Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IQmhSnOFMkwbCCCgfYdqT-1XxBA.roa
File: IQmhSnOFMkwbCCCgfYdqT-1XxBA.roa (raw, json)
Hash identifier: JahrodjiyyoDVgebIHRXOKH6GM68KhY/KYERxB8MfNI=
Subject key identifier: 21:09:A1:4A:73:85:32:4C:1B:08:20:A0:7D:87:6A:4F:ED:57:C4:10
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184026656F4ADA356E139C4083D63AE3817
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IQmhSnOFMkwbCCCgfYdqT-1XxBA.roa
Signing time: Sun 23 Oct 2022 01:12:52 +0000
ROA not before: Sun 23 Oct 2022 01:12:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:02:66:56:f4:ad:a3:56:e1:39:c4:08:3d:63:ae:38:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 23 01:12:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2109a14a7385324c1b0820a07d876a4fed57c410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ce:5c:f4:7f:97:11:45:1f:fa:a1:97:32:c5:
d0:97:d6:00:9c:e5:6e:7c:77:db:1e:e1:fa:b6:d3:
cd:60:78:b5:42:61:fc:3d:6c:10:db:9c:d9:19:90:
d5:4a:64:f0:12:00:a6:c2:11:06:8c:aa:01:3c:ba:
0a:07:b6:5b:c9:3f:bc:14:63:0a:d2:da:87:23:ff:
fc:b7:16:f8:a1:84:50:24:c7:2b:27:55:f9:d8:46:
b3:09:dc:7f:b4:d1:ad:af:ac:a3:71:91:ec:48:e9:
3e:7a:5c:7c:5f:44:75:66:97:ed:83:3a:4f:79:e6:
8f:8d:b3:20:5c:65:a3:7d:dc:21:8c:b9:df:7f:eb:
d0:d7:68:cd:28:47:a2:ff:7d:fb:39:94:56:b8:81:
04:a8:d8:f3:ba:95:d7:62:9f:2e:a9:77:68:a5:d5:
ad:b4:09:16:e8:c3:48:3a:b5:94:46:f5:1d:61:46:
8f:25:fd:38:ec:83:69:f8:fb:bd:df:25:0a:62:d4:
57:c0:cd:61:c8:24:77:7f:13:83:70:bb:cc:72:c6:
d6:69:a3:a8:51:f3:e2:e1:13:18:d0:1f:1d:b8:0f:
f3:00:82:2f:ef:6a:ae:6d:3d:f3:52:95:2e:a3:a9:
88:aa:22:93:3c:a1:49:ea:2f:8d:1e:59:bc:d3:8d:
07:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:09:A1:4A:73:85:32:4C:1B:08:20:A0:7D:87:6A:4F:ED:57:C4:10
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IQmhSnOFMkwbCCCgfYdqT-1XxBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:d1:bc:ea:21:cc:c6:da:b1:8f:d3:04:d3:0d:7b:ef:cf:0b:
d3:6c:8a:6e:1e:b7:c1:18:9b:0e:f3:4d:9d:98:c8:75:5f:dc:
b9:ce:d3:84:9d:b2:2b:18:ce:8c:5a:f8:fa:b8:0c:5f:4c:c3:
1a:f5:57:29:23:e6:fa:87:58:17:45:1b:75:7c:96:04:d6:f2:
86:29:10:18:d4:09:d2:c2:0f:4a:44:18:ca:82:f9:ca:f4:26:
35:3a:02:a0:8f:66:e8:a2:d5:e6:8b:d7:d7:54:2d:8a:45:52:
ba:c1:87:c7:21:b3:64:af:f3:80:c6:56:6d:78:94:f6:25:e0:
5d:f0:66:5c:05:1b:88:e3:04:2c:50:3a:39:c2:c0:6a:d1:f1:
1e:84:12:95:0d:e4:4a:a7:c8:3f:40:b0:eb:77:3a:6c:63:6c:
56:6b:92:b1:40:60:ce:65:19:19:e8:8c:2a:c2:81:3f:60:88:
80:6d:67:c7:56:f0:71:c4:ee:15:d3:74:3e:e8:64:ce:73:b2:
52:c0:64:28:c8:90:06:c1:a5:f3:73:60:ee:24:43:ea:d5:ec:
97:b2:87:14:6b:2c:48:18:c9:66:41:b1:49:4a:7a:c0:36:b5:
d4:79:00:31:db:63:43:a2:bd:dd:c0:da:89:0f:d2:99:8a:92:
2c:ba:37:f7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYQCZlb0raNW4TnECD1jrjgXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDIzMDExMjUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTA5YTE0YTczODUzMjRjMWIwODIwYTA3ZDg3NmE0ZmVkNTdjNDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj85c9H+XEUUf+qGXMsXQl9YAnOVu
fHfbHuH6ttPNYHi1QmH8PWwQ25zZGZDVSmTwEgCmwhEGjKoBPLoKB7ZbyT+8FGMK
0tqHI//8txb4oYRQJMcrJ1X52EazCdx/tNGtr6yjcZHsSOk+elx8X0R1ZpftgzpP
eeaPjbMgXGWjfdwhjLnff+vQ12jNKEei/337OZRWuIEEqNjzupXXYp8uqXdopdWt
tAkW6MNIOrWURvUdYUaPJf047INp+Pu93yUKYtRXwM1hyCR3fxODcLvMcsbWaaOo
UfPi4RMY0B8duA/zAIIv72qubT3zUpUuo6mIqiKTPKFJ6i+NHlm8040HbwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCEJoUpzhTJMGwggoH2Hak/tV8QQMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSVFtaFNuT0ZNa3diQ0NDZ2ZZZHFULTFYeEJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKbRvOohzMbasY/TBNMN
e+/PC9Nsim4et8EYmw7zTZ2YyHVf3LnO04SdsisYzoxa+Pq4DF9Mwxr1Vykj5vqH
WBdFG3V8lgTW8oYpEBjUCdLCD0pEGMqC+cr0JjU6AqCPZuii1eaL19dULYpFUrrB
h8chs2Sv84DGVm14lPYl4F3wZlwFG4jjBCxQOjnCwGrR8R6EEpUN5EqnyD9AsOt3
OmxjbFZrkrFAYM5lGRnojCrCgT9giIBtZ8dW8HHE7hXTdD7oZM5zslLAZCjIkAbB
pfNzYO4kQ+rV7JeyhxRrLEgYyWZBsUlKesA2tdR5ADHbY0Oivd3A2okP0pmKkiy6
N/c=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:51:59 2025 by rpki-client