Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F58sNsBlvWsFttxOM7skmThbFZU.roa
File: F58sNsBlvWsFttxOM7skmThbFZU.roa (raw, json)
Hash identifier: n6R/i65ym1n3joip+F8hrTbSj3xs/k0EtmAaLJksEHA=
Subject key identifier: 17:9F:2C:36:C0:65:BD:6B:05:B6:DC:4E:33:BB:24:99:38:5B:15:95
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A43542EA5836CD6E417574A88F7F0D652
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F58sNsBlvWsFttxOM7skmThbFZU.roa
Signing time: Tue 29 Aug 2023 22:05:04 +0000
ROA not before: Tue 29 Aug 2023 22:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:4353:90db/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:43:54:2e:a5:83:6c:d6:e4:17:57:4a:88:f7:f0:d6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 22:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=179f2c36c065bd6b05b6dc4e33bb2499385b1595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:14:76:e4:45:2b:ed:1a:49:d5:11:20:22:26:
be:ef:fd:e7:8b:bb:e4:62:09:e5:98:40:56:23:dc:
ab:52:3a:18:46:c9:38:27:96:87:c7:2a:59:0c:ea:
e6:27:4f:a9:a3:67:c4:dd:79:66:9f:25:22:3c:cf:
8f:1f:0e:57:65:0c:39:12:49:60:0f:d6:4d:c9:39:
5b:9b:ab:b1:0f:20:c2:8c:85:ec:cb:c0:10:f9:40:
41:6f:e2:21:20:48:4e:4f:20:14:5b:a0:07:48:39:
a4:5f:e1:cf:3c:85:c3:f6:93:e6:ed:39:f8:de:54:
29:2b:1f:e9:d7:67:c5:cd:d9:3a:31:84:b2:3e:07:
1d:99:a1:41:d5:ea:57:8f:67:41:59:18:df:24:f7:
5b:30:a5:86:25:08:2f:cd:d7:be:a1:e4:34:0f:d0:
81:b0:34:ab:71:ee:01:92:7e:02:30:fe:c6:f0:cb:
ea:2b:f8:4d:72:0a:ba:83:0f:6d:81:8f:87:e1:97:
9e:81:88:be:02:de:6f:a4:c7:a8:3b:e7:c0:ba:1e:
73:55:6a:31:20:7a:6a:b0:2f:55:f2:a7:3c:52:75:
45:a2:2d:6d:f0:c0:dc:88:e8:e6:ad:76:1a:4a:16:
01:44:4e:4c:ab:d9:08:71:cc:c3:f3:40:46:c5:0a:
57:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9F:2C:36:C0:65:BD:6B:05:B6:DC:4E:33:BB:24:99:38:5B:15:95
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F58sNsBlvWsFttxOM7skmThbFZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:6d:e0:77:52:ca:38:fb:9d:85:bf:a9:57:c5:46:2d:b8:9a:
75:2e:96:e0:2f:d2:6f:ed:bc:70:70:7d:88:2e:da:2d:8f:9e:
c2:48:44:b7:02:e1:38:06:47:02:1a:1c:20:04:c3:5c:0d:44:
9b:f6:d7:72:b9:fe:0d:9a:a2:dd:48:08:8e:85:66:69:50:1e:
14:d8:13:23:51:aa:89:72:32:e0:6e:af:52:ed:6d:73:89:7f:
bc:84:a9:d9:9a:a7:f9:1b:a1:c9:16:db:8c:de:c5:7f:73:8a:
96:05:35:fd:62:af:49:b7:ae:94:b0:1a:bc:11:0f:bd:cc:af:
66:20:1f:9f:26:73:04:55:b0:64:3b:68:b4:ca:37:a5:bd:e1:
fe:9e:ca:40:81:9c:20:95:bb:5e:1d:a1:3e:14:d4:63:8a:f1:
4f:1f:f4:da:19:f6:e0:46:0b:1c:06:38:c8:83:1f:56:59:f7:
5e:bc:79:f2:04:cb:22:c4:cb:ae:34:1c:ee:1b:d7:2e:5a:7f:
9f:af:1b:86:32:b7:93:21:01:1e:26:6c:d9:b5:52:f7:d3:23:
29:8e:08:a2:8c:50:17:49:8e:26:03:ab:3b:a3:f5:39:bb:3c:
24:bc:09:b2:df:81:c4:3b:a3:6b:65:a0:7c:e3:25:4e:78:2c:
96:cd:99:84
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYpDVC6lg2zW5BdXSoj38NZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODI5MjIwNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzlmMmMzNmMwNjViZDZiMDViNmRjNGUzM2JiMjQ5OTM4NWIxNTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhR25EUr7RpJ1REgIia+7/3ni7vk
YgnlmEBWI9yrUjoYRsk4J5aHxypZDOrmJ0+po2fE3XlmnyUiPM+PHw5XZQw5Eklg
D9ZNyTlbm6uxDyDCjIXsy8AQ+UBBb+IhIEhOTyAUW6AHSDmkX+HPPIXD9pPm7Tn4
3lQpKx/p12fFzdk6MYSyPgcdmaFB1epXj2dBWRjfJPdbMKWGJQgvzde+oeQ0D9CB
sDSrce4Bkn4CMP7G8MvqK/hNcgq6gw9tgY+H4ZeegYi+At5vpMeoO+fAuh5zVWox
IHpqsC9V8qc8UnVFoi1t8MDciOjmrXYaShYBRE5Mq9kIcczD80BGxQpXCwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBefLDbAZb1rBbbcTjO7JJk4WxWVMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRjU4c05zQmx2V3NGdHR4T003c2ttVGhiRlpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEdt4HdSyjj7nYW/qVfF
Ri24mnUuluAv0m/tvHBwfYgu2i2PnsJIRLcC4TgGRwIaHCAEw1wNRJv213K5/g2a
ot1ICI6FZmlQHhTYEyNRqolyMuBur1LtbXOJf7yEqdmap/kbockW24zexX9zipYF
Nf1ir0m3rpSwGrwRD73Mr2YgH58mcwRVsGQ7aLTKN6W94f6eykCBnCCVu14doT4U
1GOK8U8f9NoZ9uBGCxwGOMiDH1ZZ9168efIEyyLEy640HO4b1y5af5+vG4Yyt5Mh
AR4mbNm1UvfTIymOCKKMUBdJjiYDqzuj9Tm7PCS8CbLfgcQ7o2tloHzjJU54LJbN
mYQ=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:17:30 2025 by rpki-client