Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S5_GvQ4sOEb3yXh6ak6k9iSMm_E.roa
File: S5_GvQ4sOEb3yXh6ak6k9iSMm_E.roa (raw, json)
Hash identifier: xKKjauLC06b3LfJ3KSQR0ygdoq2fDChP3ZrVEPwhcMI=
Subject key identifier: 4B:9F:C6:BD:0E:2C:38:46:F7:C9:78:7A:6A:4E:A4:F6:24:8C:9B:F1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B784D36FFCDE5A9B68A7937A1DB1F67A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S5_GvQ4sOEb3yXh6ak6k9iSMm_E.roa
Signing time: Mon 06 Mar 2023 15:23:00 +0000
ROA not before: Mon 06 Mar 2023 15:23:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b7:84:d3:6f:fc:de:5a:9b:68:a7:93:7a:1d:b1:f6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 15:23:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b9fc6bd0e2c3846f7c9787a6a4ea4f6248c9bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1d:79:52:3b:65:0e:1f:5a:0b:d9:c4:e7:55:
26:b7:6d:05:c8:85:e6:d6:6e:53:7f:e6:37:8d:d2:
fc:62:86:57:3d:40:d7:53:07:96:ab:09:38:64:4c:
f8:b7:9e:11:07:6c:1b:d6:ae:e6:f2:75:fb:b3:30:
be:cd:2e:b6:53:dc:81:84:4e:0b:19:b3:14:8d:89:
ea:a7:b1:95:9b:97:29:9e:3c:da:18:e1:dd:b4:c4:
ca:e3:2d:94:80:d8:e3:68:5e:f3:a1:5b:a5:e8:ea:
00:e2:9f:2c:8e:23:52:24:cf:c8:af:85:c8:e3:a5:
71:fe:8d:0c:2f:f0:ad:ad:69:f0:02:20:96:58:4f:
28:9c:3c:2b:b8:7f:a5:13:b3:b0:d1:6f:af:fe:fd:
a8:40:0f:ef:44:bf:bb:f4:dd:be:78:da:6a:d0:da:
55:aa:4f:13:3a:b0:45:6c:ff:3b:c4:ae:5d:5d:d2:
cf:e1:98:ed:b6:f9:09:4d:da:4a:14:33:2e:b6:ab:
de:79:2f:2f:0a:c3:42:11:1f:d7:7c:b9:ed:d4:1d:
a6:f3:eb:45:a4:5e:0f:bc:29:05:ca:9c:bb:c0:ac:
f4:98:0f:3e:ac:99:dd:f1:e2:29:04:35:b1:c6:9d:
b9:bc:58:d4:ae:27:27:82:1f:49:1a:62:31:c2:8b:
73:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9F:C6:BD:0E:2C:38:46:F7:C9:78:7A:6A:4E:A4:F6:24:8C:9B:F1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S5_GvQ4sOEb3yXh6ak6k9iSMm_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:20:70:db:ac:9b:30:22:4b:7b:81:85:2c:0b:c2:ec:d1:4f:
ed:f1:f5:ed:6a:b5:7d:67:79:f2:e1:e8:08:57:ba:13:e5:d8:
67:da:06:d6:51:a0:89:56:6f:fa:d1:69:86:4a:f7:63:a5:21:
7b:6a:4c:60:8d:c9:90:1c:12:28:f8:5c:43:75:01:b7:1e:ff:
d0:89:e1:89:bd:d7:9a:9e:07:86:ff:73:a9:34:03:7f:e9:75:
8c:76:de:b5:4d:3f:b9:ab:ad:a1:29:f6:7f:e4:bd:e3:8d:ef:
19:df:42:2b:f0:a2:31:c0:de:9d:db:d6:e9:19:43:8a:71:37:
ef:95:31:90:6f:07:06:a9:24:e3:60:54:16:d3:44:59:36:67:
b7:8f:29:3c:da:3b:79:ac:2b:35:6f:1d:a7:c3:1e:59:22:4d:
b2:a4:2c:d2:3c:68:61:e9:bb:2b:fa:e4:91:e4:be:fc:4f:a0:
12:57:61:c2:69:dc:65:b6:f6:f7:6b:cc:f9:fe:a8:ee:74:54:
1b:f7:cb:a6:14:dd:15:ee:5a:40:8d:2d:f0:d2:1a:ad:e8:22:
f8:d3:a0:86:ee:74:32:43:7b:8e:a5:bf:19:16:d4:be:2a:c5:
a7:8a:a9:ea:74:a1:a3:1b:19:9a:c3:9f:0c:e4:42:c0:f7:3d:
3c:db:d2:f7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYa3hNNv/N5am2ink3odsfZ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzA2MTUyMzAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjlmYzZiZDBlMmMzODQ2ZjdjOTc4N2E2YTRlYTRmNjI0OGM5YmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6x15UjtlDh9aC9nE51Umt20FyIXm
1m5Tf+Y3jdL8YoZXPUDXUweWqwk4ZEz4t54RB2wb1q7m8nX7szC+zS62U9yBhE4L
GbMUjYnqp7GVm5cpnjzaGOHdtMTK4y2UgNjjaF7zoVul6OoA4p8sjiNSJM/Ir4XI
46Vx/o0ML/CtrWnwAiCWWE8onDwruH+lE7Ow0W+v/v2oQA/vRL+79N2+eNpq0NpV
qk8TOrBFbP87xK5dXdLP4ZjttvkJTdpKFDMutqveeS8vCsNCER/XfLnt1B2m8+tF
pF4PvCkFypy7wKz0mA8+rJnd8eIpBDWxxp25vFjUricngh9JGmIxwotzxQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEufxr0OLDhG98l4empOpPYkjJvxMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUzVfR3ZRNHNPRWIzeVhoNmFrNms5aVNNbV9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC4gcNusmzAiS3uBhSwL
wuzRT+3x9e1qtX1nefLh6AhXuhPl2GfaBtZRoIlWb/rRaYZK92OlIXtqTGCNyZAc
Eij4XEN1Abce/9CJ4Ym915qeB4b/c6k0A3/pdYx23rVNP7mrraEp9n/kveON7xnf
QivwojHA3p3b1ukZQ4pxN++VMZBvBwapJONgVBbTRFk2Z7ePKTzaO3msKzVvHafD
HlkiTbKkLNI8aGHpuyv65JHkvvxPoBJXYcJp3GW29vdrzPn+qO50VBv3y6YU3RXu
WkCNLfDSGq3oIvjToIbudDJDe46lvxkW1L4qxaeKqep0oaMbGZrDnwzkQsD3PTzb
0vc=
-----END CERTIFICATE-----
Generated at Fri May 2 14:26:22 2025 by rpki-client