Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S9VGo0ZNgGPVNYmn2hkUPAAzpgA.roa
File: S9VGo0ZNgGPVNYmn2hkUPAAzpgA.roa (raw, json)
Hash identifier: LFHSEBkoSGZZRt3itDM8L2DwEaLsKJYQeFaMZn8nTI0=
Subject key identifier: 4B:D5:46:A3:46:4D:80:63:D5:35:89:A7:DA:19:14:3C:00:33:A6:00
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01840E9F5232C291E6C483C88A69B6F68B1D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S9VGo0ZNgGPVNYmn2hkUPAAzpgA.roa
Signing time: Tue 25 Oct 2022 10:10:33 +0000
ROA not before: Tue 25 Oct 2022 10:10:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0e:9f:52:32:c2:91:e6:c4:83:c8:8a:69:b6:f6:8b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 25 10:10:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bd546a3464d8063d53589a7da19143c0033a600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:29:a1:ab:8d:5d:e9:7c:62:99:03:24:d5:63:
e0:21:68:9c:f4:3a:a1:86:6a:cd:6a:09:8f:25:a3:
3c:99:57:f3:23:63:75:f9:f4:5b:07:4a:b3:82:e6:
58:72:d3:00:64:9d:68:d8:8c:4c:83:96:54:a2:d1:
0d:e7:f1:8c:18:55:20:83:31:38:17:47:f0:f1:4f:
54:6d:a1:86:36:8c:ce:d4:f7:5c:09:c4:e0:9e:c6:
ac:ba:c9:c6:f5:4b:61:e4:46:53:1b:ad:1b:33:29:
e8:22:81:2a:b9:20:03:c4:b7:cb:bf:9d:4a:75:7b:
7c:d1:af:80:b8:ab:60:e5:19:9d:ab:89:e4:4d:56:
c7:36:e2:9d:67:8e:e5:d8:11:29:91:c5:14:42:80:
69:bb:60:45:e2:3d:e1:bd:4f:e7:84:0a:0e:32:66:
74:28:ee:b1:e8:8f:7c:52:6a:11:b3:07:32:76:8a:
f3:23:71:63:b5:4d:54:41:a3:b6:f2:05:08:bf:aa:
48:35:21:9f:a9:3c:81:84:a3:dc:81:8f:4a:e4:57:
82:8b:7b:40:29:ba:ef:ad:92:aa:d8:b1:53:a0:da:
2b:3c:4a:22:85:58:fd:a8:83:31:6a:60:be:b1:41:
75:35:7d:99:5c:16:cf:e0:6e:b1:b0:0d:41:a3:22:
d3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D5:46:A3:46:4D:80:63:D5:35:89:A7:DA:19:14:3C:00:33:A6:00
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S9VGo0ZNgGPVNYmn2hkUPAAzpgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:cf:88:9e:0c:f4:87:6e:7c:db:45:c0:0f:30:db:aa:90:1e:
e3:02:bf:ab:06:b7:bc:83:28:e9:82:d1:f0:c2:5b:de:a8:ea:
b5:d6:ef:2e:85:33:79:cc:8f:ba:22:4e:ac:a9:f8:e4:c2:a4:
76:03:4e:5e:fd:40:d7:72:09:c3:00:7f:a7:3c:6e:38:72:e8:
d3:23:ab:29:11:72:e5:83:91:5e:b0:cd:75:7d:5d:0d:48:1c:
a8:15:2d:22:4e:83:90:0b:56:93:8b:11:83:f4:9b:55:45:8c:
90:5c:dc:90:15:3a:12:9b:6c:d5:95:47:90:be:d1:55:47:cb:
1c:b9:12:55:55:8d:92:39:58:de:53:80:b2:7c:ce:7c:25:fb:
8f:3f:68:3f:3a:8d:48:54:b6:e1:33:eb:6c:85:4d:6e:f9:7e:
b5:ca:a7:b6:6e:46:3f:53:ff:29:3e:1d:62:d0:99:00:90:2d:
fa:54:8c:7d:d2:08:a6:08:09:93:ef:84:f2:9c:55:63:b9:c6:
da:02:c6:d8:ae:13:ea:1a:5e:e0:58:2b:0a:e2:51:3b:c8:c4:
3f:f1:17:88:61:00:d4:89:5b:4f:20:03:e4:1c:76:f1:dc:af:
b8:3c:ea:bd:3b:e6:4b:03:e4:5d:4b:a0:86:89:34:45:fd:7b:
31:a9:54:44
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYQOn1IywpHmxIPIimm29osdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDI1MTAxMDMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmQ1NDZhMzQ2NGQ4MDYzZDUzNTg5YTdkYTE5MTQzYzAwMzNhNjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqimhq41d6XximQMk1WPgIWic9Dqh
hmrNagmPJaM8mVfzI2N1+fRbB0qzguZYctMAZJ1o2IxMg5ZUotEN5/GMGFUggzE4
F0fw8U9UbaGGNozO1PdcCcTgnsasusnG9Uth5EZTG60bMynoIoEquSADxLfLv51K
dXt80a+AuKtg5Rmdq4nkTVbHNuKdZ47l2BEpkcUUQoBpu2BF4j3hvU/nhAoOMmZ0
KO6x6I98UmoRswcydorzI3FjtU1UQaO28gUIv6pINSGfqTyBhKPcgY9K5FeCi3tA
KbrvrZKq2LFToNorPEoihVj9qIMxamC+sUF1NX2ZXBbP4G6xsA1BoyLTzwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEvVRqNGTYBj1TWJp9oZFDwAM6YAMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUzlWR28wWk5nR1BWTlltbjJoa1VQQUF6cGdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJPPiJ4M9IdufNtFwA8w
26qQHuMCv6sGt7yDKOmC0fDCW96o6rXW7y6FM3nMj7oiTqyp+OTCpHYDTl79QNdy
CcMAf6c8bjhy6NMjqykRcuWDkV6wzXV9XQ1IHKgVLSJOg5ALVpOLEYP0m1VFjJBc
3JAVOhKbbNWVR5C+0VVHyxy5ElVVjZI5WN5TgLJ8znwl+48/aD86jUhUtuEz62yF
TW75frXKp7ZuRj9T/yk+HWLQmQCQLfpUjH3SCKYICZPvhPKcVWO5xtoCxtiuE+oa
XuBYKwriUTvIxD/xF4hhANSJW08gA+QcdvHcr7g86r075ksD5F1LoIaJNEX9ezGp
VEQ=
-----END CERTIFICATE-----
Generated at Fri May 2 17:51:03 2025 by rpki-client