Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PeQqL7TcgEqqI6WgdJpr6mCChsQ.roa
File: PeQqL7TcgEqqI6WgdJpr6mCChsQ.roa (raw, json)
Hash identifier: P8ih54upBbtUOnK/WbW7g3a3aaA1ED5dJmq77a4E2d8=
Subject key identifier: 3D:E4:2A:2F:B4:DC:80:4A:AA:23:A5:A0:74:9A:6B:EA:60:82:86:C4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B1031C7DB46AB97FCF05FE3C4695ED47
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PeQqL7TcgEqqI6WgdJpr6mCChsQ.roa
Signing time: Mon 12 Jun 2023 19:09:11 +0000
ROA not before: Mon 12 Jun 2023 19:09:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b1:03:1c:7d:b4:6a:b9:7f:cf:05:fe:3c:46:95:ed:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 12 19:09:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3de42a2fb4dc804aaa23a5a0749a6bea608286c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f9:de:44:a2:64:d6:e4:f8:18:f1:04:70:26:
a5:dd:3f:8d:67:8b:6b:3e:a6:28:bc:c4:f1:f2:d3:
49:50:0d:ff:d5:5b:0f:0f:c3:cf:9b:83:6a:25:c0:
63:ba:fa:6e:f3:4c:80:7f:05:65:2a:33:fa:17:5f:
5c:69:35:55:0a:7c:38:4d:d4:18:97:cb:fa:58:6f:
be:82:a6:53:b9:27:92:0e:1a:19:3a:d7:29:1d:6a:
e9:ee:ff:9f:6f:65:9e:ba:7f:18:c2:a4:8a:23:c6:
76:e4:ef:b7:e0:65:8a:81:9a:9a:5e:10:b7:22:54:
59:53:c0:51:86:3f:55:19:fd:df:98:f8:81:5d:4c:
52:12:0f:29:10:36:d5:a4:a8:21:9b:bd:fd:d8:5f:
84:63:16:67:e5:81:88:68:08:c4:db:49:23:a9:07:
1c:ea:8e:77:57:1a:1f:8a:f5:68:49:a0:db:9c:e6:
73:a2:f9:c6:21:fa:fe:1c:9b:9f:1b:55:5f:e8:54:
63:f4:f3:49:f2:31:41:00:a0:48:b5:58:06:8f:e1:
31:bb:e4:a9:8d:18:27:bf:d2:f2:c1:f0:22:a2:72:
30:03:bb:d8:3a:25:06:60:3b:d4:8a:5e:9d:8a:62:
e1:54:ce:11:16:60:58:d8:b1:99:35:cc:1b:1b:2e:
69:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E4:2A:2F:B4:DC:80:4A:AA:23:A5:A0:74:9A:6B:EA:60:82:86:C4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PeQqL7TcgEqqI6WgdJpr6mCChsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:8b:d1:3a:f9:1c:dc:25:ab:0d:ae:d0:98:f0:97:63:97:e8:
fd:62:49:b3:32:70:e9:8a:32:c9:c0:7f:d3:2d:d0:d0:47:e8:
c7:92:15:83:f2:18:11:93:aa:76:cf:1f:35:6d:0c:9a:da:a9:
e8:5a:3b:de:7a:fc:6f:2e:7f:51:1a:43:e8:d4:e5:cf:c3:19:
5b:a0:37:11:f2:28:93:b7:f6:19:49:11:4d:f4:e4:8b:0a:8b:
1e:f4:ea:3a:ae:af:0f:ba:10:17:d6:35:de:81:e0:db:dd:a5:
92:20:07:dd:fb:a9:b0:92:80:25:ff:03:b9:6c:0b:97:cc:82:
92:a9:bb:25:7b:cb:b0:aa:6a:22:ec:7d:95:54:b6:bd:b7:81:
77:bb:c4:ed:5c:8c:7d:2c:12:cb:ae:e3:60:37:49:c0:75:2a:
b2:1b:87:13:f4:ac:e6:77:dc:5a:f8:fc:62:56:f2:31:30:ca:
8a:15:ae:11:13:10:ac:87:a7:05:29:ac:9a:a2:1b:d7:d6:11:
15:2f:e4:7c:bb:41:2d:25:5f:57:0d:0d:eb:de:00:bd:1c:a5:
78:de:15:c4:3d:c3:ab:b5:1c:36:87:9f:67:9f:69:92:59:cf:
bc:21:dc:be:32:82:0b:16:f2:c3:24:35:27:79:cb:53:ad:bc:
ca:4d:9d:90
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYixAxx9tGq5f88F/jxGle1HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjEyMTkwOTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGU0MmEyZmI0ZGM4MDRhYWEyM2E1YTA3NDlhNmJlYTYwODI4NmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/neRKJk1uT4GPEEcCal3T+NZ4tr
PqYovMTx8tNJUA3/1VsPD8PPm4NqJcBjuvpu80yAfwVlKjP6F19caTVVCnw4TdQY
l8v6WG++gqZTuSeSDhoZOtcpHWrp7v+fb2Weun8YwqSKI8Z25O+34GWKgZqaXhC3
IlRZU8BRhj9VGf3fmPiBXUxSEg8pEDbVpKghm7392F+EYxZn5YGIaAjE20kjqQcc
6o53VxofivVoSaDbnOZzovnGIfr+HJufG1Vf6FRj9PNJ8jFBAKBItVgGj+Exu+Sp
jRgnv9LywfAionIwA7vYOiUGYDvUil6dimLhVM4RFmBY2LGZNcwbGy5psQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFD3kKi+03IBKqiOloHSaa+pggobEMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUGVRcUw3VGNnRXFxSTZXZ2RKcHI2bUNDaHNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJ2L0Tr5HNwlqw2u0Jjw
l2OX6P1iSbMycOmKMsnAf9Mt0NBH6MeSFYPyGBGTqnbPHzVtDJraqehaO956/G8u
f1EaQ+jU5c/DGVugNxHyKJO39hlJEU305IsKix706jqurw+6EBfWNd6B4NvdpZIg
B937qbCSgCX/A7lsC5fMgpKpuyV7y7CqaiLsfZVUtr23gXe7xO1cjH0sEsuu42A3
ScB1KrIbhxP0rOZ33Fr4/GJW8jEwyooVrhETEKyHpwUprJqiG9fWERUv5Hy7QS0l
X1cNDeveAL0cpXjeFcQ9w6u1HDaHn2efaZJZz7wh3L4yggsW8sMkNSd5y1OtvMpN
nZA=
-----END CERTIFICATE-----
Generated at Sat May 3 10:40:56 2025 by rpki-client