Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NFckb4ZsDe7FvMqpHUdgWW1gYcQ.roa
File: NFckb4ZsDe7FvMqpHUdgWW1gYcQ.roa (raw, json)
Hash identifier: iEEQskYdSrOvjnP7fcDavVrhBbuywDtznAmfe2e2n68=
Subject key identifier: 34:57:24:6F:86:6C:0D:EE:C5:BC:CA:A9:1D:47:60:59:6D:60:61:C4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188DB48C2B67EC81FC8ADEFEDDC07DABE16
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NFckb4ZsDe7FvMqpHUdgWW1gYcQ.roa
Signing time: Wed 21 Jun 2023 00:09:18 +0000
ROA not before: Wed 21 Jun 2023 00:09:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:db:48:c2:b6:7e:c8:1f:c8:ad:ef:ed:dc:07:da:be:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 21 00:09:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3457246f866c0deec5bccaa91d4760596d6061c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:43:13:8e:2e:df:e3:e9:6f:1d:e0:8e:41:f0:
b6:2c:d6:9e:04:f6:81:06:05:55:23:e9:06:9c:be:
71:9d:e7:ea:ff:30:fa:ee:43:32:d1:bd:ad:19:a2:
01:23:68:9c:cd:b1:c9:6a:9e:70:3f:92:a9:6b:20:
0b:23:fa:6c:cc:50:6c:b3:df:f9:78:e3:80:0f:bd:
25:d1:b8:06:79:23:73:ac:1b:34:db:1b:58:c0:09:
87:60:8d:e9:00:da:51:52:c9:41:03:6a:3d:d3:79:
1e:b7:25:61:2f:68:09:61:ca:9e:5f:de:a4:2b:80:
12:de:66:5c:1f:f1:23:d8:6f:0b:ac:5f:1e:3f:fb:
5f:56:a4:38:8b:e4:8d:80:9f:90:49:21:13:cb:b6:
a1:7c:df:28:96:8d:b0:6d:c3:64:df:5d:ed:67:97:
94:1b:ba:3a:1a:43:db:d8:f0:3d:cf:5b:b6:f3:0a:
eb:fa:6f:69:37:68:43:46:03:c8:d0:9f:ff:26:bd:
e9:ce:64:15:40:01:bc:f6:d0:b9:8b:30:dd:5c:6d:
18:4c:8c:56:c2:b5:ba:56:a0:8a:a7:bf:94:2b:2e:
bd:26:bf:6a:2c:2b:d6:af:72:b8:1f:14:4a:35:4f:
8d:6f:be:98:22:a1:7b:e5:6c:1a:36:04:e2:46:7d:
cd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:57:24:6F:86:6C:0D:EE:C5:BC:CA:A9:1D:47:60:59:6D:60:61:C4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NFckb4ZsDe7FvMqpHUdgWW1gYcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:c9:b2:66:0a:b3:c7:8b:52:cc:ba:02:fa:49:43:b3:e4:ce:
fd:29:ac:09:c4:76:f1:7f:ca:07:12:49:1d:cf:04:cd:a0:ad:
e1:5d:d8:0f:5a:8c:75:77:a2:dc:1b:c1:7a:9e:9c:f9:f2:fe:
64:ed:ed:38:75:ce:29:aa:4d:cc:89:13:85:ff:6e:9a:12:36:
b5:26:a6:57:c3:91:8f:a5:31:df:85:ff:f7:08:c0:60:54:72:
bf:d7:6a:4b:4b:0d:58:a7:5a:8c:d6:dd:b1:9c:59:04:24:d6:
a0:17:e7:3b:3f:99:dd:43:ea:8e:a4:cc:95:e3:4f:1d:07:63:
0e:c5:76:57:87:6a:a2:44:96:61:2e:01:85:7c:ea:48:12:23:
62:8f:d9:01:e8:bd:88:ff:cd:04:c2:54:fc:86:43:5c:0a:5f:
95:4e:97:00:71:e4:f9:ab:bf:02:3e:fd:a8:0b:37:44:da:85:
8d:8e:95:8c:a3:90:59:5c:cb:70:24:8f:71:86:14:10:80:ed:
02:1d:0c:ea:40:e4:12:57:b2:00:aa:5e:79:b3:59:3b:1a:11:
44:2f:0d:72:bd:cb:80:e3:3a:de:ad:eb:3e:d5:05:6f:09:bf:
73:03:6c:46:ae:ec:b0:a7:36:71:b8:64:43:e4:bf:91:f5:48:
bb:8b:79:59
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYjbSMK2fsgfyK3v7dwH2r4WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjIxMDAwOTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDU3MjQ2Zjg2NmMwZGVlYzViY2NhYTkxZDQ3NjA1OTZkNjA2MWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUMTji7f4+lvHeCOQfC2LNaeBPaB
BgVVI+kGnL5xnefq/zD67kMy0b2tGaIBI2iczbHJap5wP5KpayALI/pszFBss9/5
eOOAD70l0bgGeSNzrBs02xtYwAmHYI3pANpRUslBA2o903ketyVhL2gJYcqeX96k
K4AS3mZcH/Ej2G8LrF8eP/tfVqQ4i+SNgJ+QSSETy7ahfN8olo2wbcNk313tZ5eU
G7o6GkPb2PA9z1u28wrr+m9pN2hDRgPI0J//Jr3pzmQVQAG89tC5izDdXG0YTIxW
wrW6VqCKp7+UKy69Jr9qLCvWr3K4HxRKNU+Nb76YIqF75WwaNgTiRn3NxwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDRXJG+GbA3uxbzKqR1HYFltYGHEMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTkZja2I0WnNEZTdGdk1xcEhVZGdXVzFnWWNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB/JsmYKs8eLUsy6AvpJ
Q7Pkzv0prAnEdvF/ygcSSR3PBM2greFd2A9ajHV3otwbwXqenPny/mTt7Th1zimq
TcyJE4X/bpoSNrUmplfDkY+lMd+F//cIwGBUcr/XaktLDVinWozW3bGcWQQk1qAX
5zs/md1D6o6kzJXjTx0HYw7FdleHaqJElmEuAYV86kgSI2KP2QHovYj/zQTCVPyG
Q1wKX5VOlwBx5PmrvwI+/agLN0TahY2OlYyjkFlcy3Akj3GGFBCA7QIdDOpA5BJX
sgCqXnmzWTsaEUQvDXK9y4DjOt6t6z7VBW8Jv3MDbEau7LCnNnG4ZEPkv5H1SLuL
eVk=
-----END CERTIFICATE-----
Generated at Fri May 2 05:17:11 2025 by rpki-client