Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Semy1hGwnRhJbUgyU1TwhU5rSVk.roa
File: Semy1hGwnRhJbUgyU1TwhU5rSVk.roa (raw, json)
Hash identifier: 3m6/rlVQ5YxTLBbE6SFXiEWpF4kt7lgippdEGq4JXOk=
Subject key identifier: 49:E9:B2:D6:11:B0:9D:18:49:6D:48:32:53:54:F0:85:4E:6B:49:59
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188BD0AD828EA9FEEB372580DB64B91A914
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Semy1hGwnRhJbUgyU1TwhU5rSVk.roa
Signing time: Thu 15 Jun 2023 03:13:04 +0000
ROA not before: Thu 15 Jun 2023 03:13:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:0a:d8:28:ea:9f:ee:b3:72:58:0d:b6:4b:91:a9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 15 03:13:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49e9b2d611b09d18496d48325354f0854e6b4959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1a:e1:fc:d8:c3:1a:e4:cb:53:03:61:12:43:
f3:18:95:30:6d:2c:2b:b1:e4:99:05:63:df:89:97:
68:a5:52:50:79:58:52:70:f4:f9:0e:9c:45:61:d5:
82:6b:37:fe:68:d0:a0:73:51:9e:b0:6d:40:28:49:
12:91:60:02:a6:2e:f2:6b:6c:7e:17:3d:43:2f:ec:
49:ca:f0:c5:10:66:ac:92:03:c4:a0:95:ce:06:03:
38:24:5e:83:5a:5a:8d:65:61:7a:e1:b1:55:d7:a0:
09:10:f0:f2:e1:13:17:6e:6e:5b:a7:9b:2d:56:c2:
98:67:c7:57:dc:83:1b:58:79:05:fe:d0:c9:e1:69:
24:c4:55:0e:bb:10:66:ad:4b:7f:29:e9:7f:dd:f2:
b0:ad:31:c2:cb:ef:62:11:4f:b2:9d:c3:75:08:46:
99:5d:62:a6:e6:37:d8:23:be:d5:03:37:26:bd:aa:
18:4d:6e:c3:13:a9:c5:52:d2:50:3c:01:ff:3f:45:
2f:2f:1b:6e:fb:c8:fd:6a:ab:45:21:57:ca:46:ef:
72:af:cc:02:09:4c:cc:f1:97:73:b2:f9:b2:a1:61:
f7:22:b4:d2:ef:54:42:a7:50:1a:94:a0:c9:51:78:
20:ce:43:cf:9d:2d:b0:56:90:6e:ab:db:15:54:2a:
4a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E9:B2:D6:11:B0:9D:18:49:6D:48:32:53:54:F0:85:4E:6B:49:59
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Semy1hGwnRhJbUgyU1TwhU5rSVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:a8:da:39:55:61:e4:c0:eb:4a:9c:74:88:d3:9a:f4:bc:7e:
12:72:24:3b:48:41:36:95:74:99:89:06:0e:21:4b:c3:de:a8:
57:f9:07:73:ab:0c:f0:55:79:56:33:ce:a5:c8:ba:74:a1:70:
46:ed:b3:10:81:39:da:08:1b:8b:8f:f4:07:80:37:de:64:51:
01:26:3c:71:42:c0:6f:04:52:c7:38:b3:cd:22:8c:d5:ce:dc:
fa:1e:b2:8a:21:c2:44:2b:0b:4d:9b:d9:09:49:ed:e7:bd:15:
09:f3:8b:5b:b6:8f:56:03:5c:7b:6f:cc:fc:ab:d6:5a:35:ca:
63:4a:da:77:e9:c3:e6:70:b9:b0:eb:3f:20:94:51:0d:51:19:
db:fc:26:6e:e6:3a:28:39:34:70:4a:35:7c:75:2b:71:d5:80:
a6:23:24:15:82:3f:64:29:0d:1c:51:0e:aa:77:e2:1f:2c:27:
38:08:83:53:c8:a0:e3:a9:e8:44:9f:70:fb:26:e2:ac:7e:70:
e1:d7:b6:35:b7:8b:8a:14:96:cc:aa:23:05:db:ed:51:72:19:
08:2c:55:fd:97:88:54:c7:04:18:c4:50:d9:cb:d8:11:e4:0d:
71:db:32:f2:a8:56:d6:0d:7e:2f:1d:43:05:be:95:9b:db:e9:
c8:ac:82:0c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYi9Ctgo6p/us3JYDbZLkakUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjE1MDMxMzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWU5YjJkNjExYjA5ZDE4NDk2ZDQ4MzI1MzU0ZjA4NTRlNmI0OTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRrh/NjDGuTLUwNhEkPzGJUwbSwr
seSZBWPfiZdopVJQeVhScPT5DpxFYdWCazf+aNCgc1GesG1AKEkSkWACpi7ya2x+
Fz1DL+xJyvDFEGaskgPEoJXOBgM4JF6DWlqNZWF64bFV16AJEPDy4RMXbm5bp5st
VsKYZ8dX3IMbWHkF/tDJ4WkkxFUOuxBmrUt/Kel/3fKwrTHCy+9iEU+yncN1CEaZ
XWKm5jfYI77VAzcmvaoYTW7DE6nFUtJQPAH/P0UvLxtu+8j9aqtFIVfKRu9yr8wC
CUzM8ZdzsvmyoWH3IrTS71RCp1AalKDJUXggzkPPnS2wVpBuq9sVVCpKdwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEnpstYRsJ0YSW1IMlNU8IVOa0lZMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvU2VteTFoR3duUmhKYlVneVUxVHdoVTVyU1ZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKuo2jlVYeTA60qcdIjT
mvS8fhJyJDtIQTaVdJmJBg4hS8PeqFf5B3OrDPBVeVYzzqXIunShcEbtsxCBOdoI
G4uP9AeAN95kUQEmPHFCwG8EUsc4s80ijNXO3PoesoohwkQrC02b2QlJ7ee9FQnz
i1u2j1YDXHtvzPyr1lo1ymNK2nfpw+ZwubDrPyCUUQ1RGdv8Jm7mOig5NHBKNXx1
K3HVgKYjJBWCP2QpDRxRDqp34h8sJzgIg1PIoOOp6ESfcPsm4qx+cOHXtjW3i4oU
lsyqIwXb7VFyGQgsVf2XiFTHBBjEUNnL2BHkDXHbMvKoVtYNfi8dQwW+lZvb6cis
ggw=
-----END CERTIFICATE-----
Generated at Fri May 2 14:24:38 2025 by rpki-client