Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F9GhdJZGMq9ctz41N2L4l7xLahE.roa
File: F9GhdJZGMq9ctz41N2L4l7xLahE.roa (raw, json)
Hash identifier: 0ln3wbGflLBYW1iKMWccxAWTT/sjglZQCtLc3Ca8i9A=
Subject key identifier: 17:D1:A1:74:96:46:32:AF:5C:B7:3E:35:37:62:F8:97:BC:4B:6A:11
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01852448E8358E3B615B76094699841E21AE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F9GhdJZGMq9ctz41N2L4l7xLahE.roa
Signing time: Sun 18 Dec 2022 08:10:35 +0000
ROA not before: Sun 18 Dec 2022 08:10:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:24:48:e8:35:8e:3b:61:5b:76:09:46:99:84:1e:21:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 18 08:10:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17d1a174964632af5cb73e353762f897bc4b6a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b0:d3:7a:50:ac:e3:ae:ce:7b:7b:31:ec:b6:
91:a5:b9:54:43:80:68:e3:44:ae:d0:0f:cd:a2:23:
31:3c:b3:62:0f:b3:a5:4c:7f:1b:3f:a3:30:46:24:
d9:b9:ca:02:01:b6:b5:9e:11:4b:f1:8f:8e:42:6a:
b6:d5:6b:05:cc:7d:20:6d:c4:43:83:bd:e6:a7:74:
91:5c:de:41:da:fa:48:16:41:11:2e:bd:c6:20:33:
45:ee:47:c8:8d:ef:df:db:a2:a4:be:70:99:1c:ae:
15:5f:3e:8b:c4:3a:99:1b:25:31:62:dd:fd:88:21:
d1:92:95:3b:22:81:af:55:67:1e:db:64:95:28:4c:
0a:41:47:dd:ce:a7:2d:de:45:8b:63:47:37:ed:af:
5b:47:bf:f6:bc:cf:ac:36:a6:63:4c:ef:61:4a:ac:
2f:9e:e6:46:06:8c:e3:12:58:ce:1d:55:4e:48:ab:
3b:94:f5:7f:7b:d3:41:be:d7:75:04:2c:33:a6:1f:
a4:2a:fb:d5:07:5c:b1:0c:13:ed:e1:99:0b:d5:c4:
29:d5:2d:ee:10:6d:cd:8d:b3:2e:8e:1f:1b:40:ac:
d7:90:bb:36:3e:12:5a:9e:26:98:c9:dc:38:bd:36:
ed:83:72:5e:3f:b5:15:5c:ac:1a:5d:a6:93:e9:e7:
cf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D1:A1:74:96:46:32:AF:5C:B7:3E:35:37:62:F8:97:BC:4B:6A:11
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F9GhdJZGMq9ctz41N2L4l7xLahE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:aa:27:0b:8e:23:05:8d:4d:2b:fc:89:30:cb:79:ee:f5:93:
3f:22:bb:09:36:b9:e7:93:bf:bd:0d:02:8c:23:41:1f:b7:cd:
d5:3e:99:cf:b0:13:45:b7:35:88:92:d9:6b:fb:6b:9f:ab:a8:
a3:b2:cb:de:84:41:84:be:38:fc:3e:10:26:a7:5a:ee:a4:5c:
f6:30:37:d8:c0:55:3d:1d:a4:35:ed:57:b9:b7:99:52:2c:c5:
b2:69:f9:0a:90:af:84:45:0c:2a:b5:8f:33:ef:c6:7f:81:05:
3d:aa:f6:94:de:b7:01:b0:17:7d:ab:a3:04:60:61:bb:26:58:
33:26:ec:f3:ad:51:93:72:a1:2a:e6:a4:41:2f:0d:1c:d5:63:
53:62:7d:57:46:cc:77:9b:19:1e:c2:07:82:84:28:e0:85:2e:
40:d5:f2:34:7f:41:a9:d0:f0:c8:4b:ed:80:6a:9d:28:dc:4d:
48:da:11:7b:fb:b2:d9:6e:39:a6:ce:7c:a3:82:3d:1d:91:26:
09:ae:1f:6f:66:1f:5d:b3:01:e7:95:26:69:26:76:6e:71:78:
84:da:4c:45:22:48:a5:c8:4c:25:10:3b:a9:43:47:f4:8c:ac:
39:43:db:07:d1:2b:4c:74:9c:d8:82:ed:a2:a2:f7:c8:46:99:
05:54:1e:33
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUkSOg1jjthW3YJRpmEHiGuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjE4MDgxMDM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2QxYTE3NDk2NDYzMmFmNWNiNzNlMzUzNzYyZjg5N2JjNGI2YTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrDTelCs467Oe3sx7LaRpblUQ4Bo
40Su0A/NoiMxPLNiD7OlTH8bP6MwRiTZucoCAba1nhFL8Y+OQmq21WsFzH0gbcRD
g73mp3SRXN5B2vpIFkERLr3GIDNF7kfIje/f26KkvnCZHK4VXz6LxDqZGyUxYt39
iCHRkpU7IoGvVWce22SVKEwKQUfdzqct3kWLY0c37a9bR7/2vM+sNqZjTO9hSqwv
nuZGBozjEljOHVVOSKs7lPV/e9NBvtd1BCwzph+kKvvVB1yxDBPt4ZkL1cQp1S3u
EG3NjbMujh8bQKzXkLs2PhJaniaYydw4vTbtg3JeP7UVXKwaXaaT6efPGwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBfRoXSWRjKvXLc+NTdi+Je8S2oRMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRjlHaGRKWkdNcTljdHo0MU4yTDRsN3hMYWhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIOqJwuOIwWNTSv8iTDL
ee71kz8iuwk2ueeTv70NAowjQR+3zdU+mc+wE0W3NYiS2Wv7a5+rqKOyy96EQYS+
OPw+ECanWu6kXPYwN9jAVT0dpDXtV7m3mVIsxbJp+QqQr4RFDCq1jzPvxn+BBT2q
9pTetwGwF32rowRgYbsmWDMm7POtUZNyoSrmpEEvDRzVY1NifVdGzHebGR7CB4KE
KOCFLkDV8jR/QanQ8MhL7YBqnSjcTUjaEXv7stluOabOfKOCPR2RJgmuH29mH12z
AeeVJmkmdm5xeITaTEUiSKXITCUQO6lDR/SMrDlD2wfRK0x0nNiC7aKi98hGmQVU
HjM=
-----END CERTIFICATE-----
Generated at Thu May 1 10:03:51 2025 by rpki-client