Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SGnCtj9jnGHUaNwAuXlz1GIa0GI.roa
File: SGnCtj9jnGHUaNwAuXlz1GIa0GI.roa (raw, json)
Hash identifier: ppbgTtEDgSfAZK9iw9Of9e/vqwyBYI/Bd5n5PIjG78U=
Subject key identifier: 48:69:C2:B6:3F:63:9C:61:D4:68:DC:00:B9:79:73:D4:62:1A:D0:62
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A5B07171D13F523E24ABE2506F7B6CB2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SGnCtj9jnGHUaNwAuXlz1GIa0GI.roa
Signing time: Fri 03 Mar 2023 04:17:29 +0000
ROA not before: Fri 03 Mar 2023 04:17:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a5:b0:71:71:d1:3f:52:3e:24:ab:e2:50:6f:7b:6c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 3 04:17:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4869c2b63f639c61d468dc00b97973d4621ad062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:bb:4f:62:c9:21:9e:01:fb:4c:81:a9:cb:
6f:c7:e7:91:81:fb:17:f2:65:f1:db:70:86:99:35:
7c:91:04:14:63:e7:6b:99:34:8d:d9:32:ee:6d:d2:
b5:8c:06:e9:f6:4c:19:4f:e9:88:5e:a8:e4:c5:7c:
4e:a2:54:07:11:07:d6:7c:73:bc:38:bf:62:78:36:
79:e7:52:84:8d:74:ee:95:1a:fd:45:c9:64:62:b8:
cb:7e:6b:2c:17:ba:7c:20:a9:4d:b9:48:c9:3d:ef:
1c:6e:14:53:ea:23:22:1a:10:36:62:11:18:a6:9f:
93:b6:4b:7d:81:81:f0:d6:98:63:29:bf:55:41:b5:
ee:b7:46:f3:e7:5e:85:2d:28:37:eb:cb:33:43:4d:
fa:73:dd:83:aa:e5:85:1c:bc:76:87:8f:e0:e9:b1:
9b:7b:a0:bf:88:96:71:9d:a6:5f:f1:17:f6:0e:06:
07:f1:8c:10:af:43:e1:65:84:65:7c:fb:f2:d2:80:
58:00:0b:da:dc:3c:f2:ff:d7:98:19:c7:3c:0f:b0:
22:b4:98:bf:b8:00:d8:0c:8a:24:df:1c:97:a6:e0:
2f:f0:60:76:de:65:ea:7c:af:52:50:96:a6:b2:ca:
31:cb:6a:e1:b2:aa:3c:ef:cc:6e:24:66:5b:dd:52:
8f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:69:C2:B6:3F:63:9C:61:D4:68:DC:00:B9:79:73:D4:62:1A:D0:62
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SGnCtj9jnGHUaNwAuXlz1GIa0GI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:3f:32:56:7d:aa:cd:cd:53:36:91:f9:39:62:df:75:97:bc:
7b:3a:58:54:7b:67:54:43:5c:6f:0c:1b:60:96:2b:b4:5b:e7:
b7:40:6b:df:dd:cd:a4:6b:04:0c:2a:16:98:d1:7f:67:7c:e8:
1e:ff:7d:82:15:63:70:e4:84:cf:ad:b9:2a:05:0c:5b:71:1c:
87:da:0e:56:9b:96:8f:c9:1e:a1:b6:2b:75:2a:8c:03:c4:17:
53:d8:19:08:e7:10:d5:d9:89:8a:fe:ae:aa:8b:4e:8a:11:51:
9f:83:a7:f3:7a:1d:ef:2c:55:42:58:6a:41:b2:a3:95:f6:19:
ad:99:62:d9:2c:61:f0:28:14:3e:ab:be:de:0e:ff:d1:82:fb:
7c:2d:c4:13:c6:eb:39:fc:4b:6a:14:0d:2a:fc:8b:f1:85:dd:
5d:bd:58:fa:96:77:c9:39:b1:74:f4:c3:b9:ef:74:7f:2e:a2:
50:cb:5f:ba:43:3c:b1:3f:4f:97:ea:05:12:01:e6:dc:e6:68:
b5:2d:13:1b:ed:0f:0b:c1:44:21:28:f5:4e:c1:ed:3d:1c:97:
3f:96:6e:36:e0:07:51:9e:9c:d5:c8:fe:45:0c:1e:59:d5:3e:
f8:bb:68:07:17:6b:67:db:fa:2a:2d:32:90:3f:1c:9a:32:74:
9e:8e:c4:3f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYalsHFx0T9SPiSr4lBve2yyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzAzMDQxNzI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODY5YzJiNjNmNjM5YzYxZDQ2OGRjMDBiOTc5NzNkNDYyMWFkMDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMC7T2LJIZ4B+0yBqctvx+eRgfsX
8mXx23CGmTV8kQQUY+drmTSN2TLubdK1jAbp9kwZT+mIXqjkxXxOolQHEQfWfHO8
OL9ieDZ551KEjXTulRr9RclkYrjLfmssF7p8IKlNuUjJPe8cbhRT6iMiGhA2YhEY
pp+Ttkt9gYHw1phjKb9VQbXut0bz516FLSg368szQ036c92DquWFHLx2h4/g6bGb
e6C/iJZxnaZf8Rf2DgYH8YwQr0PhZYRlfPvy0oBYAAva3Dzy/9eYGcc8D7AitJi/
uADYDIok3xyXpuAv8GB23mXqfK9SUJamssoxy2rhsqo878xuJGZb3VKPnwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEhpwrY/Y5xh1GjcALl5c9RiGtBiMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvU0duQ3RqOWpuR0hVYU53QXVYbHoxR0lhMEdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACc/MlZ9qs3NUzaR+Tli
33WXvHs6WFR7Z1RDXG8MG2CWK7Rb57dAa9/dzaRrBAwqFpjRf2d86B7/fYIVY3Dk
hM+tuSoFDFtxHIfaDlablo/JHqG2K3UqjAPEF1PYGQjnENXZiYr+rqqLTooRUZ+D
p/N6He8sVUJYakGyo5X2Ga2ZYtksYfAoFD6rvt4O/9GC+3wtxBPG6zn8S2oUDSr8
i/GF3V29WPqWd8k5sXT0w7nvdH8uolDLX7pDPLE/T5fqBRIB5tzmaLUtExvtDwvB
RCEo9U7B7T0clz+WbjbgB1GenNXI/kUMHlnVPvi7aAcXa2fb+iotMpA/HJoydJ6O
xD8=
-----END CERTIFICATE-----
Generated at Sat May 3 16:10:54 2025 by rpki-client