5m8sIJpVHMYAH17YGUaOHAuYJM
kJ8=
-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:44 2025 by rpki-client