Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ShXnQ8l4UFZBAJgiHVOq6RE2_cM.roa
File: ShXnQ8l4UFZBAJgiHVOq6RE2_cM.roa (raw, json)
Hash identifier: tnKrjI7EArYzMo02W+4MBZ4VGJJ48VlzPAjLQr5SAt4=
Subject key identifier: 4A:15:E7:43:C9:78:50:56:41:00:98:22:1D:53:AA:E9:11:36:FD:C3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018567A89E4BB30EB9DEE075ED616FF222CA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ShXnQ8l4UFZBAJgiHVOq6RE2_cM.roa
Signing time: Sat 31 Dec 2022 10:09:41 +0000
ROA not before: Sat 31 Dec 2022 10:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:67:a8:9e:4b:b3:0e:b9:de:e0:75:ed:61:6f:f2:22:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 31 10:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a15e743c9785056410098221d53aae91136fdc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cb:39:9d:a4:0e:c8:b6:27:0f:f8:b9:8a:bc:
8a:c7:61:0f:e2:f2:70:4b:50:92:89:49:ac:23:29:
2f:91:66:ca:ba:bc:2a:d8:db:fa:6d:34:d3:f4:10:
da:96:e8:7a:4e:59:df:c4:74:a8:16:51:0b:62:9d:
31:65:0a:59:11:98:26:02:7a:e9:f2:8a:17:21:c2:
82:05:70:90:04:83:d7:5e:e7:bf:b1:d8:2a:83:07:
26:26:06:0e:0c:36:a9:c6:af:48:72:f9:d7:b9:75:
04:42:0b:14:60:3d:32:54:62:77:ca:d4:b1:b9:26:
43:f1:a7:c8:62:38:a0:b5:91:8e:5d:80:ce:25:cb:
bb:59:84:c1:3b:95:42:ca:e8:ab:8d:43:47:75:a4:
35:cb:a9:46:b0:a2:87:73:2d:38:4c:8d:1a:05:5c:
37:6c:e4:11:7c:33:5b:ae:bd:a5:4e:94:23:27:1f:
32:c9:ad:4b:87:37:43:e5:8c:6b:35:8e:83:19:bb:
ea:ca:37:11:6c:c9:ea:46:c1:df:89:97:24:5a:4d:
a8:8a:45:aa:78:ce:03:89:ad:b5:5a:38:30:b7:1a:
a3:06:82:8a:e5:f2:f2:82:30:78:4b:3b:d9:6d:ef:
84:81:e4:8c:f9:fe:7f:78:cf:ac:b6:96:0b:a8:73:
c8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:15:E7:43:C9:78:50:56:41:00:98:22:1D:53:AA:E9:11:36:FD:C3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ShXnQ8l4UFZBAJgiHVOq6RE2_cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:fa:46:f2:18:79:a8:f2:6d:29:0b:81:1b:56:c8:f5:2b:13:
b0:f3:9a:07:47:b4:1d:7d:5b:1a:6a:59:87:bf:8f:79:7c:46:
7f:32:7d:8f:17:61:89:93:27:93:12:ff:39:14:2c:7a:65:9a:
ba:f9:80:d3:87:c4:2f:b1:4c:99:50:82:97:6d:f4:b7:f9:ec:
a2:e7:17:00:54:0c:b5:d2:1d:ed:ca:bb:b5:ee:eb:06:fc:04:
a2:4a:2a:69:00:99:c1:4e:d0:7e:60:3c:c9:aa:65:c1:42:3d:
f6:71:2f:f4:67:2b:4a:b7:78:4c:69:a0:ba:f7:5c:1c:2b:95:
71:72:6e:37:27:df:ba:c0:3d:2c:eb:d8:ef:a9:85:7a:58:3c:
a2:3b:75:12:99:46:06:64:e3:33:09:cc:ed:bb:7c:d7:80:4c:
3d:ab:e5:f1:48:08:c2:70:5c:ea:95:01:65:5c:1d:57:f3:1b:
38:b9:bb:33:cd:2c:37:1b:30:fe:a7:df:a6:0f:3c:37:eb:0c:
ca:7e:c2:23:ec:22:a8:b4:43:6e:31:2c:8a:18:dd:d4:c7:33:
39:e2:b6:b2:f1:84:db:45:65:6d:6c:4e:5f:e7:38:bd:e6:b7:
a0:fb:4b:29:61:7c:5a:fd:c0:fc:78:65:c3:42:95:10:40:4a:
e7:c6:26:4a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVnqJ5Lsw653uB17WFv8iLKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjMxMTAwOTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTE1ZTc0M2M5Nzg1MDU2NDEwMDk4MjIxZDUzYWFlOTExMzZmZGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMs5naQOyLYnD/i5iryKx2EP4vJw
S1CSiUmsIykvkWbKurwq2Nv6bTTT9BDaluh6TlnfxHSoFlELYp0xZQpZEZgmAnrp
8ooXIcKCBXCQBIPXXue/sdgqgwcmJgYODDapxq9IcvnXuXUEQgsUYD0yVGJ3ytSx
uSZD8afIYjigtZGOXYDOJcu7WYTBO5VCyuirjUNHdaQ1y6lGsKKHcy04TI0aBVw3
bOQRfDNbrr2lTpQjJx8yya1LhzdD5YxrNY6DGbvqyjcRbMnqRsHfiZckWk2oikWq
eM4Dia21WjgwtxqjBoKK5fLygjB4SzvZbe+EgeSM+f5/eM+stpYLqHPInQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEoV50PJeFBWQQCYIh1TqukRNv3DMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvU2hYblE4bDRVRlpCQUpnaUhWT3E2UkUyX2NNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALT6RvIYeajybSkLgRtW
yPUrE7DzmgdHtB19WxpqWYe/j3l8Rn8yfY8XYYmTJ5MS/zkULHplmrr5gNOHxC+x
TJlQgpdt9Lf57KLnFwBUDLXSHe3Ku7Xu6wb8BKJKKmkAmcFO0H5gPMmqZcFCPfZx
L/RnK0q3eExpoLr3XBwrlXFybjcn37rAPSzr2O+phXpYPKI7dRKZRgZk4zMJzO27
fNeATD2r5fFICMJwXOqVAWVcHVfzGzi5uzPNLDcbMP6n36YPPDfrDMp+wiPsIqi0
Q24xLIoY3dTHMznitrLxhNtFZW1sTl/nOL3mt6D7SylhfFr9wPx4ZcNClRBASufG
Jko=
-----END CERTIFICATE-----
Generated at Thu May 1 05:00:14 2025 by rpki-client