Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mt5unDnZNsQK6l9JxJ1m-CBOdak.roa
File: Mt5unDnZNsQK6l9JxJ1m-CBOdak.roa (raw, json)
Hash identifier: uCXvKd/LhaeGQzDkx2t0Sdcoc9Xf7UP70HN1Xw0Ldzw=
Subject key identifier: 32:DE:6E:9C:39:D9:36:C4:0A:EA:5F:49:C4:9D:66:F8:20:4E:75:A9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01829CB4F7C41A1E09EA9F7E495D2729AADD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mt5unDnZNsQK6l9JxJ1m-CBOdak.roa
Signing time: Sun 14 Aug 2022 14:14:41 +0000
ROA not before: Sun 14 Aug 2022 14:14:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:9c:b4:f7:c4:1a:1e:09:ea:9f:7e:49:5d:27:29:aa:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 14 14:14:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32de6e9c39d936c40aea5f49c49d66f8204e75a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:60:01:cd:13:0c:34:b7:3b:71:1c:cd:64:44:
92:7f:f7:59:ce:13:4f:18:6b:4c:c1:a2:e1:dc:57:
17:0f:87:06:74:7d:87:47:8f:70:2a:fb:32:1f:e1:
71:b4:00:47:49:fe:b7:ca:44:0a:5f:32:07:26:89:
e9:e8:4a:ff:9b:a9:c0:91:97:ab:0e:43:a4:68:92:
f0:1a:33:58:ae:87:8e:27:c3:84:fe:08:80:51:3d:
d8:1c:98:86:26:74:fc:0d:50:94:1b:8a:e0:2c:ab:
4a:50:3d:b8:ef:5b:cf:f5:c6:fd:4e:05:f7:81:0e:
74:7f:a8:dd:43:4c:7c:a2:a6:e8:ef:8b:d9:34:8e:
22:b2:a3:4d:a1:59:75:4d:fa:b0:d8:47:bc:93:61:
65:03:e0:c6:bb:4e:05:f3:dd:4f:c2:eb:cf:2d:8d:
f2:45:d0:35:6b:5e:04:1f:a6:19:2e:b2:aa:aa:fb:
cb:77:5f:5f:30:dd:ae:c3:38:b0:8d:2b:16:84:f3:
69:83:15:ff:c8:b2:9c:b9:6e:45:ac:8c:b4:47:a4:
b0:65:d9:4c:10:a3:2a:5f:44:4f:32:9b:b4:14:d0:
f2:b8:e8:fc:e3:90:15:02:1a:f6:58:8e:06:47:05:
7d:a3:fc:03:d9:34:64:58:0f:29:76:7e:4f:79:8d:
90:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DE:6E:9C:39:D9:36:C4:0A:EA:5F:49:C4:9D:66:F8:20:4E:75:A9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Mt5unDnZNsQK6l9JxJ1m-CBOdak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:8d:50:25:1c:5b:95:7d:ab:70:18:87:d1:01:49:93:f9:56:
65:fd:f6:5c:47:22:71:fe:73:f3:a0:5e:11:81:43:3f:85:37:
76:06:d3:7c:f4:b7:a0:d8:43:b6:6c:e3:cc:c9:34:8c:f7:3d:
7d:d6:e8:85:ba:c9:d9:3d:4e:8a:12:43:bd:b0:ae:8f:a4:48:
fb:55:88:26:c2:7f:96:66:36:99:b6:ec:64:e8:83:b8:4f:31:
a8:f3:d9:96:63:31:77:50:c8:16:ff:9a:9f:d3:fe:8c:4d:09:
0d:d6:e2:2d:74:94:85:37:0b:21:b0:34:9f:8b:57:c5:34:6b:
ee:a9:4a:25:c7:10:41:5c:a2:f2:7a:5a:3f:30:ba:e2:24:e6:
9e:ae:43:85:aa:81:d8:96:c8:1f:56:bb:17:30:b9:5a:8f:37:
f5:05:0a:1a:c3:d7:a1:c2:cb:fc:49:57:4c:e0:66:87:d0:a1:
c2:6d:3b:59:c0:33:63:bb:71:93:cb:1c:82:8c:41:2d:18:fc:
bd:d3:62:b4:2c:dc:51:45:af:6a:3a:b0:9f:85:fb:7c:89:e4:
ff:17:b6:07:b5:5c:3f:c5:db:09:de:36:04:cf:b2:4d:77:32:
65:ec:99:ca:f5:14:29:cf:ab:f4:12:4e:c5:5f:64:28:92:c4:
11:71:0a:c3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYKctPfEGh4J6p9+SV0nKardMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODE0MTQxNDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmRlNmU5YzM5ZDkzNmM0MGFlYTVmNDljNDlkNjZmODIwNGU3NWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGABzRMMNLc7cRzNZESSf/dZzhNP
GGtMwaLh3FcXD4cGdH2HR49wKvsyH+FxtABHSf63ykQKXzIHJonp6Er/m6nAkZer
DkOkaJLwGjNYroeOJ8OE/giAUT3YHJiGJnT8DVCUG4rgLKtKUD2471vP9cb9TgX3
gQ50f6jdQ0x8oqbo74vZNI4isqNNoVl1Tfqw2Ee8k2FlA+DGu04F891PwuvPLY3y
RdA1a14EH6YZLrKqqvvLd19fMN2uwziwjSsWhPNpgxX/yLKcuW5FrIy0R6SwZdlM
EKMqX0RPMpu0FNDyuOj845AVAhr2WI4GRwV9o/wD2TRkWA8pdn5PeY2QCwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDLebpw52TbECupfScSdZvggTnWpMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTXQ1dW5EblpOc1FLNmw5SnhKMW0tQ0JPZGFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEaNUCUcW5V9q3AYh9EB
SZP5VmX99lxHInH+c/OgXhGBQz+FN3YG03z0t6DYQ7Zs48zJNIz3PX3W6IW6ydk9
TooSQ72wro+kSPtViCbCf5ZmNpm27GTog7hPMajz2ZZjMXdQyBb/mp/T/oxNCQ3W
4i10lIU3CyGwNJ+LV8U0a+6pSiXHEEFcovJ6Wj8wuuIk5p6uQ4WqgdiWyB9Wuxcw
uVqPN/UFChrD16HCy/xJV0zgZofQocJtO1nAM2O7cZPLHIKMQS0Y/L3TYrQs3FFF
r2o6sJ+F+3yJ5P8Xtge1XD/F2wneNgTPsk13MmXsmcr1FCnPq/QSTsVfZCiSxBFx
CsM=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:37:15 2025 by rpki-client