Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FV2NQ1sFgQYDdI83HqwEov2iJM0.roa
File: FV2NQ1sFgQYDdI83HqwEov2iJM0.roa (raw, json)
Hash identifier: Yk3sN90SsTDmmhyHRmEVyKh5zcRsit7uTLTtzg3nkUk=
Subject key identifier: 15:5D:8D:43:5B:05:81:06:03:74:8F:37:1E:AC:04:A2:FD:A2:24:CD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184EFED0C5185DD578F95B23FDC734F8E98
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FV2NQ1sFgQYDdI83HqwEov2iJM0.roa
Signing time: Thu 08 Dec 2022 04:10:00 +0000
ROA not before: Thu 08 Dec 2022 04:10:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ef:ed:0c:51:85:dd:57:8f:95:b2:3f:dc:73:4f:8e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 8 04:10:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=155d8d435b05810603748f371eac04a2fda224cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cf:a2:d4:8a:c0:95:db:21:4b:45:d0:2d:02:
f0:91:a5:07:c4:99:3e:ae:f4:82:13:da:9a:df:29:
9f:84:60:ee:3e:04:60:df:b2:41:0e:87:e4:31:ee:
a2:ed:ce:53:cf:ab:85:cc:c9:64:ec:06:9b:66:90:
49:4e:03:b4:74:4c:ac:f0:d1:55:db:d6:c6:4f:5a:
a2:8d:e1:17:f8:e7:ba:ab:5e:26:03:eb:8c:ca:cb:
64:31:01:a1:20:81:9a:df:8b:19:79:57:04:87:fa:
7e:74:67:d7:1b:c6:4a:7b:14:d7:4c:21:46:78:34:
ec:75:31:cf:0c:f1:4d:62:c1:81:61:a4:56:2e:c3:
d0:d9:16:a8:6d:a4:79:32:22:40:58:71:db:29:0c:
a4:5d:98:87:a2:de:82:04:f8:91:48:35:9d:ff:f9:
92:a3:07:71:06:fb:d3:8d:91:ad:06:70:da:89:6e:
85:a5:e4:e6:00:c0:d6:3e:7d:74:33:50:02:fd:df:
6a:b9:fa:f5:d6:5b:c7:20:6b:e5:2e:0a:b2:31:d3:
e4:68:0d:76:53:31:3e:82:f8:cc:d0:39:4a:af:20:
c2:5f:54:c8:6d:f1:68:e1:cd:42:af:70:ce:2c:af:
61:e4:a2:9a:50:ff:d8:7b:1d:cc:ab:97:c2:ea:2b:
f9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5D:8D:43:5B:05:81:06:03:74:8F:37:1E:AC:04:A2:FD:A2:24:CD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FV2NQ1sFgQYDdI83HqwEov2iJM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:d8:3d:1b:a3:18:16:b4:0c:f7:cd:bc:bc:90:6e:93:a0:e8:
35:be:12:38:b8:ee:4f:50:17:18:15:67:e7:9f:9c:2c:97:5e:
2e:7b:30:93:c1:25:51:c5:53:86:1d:d8:0e:2f:8a:81:16:2e:
0e:a2:73:22:55:12:b0:2f:51:ad:7f:5c:63:67:93:bd:b6:49:
a5:e9:3f:61:4b:61:b0:bf:db:a6:33:3c:7e:a4:e1:8f:bd:22:
23:c6:5d:84:85:50:e7:1b:f1:6d:c6:e6:62:3b:0a:f8:d9:93:
be:19:f0:8e:49:76:cd:5f:c7:48:c7:ca:c6:96:77:35:a5:c0:
4a:9d:b7:f7:f1:80:e2:3c:e0:cd:0a:b2:9a:6e:69:ff:2a:37:
3d:3b:89:a5:5a:ef:b2:87:22:10:ec:02:ca:fb:e2:03:e3:a8:
3f:38:3d:7c:86:dc:e4:b0:9a:91:fe:66:ae:84:72:3f:55:91:
a0:2b:eb:a3:2d:84:78:94:22:55:96:3a:8e:47:e4:09:73:0c:
73:c1:5a:60:1d:7a:bf:20:c0:28:1b:bb:c2:f5:f5:d2:8a:7d:
da:5a:43:6f:bc:09:fa:14:b2:a9:40:27:be:d4:1d:17:f3:76:
d6:c5:22:2c:19:2f:25:91:eb:eb:ee:ab:a2:60:c1:5c:41:a8:
2d:2e:6d:20
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYTv7QxRhd1Xj5WyP9xzT46YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjA4MDQxMDAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTVkOGQ0MzViMDU4MTA2MDM3NDhmMzcxZWFjMDRhMmZkYTIyNGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM+i1IrAldshS0XQLQLwkaUHxJk+
rvSCE9qa3ymfhGDuPgRg37JBDofkMe6i7c5Tz6uFzMlk7AabZpBJTgO0dEys8NFV
29bGT1qijeEX+Oe6q14mA+uMystkMQGhIIGa34sZeVcEh/p+dGfXG8ZKexTXTCFG
eDTsdTHPDPFNYsGBYaRWLsPQ2RaobaR5MiJAWHHbKQykXZiHot6CBPiRSDWd//mS
owdxBvvTjZGtBnDaiW6FpeTmAMDWPn10M1AC/d9qufr11lvHIGvlLgqyMdPkaA12
UzE+gvjM0DlKryDCX1TIbfFo4c1Cr3DOLK9h5KKaUP/Yex3Mq5fC6iv5ZQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBVdjUNbBYEGA3SPNx6sBKL9oiTNMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRlYyTlExc0ZnUVlEZEk4M0hxd0VvdjJpSk0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAETYPRujGBa0DPfNvLyQ
bpOg6DW+Eji47k9QFxgVZ+efnCyXXi57MJPBJVHFU4Yd2A4vioEWLg6icyJVErAv
Ua1/XGNnk722SaXpP2FLYbC/26YzPH6k4Y+9IiPGXYSFUOcb8W3G5mI7CvjZk74Z
8I5Jds1fx0jHysaWdzWlwEqdt/fxgOI84M0Ksppuaf8qNz07iaVa77KHIhDsAsr7
4gPjqD84PXyG3OSwmpH+Zq6Ecj9VkaAr66MthHiUIlWWOo5H5AlzDHPBWmAder8g
wCgbu8L19dKKfdpaQ2+8CfoUsqlAJ77UHRfzdtbFIiwZLyWR6+vuq6JgwVxBqC0u
bSA=
-----END CERTIFICATE-----
Generated at Thu May 1 01:28:47 2025 by rpki-client