Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SFKh7MJ6bna6cXxU0SToAOfO90g.roa
File: SFKh7MJ6bna6cXxU0SToAOfO90g.roa (raw, json)
Hash identifier: Dq8ou4LSCHOjKBH8h2n+Q6NNZOTiOlTNlh0sZ45YMiM=
Subject key identifier: 48:52:A1:EC:C2:7A:6E:76:BA:71:7C:54:D1:24:E8:00:E7:CE:F7:48
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01883C805B7B3015962E0FC97CE0D68CA662
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SFKh7MJ6bna6cXxU0SToAOfO90g.roa
Signing time: Sun 21 May 2023 04:10:24 +0000
ROA not before: Sun 21 May 2023 04:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3c:80:5b:7b:30:15:96:2e:0f:c9:7c:e0:d6:8c:a6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 21 04:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4852a1ecc27a6e76ba717c54d124e800e7cef748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:59:b7:3f:45:7f:72:d7:55:fd:16:dd:f7:94:
b1:f8:c4:40:67:08:f2:3d:2f:cd:bd:dc:f4:2d:59:
5e:87:59:7c:87:6e:07:4c:d5:ba:8a:fe:60:ec:81:
fa:54:05:a6:6e:08:85:81:eb:35:2d:25:82:93:7a:
84:63:c5:62:41:15:26:01:64:69:94:f6:60:fc:c0:
21:9c:5d:1c:5d:10:04:e7:7a:3c:8f:86:08:31:aa:
29:0a:5a:8e:5e:92:cc:3c:8b:60:36:73:40:b6:a2:
db:bb:1f:96:1f:d6:0f:ca:c5:fa:57:69:bc:34:1a:
cb:e6:81:b1:95:c6:30:d0:8e:8d:44:22:65:5a:ba:
51:ac:a5:3f:4c:33:a5:a1:6d:46:88:64:30:a5:4c:
02:0f:e2:69:09:77:85:77:ff:0d:8b:6c:85:6b:11:
8c:2e:7e:12:72:10:2a:d3:2a:56:4e:0b:8b:71:97:
fc:0b:1a:3d:43:a8:c6:7f:a6:a2:c2:5a:a4:47:13:
3b:4f:e0:41:a7:c3:4a:95:61:bd:ea:e7:74:79:35:
4b:5d:a2:55:00:c2:06:54:6f:bc:86:be:a7:c3:f1:
33:25:89:49:1a:04:9d:94:ba:73:3e:b5:49:cb:94:
eb:a8:ed:b1:c4:dd:74:7e:50:ea:e8:97:39:fe:4c:
c3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:52:A1:EC:C2:7A:6E:76:BA:71:7C:54:D1:24:E8:00:E7:CE:F7:48
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SFKh7MJ6bna6cXxU0SToAOfO90g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:1e:2a:84:b8:81:b3:e7:63:f7:ed:d8:2c:87:4b:0b:fc:12:
ec:ee:3f:ee:aa:0b:0e:c5:c8:b8:d6:b9:8f:cb:13:ab:d2:ba:
3c:11:49:ee:93:8b:a4:9f:d7:d0:3b:ab:1c:f3:70:25:49:49:
f6:57:86:95:e3:7f:e1:41:54:41:e1:1f:98:31:2c:98:f3:04:
48:ae:9f:6b:db:22:c8:22:67:32:d0:27:ef:5a:37:17:27:61:
c4:ab:f0:45:4c:5d:3b:94:40:a5:2b:4e:d1:c2:7e:71:b3:7b:
1b:75:2f:2d:20:c9:40:7c:28:77:be:4d:8e:ea:47:3d:48:f6:
4f:41:21:59:86:98:75:3e:6b:4c:a8:a4:ae:f4:c2:fc:40:6f:
4b:07:2c:9f:39:91:b4:b3:8a:24:30:5d:27:21:65:8a:37:95:
9b:2c:d8:69:64:66:65:55:e7:52:b8:7b:bf:9f:7e:ee:3a:47:
66:04:e7:42:ad:fc:53:74:30:6a:88:3a:03:6a:0b:de:de:c7:
ff:c5:b9:ec:20:88:56:cb:32:a0:56:93:91:64:cf:ab:11:7a:
10:b4:86:31:e4:6e:35:93:bc:f5:bf:00:64:a7:b6:77:39:d0:
eb:c0:b7:7e:1d:b0:17:c4:7c:d2:f0:ca:83:b8:a6:f3:4c:c4:
8d:f8:cf:66
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYg8gFt7MBWWLg/JfODWjKZiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTIxMDQxMDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODUyYTFlY2MyN2E2ZTc2YmE3MTdjNTRkMTI0ZTgwMGU3Y2VmNzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lm3P0V/ctdV/Rbd95Sx+MRAZwjy
PS/Nvdz0LVleh1l8h24HTNW6iv5g7IH6VAWmbgiFges1LSWCk3qEY8ViQRUmAWRp
lPZg/MAhnF0cXRAE53o8j4YIMaopClqOXpLMPItgNnNAtqLbux+WH9YPysX6V2m8
NBrL5oGxlcYw0I6NRCJlWrpRrKU/TDOloW1GiGQwpUwCD+JpCXeFd/8Ni2yFaxGM
Ln4SchAq0ypWTguLcZf8Cxo9Q6jGf6aiwlqkRxM7T+BBp8NKlWG96ud0eTVLXaJV
AMIGVG+8hr6nw/EzJYlJGgSdlLpzPrVJy5TrqO2xxN10flDq6Jc5/kzD1QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEhSoezCem52unF8VNEk6ADnzvdIMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvU0ZLaDdNSjZibmE2Y1h4VTBTVG9BT2ZPOTBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIweKoS4gbPnY/ft2CyH
Swv8EuzuP+6qCw7FyLjWuY/LE6vSujwRSe6Ti6Sf19A7qxzzcCVJSfZXhpXjf+FB
VEHhH5gxLJjzBEiun2vbIsgiZzLQJ+9aNxcnYcSr8EVMXTuUQKUrTtHCfnGzext1
Ly0gyUB8KHe+TY7qRz1I9k9BIVmGmHU+a0yopK70wvxAb0sHLJ85kbSziiQwXSch
ZYo3lZss2GlkZmVV51K4e7+ffu46R2YE50Kt/FN0MGqIOgNqC97ex//FuewgiFbL
MqBWk5Fkz6sRehC0hjHkbjWTvPW/AGSntnc50OvAt34dsBfEfNLwyoO4pvNMxI34
z2Y=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:51:32 2025 by rpki-client