Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R1NED_K7N6EoD2TUa_oLwm6jtx4.roa
File: R1NED_K7N6EoD2TUa_oLwm6jtx4.roa (raw, json)
Hash identifier: ril3hsL6kqj4JV8BtP5L+kgar88K3vaATzw1BbYvRIQ=
Subject key identifier: 47:53:44:0F:F2:BB:37:A1:28:0F:64:D4:6B:FA:0B:C2:6E:A3:B7:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868EE5913E935EBC4A2B0D558F5021174F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R1NED_K7N6EoD2TUa_oLwm6jtx4.roa
Signing time: Sun 26 Feb 2023 18:04:14 +0000
ROA not before: Sun 26 Feb 2023 18:04:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:8ee5:82b0/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8e:e5:91:3e:93:5e:bc:4a:2b:0d:55:8f:50:21:17:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 18:04:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4753440ff2bb37a1280f64d46bfa0bc26ea3b71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:33:12:68:03:20:0a:6b:6c:43:77:b3:fa:5d:
41:08:03:78:c4:9f:7b:68:6b:d1:69:4d:cf:31:b8:
03:5b:d7:88:81:55:bd:20:f4:21:ce:72:97:e1:e2:
ae:ab:f9:6d:48:b0:4c:c8:33:dd:c6:99:12:05:74:
1b:43:b2:21:12:72:28:86:f1:c0:ab:b5:56:01:21:
47:53:84:63:a4:e4:96:44:81:0c:bc:4c:4f:51:35:
72:c7:23:02:b9:9b:34:b6:73:04:fc:94:ba:4a:bf:
ee:db:03:43:c1:e8:3f:54:f3:d2:92:77:3b:56:32:
c4:dc:b9:7e:ed:34:fb:61:ee:e8:19:4c:12:a8:e6:
7b:5c:a2:67:0e:1f:54:e8:29:53:f0:9b:a5:96:5f:
d0:83:0c:26:0d:a6:a7:5a:d8:e9:8f:f5:57:7e:57:
b6:5e:0d:20:52:cd:90:dc:f2:12:ca:1e:ef:db:44:
4b:bc:c8:11:18:e0:11:55:10:58:a6:7e:65:1d:d4:
88:9e:6f:05:7d:94:64:77:c2:bd:71:24:92:ae:73:
64:ea:be:8a:05:50:0a:3a:f4:4e:1c:19:73:cd:d7:
dd:f4:f9:42:a4:f3:06:eb:1d:45:0b:7b:55:16:ba:
f6:99:e1:24:c1:9a:7d:be:1f:92:73:86:25:ba:b7:
70:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:53:44:0F:F2:BB:37:A1:28:0F:64:D4:6B:FA:0B:C2:6E:A3:B7:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R1NED_K7N6EoD2TUa_oLwm6jtx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:66:10:ec:ed:f6:01:98:a9:62:c8:d3:0d:5a:9d:a2:4b:7d:
09:b0:17:22:f7:e1:78:6e:1f:b5:58:3d:c4:02:2c:e2:7b:97:
c6:86:b9:c4:4b:16:26:b9:b9:01:24:c0:d3:81:12:34:eb:29:
b9:ec:74:03:24:76:65:7a:6e:c2:56:2e:8a:b4:84:51:fa:a2:
38:2e:f2:ea:6d:52:37:6c:c7:79:76:74:2b:fb:69:a0:40:67:
1f:7d:83:6f:0f:94:83:53:b9:41:51:bb:db:ff:d6:10:74:6b:
0e:04:09:a7:92:a6:e1:10:dc:a0:cd:45:60:b7:42:61:6f:5b:
e4:ee:ee:a1:ba:af:bd:12:b0:c0:3f:dc:e9:80:f0:07:3d:d0:
7a:16:b3:33:e2:ff:00:90:6b:40:ca:af:54:56:75:cb:28:d4:
60:c7:5c:c1:a7:51:cf:6b:1f:58:a2:7b:9f:3b:d4:87:ec:67:
31:66:2f:bd:bd:c9:27:dc:a4:63:52:b6:c8:41:05:ed:d7:cb:
45:bf:ba:5a:ca:2f:17:4d:1f:36:1f:62:68:0e:9c:3d:86:cc:
89:df:d6:02:ff:25:86:5f:9a:2c:53:9f:df:c7:3e:3c:29:91:
19:bf:d8:75:3c:cb:a3:63:2c:f2:bf:26:8e:35:77:89:ca:23:
47:d4:eb:e1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaO5ZE+k168SisNVY9QIRdPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjI2MTgwNDE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzUzNDQwZmYyYmIzN2ExMjgwZjY0ZDQ2YmZhMGJjMjZlYTNiNzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDMSaAMgCmtsQ3ez+l1BCAN4xJ97
aGvRaU3PMbgDW9eIgVW9IPQhznKX4eKuq/ltSLBMyDPdxpkSBXQbQ7IhEnIohvHA
q7VWASFHU4RjpOSWRIEMvExPUTVyxyMCuZs0tnME/JS6Sr/u2wNDweg/VPPSknc7
VjLE3Ll+7TT7Ye7oGUwSqOZ7XKJnDh9U6ClT8Julll/QgwwmDaanWtjpj/VXfle2
Xg0gUs2Q3PISyh7v20RLvMgRGOARVRBYpn5lHdSInm8FfZRkd8K9cSSSrnNk6r6K
BVAKOvROHBlzzdfd9PlCpPMG6x1FC3tVFrr2meEkwZp9vh+Sc4YlurdwhQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEdTRA/yuzehKA9k1Gv6C8Juo7ceMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUjFORURfSzdONkVvRDJUVWFfb0x3bTZqdHg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABRmEOzt9gGYqWLI0w1a
naJLfQmwFyL34XhuH7VYPcQCLOJ7l8aGucRLFia5uQEkwNOBEjTrKbnsdAMkdmV6
bsJWLoq0hFH6ojgu8uptUjdsx3l2dCv7aaBAZx99g28PlINTuUFRu9v/1hB0aw4E
CaeSpuEQ3KDNRWC3QmFvW+Tu7qG6r70SsMA/3OmA8Ac90HoWszPi/wCQa0DKr1RW
dcso1GDHXMGnUc9rH1iie5871IfsZzFmL729ySfcpGNStshBBe3Xy0W/ulrKLxdN
HzYfYmgOnD2GzInf1gL/JYZfmixTn9/HPjwpkRm/2HU8y6NjLPK/Jo41d4nKI0fU
6+E=
-----END CERTIFICATE-----
Generated at Thu May 1 04:20:53 2025 by rpki-client