Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SdI6znHigSasUKV3Tf6f9-7td_0.roa
File: SdI6znHigSasUKV3Tf6f9-7td_0.roa (raw, json)
Hash identifier: fNDhQyk6CjBZOvmcPYGgBbRLDjuNn8XdEONRLKk9h5U=
Subject key identifier: 49:D2:3A:CE:71:E2:81:26:AC:50:A5:77:4D:FE:9F:F7:EE:ED:77:FD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01887338A5AD33E9A6D9E49C1497C64AA7D5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SdI6znHigSasUKV3Tf6f9-7td_0.roa
Signing time: Wed 31 May 2023 19:11:12 +0000
ROA not before: Wed 31 May 2023 19:11:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:73:38:a5:ad:33:e9:a6:d9:e4:9c:14:97:c6:4a:a7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 31 19:11:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49d23ace71e28126ac50a5774dfe9ff7eeed77fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:78:e1:dd:05:f9:c5:42:40:1d:fb:e7:c0:f1:
9c:ec:05:90:50:a3:13:3d:e8:21:fa:07:4e:9d:ce:
b5:6d:fa:c4:0e:91:3e:3f:07:50:32:a7:3e:65:36:
db:ea:91:fd:a3:ef:ac:52:4a:d4:b1:3f:29:fb:86:
4f:2a:78:70:63:12:1e:b8:99:77:6c:fb:32:60:45:
48:b0:72:10:1b:7a:67:a4:5d:dc:f9:7e:aa:20:53:
e6:96:4c:dc:87:fd:32:bf:05:00:98:2e:0e:ab:c1:
67:4d:b6:9f:4d:8b:13:6b:35:84:f6:e4:d9:5a:a7:
b2:ca:f4:c1:ac:b2:37:97:73:ee:88:c1:20:df:7b:
8c:f5:3d:d4:a4:13:e5:6c:0e:2d:c7:df:69:36:24:
02:91:70:4f:31:bf:8c:d5:69:c9:69:b5:e5:9d:e4:
40:82:3e:d9:61:0f:dc:e9:a5:ae:57:5c:3c:78:a4:
13:9d:8d:c6:e5:2b:28:5e:80:2c:f2:34:b4:b6:79:
52:fc:aa:68:33:e1:2e:ff:24:e4:12:fe:52:9d:86:
2f:97:b0:81:46:46:2f:db:3b:95:3f:d9:94:09:22:
74:87:80:29:f2:0a:1e:c4:c6:f8:db:07:84:1b:3c:
79:37:ea:42:fc:eb:24:26:2c:46:f2:bf:dc:ae:25:
d2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D2:3A:CE:71:E2:81:26:AC:50:A5:77:4D:FE:9F:F7:EE:ED:77:FD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SdI6znHigSasUKV3Tf6f9-7td_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:59:37:54:76:91:17:cb:84:52:be:fd:fd:96:b3:d2:56:1a:
a2:8b:23:75:5e:be:ee:63:b2:5e:5f:32:54:a5:fc:93:c0:e7:
99:d2:65:90:e6:cb:b1:df:52:61:f3:70:d6:89:6e:58:66:ea:
b5:cd:61:af:66:80:d0:53:5b:c2:23:7e:bc:35:bc:a7:64:f1:
70:1c:cc:ce:a9:b0:e0:2f:c3:a4:77:f8:c6:80:90:0f:a7:e4:
10:bc:78:5c:ec:c8:a4:80:59:01:13:cb:67:ce:c0:67:b4:52:
4e:3a:75:25:3e:a4:82:69:f1:8e:a6:c9:44:78:40:a9:94:29:
1d:36:a0:3c:8c:fe:76:44:aa:8e:11:26:e7:2c:25:a6:21:37:
db:47:27:c8:44:a4:de:7a:c7:78:60:2d:92:97:dc:01:16:7d:
d2:66:b7:2d:c4:9f:21:68:64:eb:c4:d5:f5:b2:17:1c:1d:03:
ef:7b:ae:71:5e:04:ec:11:ae:ec:a8:c5:56:7f:e2:13:14:f7:
5d:c0:32:d2:b6:a8:46:67:74:c9:1f:75:fb:d8:b1:f0:89:1e:
d7:42:bc:de:24:b8:d7:17:25:13:0a:f3:04:77:c0:bc:bf:17:
74:ff:99:0e:92:2f:7e:6a:c0:26:26:2b:45:f4:11:72:9c:3e:
15:e7:cc:ab
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhzOKWtM+mm2eScFJfGSqfVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTMxMTkxMTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWQyM2FjZTcxZTI4MTI2YWM1MGE1Nzc0ZGZlOWZmN2VlZWQ3N2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23jh3QX5xUJAHfvnwPGc7AWQUKMT
Pegh+gdOnc61bfrEDpE+PwdQMqc+ZTbb6pH9o++sUkrUsT8p+4ZPKnhwYxIeuJl3
bPsyYEVIsHIQG3pnpF3c+X6qIFPmlkzch/0yvwUAmC4Oq8FnTbafTYsTazWE9uTZ
WqeyyvTBrLI3l3PuiMEg33uM9T3UpBPlbA4tx99pNiQCkXBPMb+M1WnJabXlneRA
gj7ZYQ/c6aWuV1w8eKQTnY3G5SsoXoAs8jS0tnlS/KpoM+Eu/yTkEv5SnYYvl7CB
RkYv2zuVP9mUCSJ0h4Ap8goexMb42weEGzx5N+pC/OskJixG8r/criXSiQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEnSOs5x4oEmrFCld03+n/fu7Xf9MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvU2RJNnpuSGlnU2FzVUtWM1RmNmY5LTd0ZF8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACRZN1R2kRfLhFK+/f2W
s9JWGqKLI3Vevu5jsl5fMlSl/JPA55nSZZDmy7HfUmHzcNaJblhm6rXNYa9mgNBT
W8Ijfrw1vKdk8XAczM6psOAvw6R3+MaAkA+n5BC8eFzsyKSAWQETy2fOwGe0Uk46
dSU+pIJp8Y6myUR4QKmUKR02oDyM/nZEqo4RJucsJaYhN9tHJ8hEpN56x3hgLZKX
3AEWfdJmty3EnyFoZOvE1fWyFxwdA+97rnFeBOwRruyoxVZ/4hMU913AMtK2qEZn
dMkfdfvYsfCJHtdCvN4kuNcXJRMK8wR3wLy/F3T/mQ6SL35qwCYmK0X0EXKcPhXn
zKs=
-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:41 2025 by rpki-client