Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IcZL6PLHJmgTp_4zn7tZqQCLcaY.roa
File: IcZL6PLHJmgTp_4zn7tZqQCLcaY.roa (raw, json)
Hash identifier: ga2UG99PiyE7JT9y638PNoFSRABPYYH2XPcEmVHaz1A=
Subject key identifier: 21:C6:4B:E8:F2:C7:26:68:13:A7:FE:33:9F:BB:59:A9:00:8B:71:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01824ABAF733BA9AFFA83650A98B1F8E449F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IcZL6PLHJmgTp_4zn7tZqQCLcaY.roa
Signing time: Fri 29 Jul 2022 16:12:23 +0000
ROA not before: Fri 29 Jul 2022 16:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4a:ba:f7:33:ba:9a:ff:a8:36:50:a9:8b:1f:8e:44:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 29 16:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21c64be8f2c7266813a7fe339fbb59a9008b71a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:06:f3:45:85:bb:2f:bc:6d:9b:b8:6e:67:1f:
38:40:35:5f:c7:44:67:f6:3b:58:bb:02:0d:b6:11:
d7:36:f8:48:d3:df:dc:36:9c:74:53:64:2c:27:78:
fd:37:7a:b6:03:a0:4f:18:56:32:c3:57:34:e7:d3:
d2:a6:cf:30:3b:4d:f1:3c:29:49:63:3a:af:2d:86:
4c:1b:2c:08:87:e9:dc:89:61:6b:e6:57:b2:42:db:
0c:8e:8f:f1:9c:ff:df:d8:9e:2f:ef:60:31:ed:65:
0d:6f:34:bf:7c:d0:44:e8:da:12:2b:eb:39:4e:75:
5a:a4:bf:38:92:63:e5:32:83:90:6b:61:5e:d0:c8:
bd:f5:37:65:33:fe:7e:c5:a9:c8:85:d7:8e:fa:f5:
99:db:15:8c:da:25:01:de:a0:41:33:59:4c:ae:0c:
dd:40:55:d5:7d:d9:45:e8:86:9b:c5:9d:9f:2c:d4:
1f:50:36:2d:80:c2:3c:20:8f:b1:57:b7:80:27:9b:
b4:f1:97:cc:e8:cc:c2:53:f5:9d:b5:07:16:53:ad:
03:ee:25:ec:23:43:2c:a1:b7:a5:89:c8:73:3d:34:
c8:9b:6f:8c:ff:c7:40:02:f5:de:17:0d:da:c4:22:
73:40:25:54:38:69:8b:04:52:72:62:05:38:99:17:
a0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C6:4B:E8:F2:C7:26:68:13:A7:FE:33:9F:BB:59:A9:00:8B:71:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IcZL6PLHJmgTp_4zn7tZqQCLcaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:aa:73:9b:05:d7:15:ad:bc:51:62:94:17:d7:8a:6c:f2:fa:
db:87:d5:49:33:89:31:71:00:1a:74:06:ae:03:de:26:37:7d:
2e:1e:b5:45:ed:57:6d:9f:78:09:07:89:43:62:e3:8a:7c:eb:
d5:7d:61:09:c8:6a:d2:1b:da:6b:9d:e9:41:ae:eb:3a:55:4e:
8c:06:7b:31:af:78:cb:b3:bd:bf:2c:06:f2:7d:3f:e6:fb:83:
d2:fa:0a:23:2d:a0:86:87:eb:3f:31:51:28:37:3c:1a:2a:5c:
0b:6d:ca:43:ea:f5:93:3d:b7:6a:c9:78:c1:bd:7f:a4:0a:8f:
2e:49:1c:db:a5:ea:14:07:67:07:d4:1f:c2:12:21:0c:5c:3d:
59:36:17:89:39:cb:43:12:fb:1e:92:61:07:a3:c5:19:f5:5e:
b4:df:9c:d9:20:f0:16:17:d8:43:e5:2b:bd:56:45:85:b9:71:
ee:4c:89:1c:65:cd:de:96:cb:0d:e6:e5:02:ea:38:1e:41:fa:
2a:15:00:d5:3a:2c:8c:7a:08:2f:04:41:f7:37:bb:05:3c:53:
56:9d:94:e1:73:21:87:ba:f7:de:18:b3:8b:37:40:ab:c9:69:
b0:2b:b2:d1:4b:1d:df:b5:88:b9:cf:ab:c4:42:25:c2:09:62:
b3:11:77:e0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYJKuvczupr/qDZQqYsfjkSfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzI5MTYxMjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWM2NGJlOGYyYzcyNjY4MTNhN2ZlMzM5ZmJiNTlhOTAwOGI3MWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAbzRYW7L7xtm7huZx84QDVfx0Rn
9jtYuwINthHXNvhI09/cNpx0U2QsJ3j9N3q2A6BPGFYyw1c059PSps8wO03xPClJ
YzqvLYZMGywIh+nciWFr5leyQtsMjo/xnP/f2J4v72Ax7WUNbzS/fNBE6NoSK+s5
TnVapL84kmPlMoOQa2Fe0Mi99TdlM/5+xanIhdeO+vWZ2xWM2iUB3qBBM1lMrgzd
QFXVfdlF6IabxZ2fLNQfUDYtgMI8II+xV7eAJ5u08ZfM6MzCU/WdtQcWU60D7iXs
I0MsobelichzPTTIm2+M/8dAAvXeFw3axCJzQCVUOGmLBFJyYgU4mRegMQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCHGS+jyxyZoE6f+M5+7WakAi3GmMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSWNaTDZQTEhKbWdUcF80em43dFpxUUNMY2FZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHSqc5sF1xWtvFFilBfX
imzy+tuH1UkziTFxABp0Bq4D3iY3fS4etUXtV22feAkHiUNi44p869V9YQnIatIb
2mud6UGu6zpVTowGezGveMuzvb8sBvJ9P+b7g9L6CiMtoIaH6z8xUSg3PBoqXAtt
ykPq9ZM9t2rJeMG9f6QKjy5JHNul6hQHZwfUH8ISIQxcPVk2F4k5y0MS+x6SYQej
xRn1XrTfnNkg8BYX2EPlK71WRYW5ce5MiRxlzd6Wyw3m5QLqOB5B+ioVANU6LIx6
CC8EQfc3uwU8U1adlOFzIYe6994Ys4s3QKvJabArstFLHd+1iLnPq8RCJcIJYrMR
d+A=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:34:12 2025 by rpki-client