Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Py6hrBc8Zm1SmD3i-TjyGbCraDo.roa
File: Py6hrBc8Zm1SmD3i-TjyGbCraDo.roa (raw, json)
Hash identifier: TPL5QadIflIozqhExp+KpnY/pB4vbCeyDFBiLQeY0+E=
Subject key identifier: 3F:2E:A1:AC:17:3C:66:6D:52:98:3D:E2:F9:38:F2:19:B0:AB:68:3A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850DC10C893A31F09D54C53E010D4B3993
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Py6hrBc8Zm1SmD3i-TjyGbCraDo.roa
Signing time: Tue 13 Dec 2022 23:10:33 +0000
ROA not before: Tue 13 Dec 2022 23:10:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0d:c1:0c:89:3a:31:f0:9d:54:c5:3e:01:0d:4b:39:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 13 23:10:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f2ea1ac173c666d52983de2f938f219b0ab683a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:be:ff:d7:ab:38:f4:c9:39:a7:c5:0b:80:e0:
e8:c1:50:d5:93:38:90:d9:52:20:73:17:b5:d4:8d:
40:5d:af:60:66:72:5b:9d:c9:87:c0:b3:38:20:c8:
c8:38:e5:21:16:6e:cd:b7:5b:8e:f5:b4:16:fe:91:
e2:5d:c6:91:0f:87:9d:7d:28:c8:7a:a2:cf:87:4b:
96:e8:f5:b7:76:e5:8f:11:65:4d:f5:78:13:3d:82:
90:dd:b1:0b:29:7d:80:65:8d:11:f8:6e:df:34:15:
67:a9:09:37:4c:c0:12:47:52:65:8b:e5:92:7d:b3:
d5:18:a6:85:06:23:9f:f0:0e:23:1b:f9:7d:97:bb:
a6:9a:0e:92:9d:78:69:64:08:84:a0:e9:be:06:8b:
83:6a:f9:81:5a:fa:06:db:86:d9:43:a8:13:8f:13:
e6:b0:13:c1:55:a3:6a:3b:9c:30:93:98:47:7b:87:
2d:d8:c6:f7:26:ca:bb:55:61:ca:cf:da:94:20:6c:
a4:90:7c:3b:aa:f8:6e:e1:c6:f9:93:7d:83:bf:c9:
b5:4a:9f:86:18:6d:93:53:27:18:26:a7:df:dc:c5:
5e:18:3e:4f:ab:72:bb:76:da:77:b0:2b:29:7f:fd:
2c:1a:c4:19:81:17:e7:14:46:32:dd:0d:db:cf:20:
4c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2E:A1:AC:17:3C:66:6D:52:98:3D:E2:F9:38:F2:19:B0:AB:68:3A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Py6hrBc8Zm1SmD3i-TjyGbCraDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:2e:04:b8:12:9a:41:10:14:db:18:0f:6d:da:21:6c:0c:fc:
db:c8:d4:eb:57:8e:19:6f:ec:70:62:89:5d:b2:d5:02:c4:27:
bc:da:87:3b:ba:c1:d0:12:a9:d0:c8:4d:12:26:e7:9c:68:ae:
6e:81:69:b2:92:a6:ea:50:d2:15:a3:0b:0c:0d:d6:62:93:d2:
35:a8:66:d4:df:be:08:2e:b9:a3:5a:89:ce:3e:07:aa:ee:f4:
22:4e:19:91:3c:d1:ee:2c:0c:a6:8d:8b:7e:4a:0f:86:c3:75:
50:a9:0f:d9:ab:3c:b0:b7:73:81:72:82:32:c9:38:a1:3b:9c:
de:7b:7b:90:0a:9c:19:02:ce:30:a5:11:c8:8b:bc:57:eb:c2:
4f:18:26:45:69:d2:0d:d5:cd:e3:54:c8:15:1a:e1:20:65:70:
56:47:fb:27:34:5e:0f:d2:ce:e9:1e:92:cc:91:e7:bd:cf:a1:
b0:1c:49:d1:10:46:f8:14:55:e3:f2:e4:cc:cc:f1:31:98:fa:
be:4e:f2:c4:8c:3d:9d:d9:b3:65:91:68:e9:04:42:e3:65:42:
dc:9f:ae:b2:ca:69:42:46:e1:d8:5c:0c:29:94:9c:cc:bd:26:
6e:3d:39:c8:b4:8f:db:c7:0c:40:17:ad:16:c7:47:98:78:48:
a1:d5:6a:4d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUNwQyJOjHwnVTFPgENSzmTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjEzMjMxMDMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjJlYTFhYzE3M2M2NjZkNTI5ODNkZTJmOTM4ZjIxOWIwYWI2ODNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL7/16s49Mk5p8ULgODowVDVkziQ
2VIgcxe11I1AXa9gZnJbncmHwLM4IMjIOOUhFm7Nt1uO9bQW/pHiXcaRD4edfSjI
eqLPh0uW6PW3duWPEWVN9XgTPYKQ3bELKX2AZY0R+G7fNBVnqQk3TMASR1Jli+WS
fbPVGKaFBiOf8A4jG/l9l7ummg6SnXhpZAiEoOm+BouDavmBWvoG24bZQ6gTjxPm
sBPBVaNqO5wwk5hHe4ct2Mb3Jsq7VWHKz9qUIGykkHw7qvhu4cb5k32Dv8m1Sp+G
GG2TUycYJqff3MVeGD5Pq3K7dtp3sCspf/0sGsQZgRfnFEYy3Q3bzyBMUQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFD8uoawXPGZtUpg94vk48hmwq2g6MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUHk2aHJCYzhabTFTbUQzaS1UanlHYkNyYURvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADQuBLgSmkEQFNsYD23a
IWwM/NvI1OtXjhlv7HBiiV2y1QLEJ7zahzu6wdASqdDITRIm55xorm6BabKSpupQ
0hWjCwwN1mKT0jWoZtTfvgguuaNaic4+B6ru9CJOGZE80e4sDKaNi35KD4bDdVCp
D9mrPLC3c4FygjLJOKE7nN57e5AKnBkCzjClEciLvFfrwk8YJkVp0g3VzeNUyBUa
4SBlcFZH+yc0Xg/SzukeksyR573PobAcSdEQRvgUVePy5MzM8TGY+r5O8sSMPZ3Z
s2WRaOkEQuNlQtyfrrLKaUJG4dhcDCmUnMy9Jm49Oci0j9vHDEAXrRbHR5h4SKHV
ak0=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:59:27 2025 by rpki-client