Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T3z5YDiHYeULM6IxmjrYSmPuCG4.roa
File: T3z5YDiHYeULM6IxmjrYSmPuCG4.roa (raw, json)
Hash identifier: Pb8ttwjEoJkuHsBpUvopZ64B/+Xml8hwCLQ621+xC8s=
Subject key identifier: 4F:7C:F9:60:38:87:61:E5:0B:33:A2:31:9A:3A:D8:4A:63:EE:08:6E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C5659DDCE28B699A99F0930CE691A583
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T3z5YDiHYeULM6IxmjrYSmPuCG4.roa
Signing time: Sat 05 Aug 2023 11:11:58 +0000
ROA not before: Sat 05 Aug 2023 11:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c5:65:9d:dc:e2:8b:69:9a:99:f0:93:0c:e6:91:a5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 11:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f7cf960388761e50b33a2319a3ad84a63ee086e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9d:85:50:af:23:46:7a:48:92:f4:8e:b1:45:
ed:ef:49:c0:7b:6c:87:de:06:a3:1a:9b:d2:1d:16:
6d:87:4d:b9:ce:0f:6e:18:bc:3f:ac:30:05:46:f6:
07:d0:a6:b1:60:ec:64:2b:bf:56:eb:c5:7a:91:07:
9c:33:53:cb:4b:0b:30:68:ea:6d:d2:cf:5c:89:c9:
5b:73:aa:a7:d3:74:45:b8:3a:4d:74:a1:73:c6:af:
b3:de:1b:f2:06:e3:39:f0:e6:4c:f8:15:b5:3d:0d:
d6:46:58:48:41:30:38:d3:39:c7:ce:ad:25:32:98:
6c:f1:1d:09:99:5e:d2:25:48:f5:ef:46:27:2a:07:
d2:d5:bb:7b:e8:59:a3:34:21:3d:54:4f:31:79:e2:
7f:e8:29:eb:21:b2:70:cc:cb:26:4c:e9:0b:96:7d:
07:00:22:59:1c:8d:48:df:4b:cb:e9:d2:be:0c:46:
b7:cd:ea:30:5d:db:01:00:ac:ae:01:02:46:a9:8f:
fb:59:b3:4e:ee:52:96:fd:b5:5b:8c:d1:77:64:9f:
e7:ba:b6:8e:29:15:38:24:53:b0:80:0a:aa:58:3b:
bc:b3:a0:f6:b0:fe:42:a0:26:13:f1:65:be:e7:0c:
bd:05:ef:68:7d:8c:b7:1e:23:d0:4d:40:dc:b9:2a:
ba:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7C:F9:60:38:87:61:E5:0B:33:A2:31:9A:3A:D8:4A:63:EE:08:6E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T3z5YDiHYeULM6IxmjrYSmPuCG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:73:bb:80:87:38:fb:75:51:0b:3a:2c:9d:e9:36:80:9f:8b:
06:d0:dc:51:48:5a:1a:bc:bb:d1:91:c5:a9:3d:bf:21:79:93:
7f:2a:d4:1f:8f:86:d8:a8:69:07:b7:a5:01:ed:6d:c8:78:3e:
d7:20:44:b1:96:23:85:69:54:48:13:d0:e7:ea:43:5d:7b:7a:
6a:9e:b5:1a:2f:94:8b:95:33:34:f8:50:2e:a1:b6:e8:1d:4b:
8b:97:98:c2:1b:e3:0a:45:03:16:0f:65:30:5d:8e:0b:b4:05:
36:b7:9e:d7:4b:51:ea:aa:fd:53:21:b1:73:7b:73:92:fd:94:
e9:29:b2:3f:ba:4f:cf:5a:f3:1e:a1:d3:ca:de:5a:f2:eb:14:
58:fa:b0:b5:99:13:1b:1f:a9:e4:94:5e:be:83:4c:47:8d:c2:
70:f0:57:98:e9:4b:8b:43:64:da:79:a3:88:66:0a:35:74:cc:
b8:e6:be:14:f2:87:c6:b8:5d:a7:72:d6:27:5f:4a:7d:9f:66:
e6:12:35:7a:13:2a:22:12:0b:29:c7:91:13:0d:ba:d5:d6:7a:
26:71:90:e3:79:84:94:aa:41:90:b6:b7:16:40:f6:88:97:e5:
66:0c:a6:18:4e:10:b6:53:35:0d:35:17:1d:24:84:a2:df:01:
7f:fe:98:fe
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnFZZ3c4otpmpnwkwzmkaWDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODA1MTExMTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjdjZjk2MDM4ODc2MWU1MGIzM2EyMzE5YTNhZDg0YTYzZWUwODZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj52FUK8jRnpIkvSOsUXt70nAe2yH
3gajGpvSHRZth025zg9uGLw/rDAFRvYH0KaxYOxkK79W68V6kQecM1PLSwswaOpt
0s9ciclbc6qn03RFuDpNdKFzxq+z3hvyBuM58OZM+BW1PQ3WRlhIQTA40znHzq0l
Mphs8R0JmV7SJUj170YnKgfS1bt76FmjNCE9VE8xeeJ/6CnrIbJwzMsmTOkLln0H
ACJZHI1I30vL6dK+DEa3zeowXdsBAKyuAQJGqY/7WbNO7lKW/bVbjNF3ZJ/nuraO
KRU4JFOwgAqqWDu8s6D2sP5CoCYT8WW+5wy9Be9ofYy3HiPQTUDcuSq6PQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFE98+WA4h2HlCzOiMZo62Epj7ghuMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVDN6NVlEaUhZZVVMTTZJeG1qcllTbVB1Q0c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAINzu4CHOPt1UQs6LJ3p
NoCfiwbQ3FFIWhq8u9GRxak9vyF5k38q1B+PhtioaQe3pQHtbch4PtcgRLGWI4Vp
VEgT0OfqQ117emqetRovlIuVMzT4UC6htugdS4uXmMIb4wpFAxYPZTBdjgu0BTa3
ntdLUeqq/VMhsXN7c5L9lOkpsj+6T89a8x6h08reWvLrFFj6sLWZExsfqeSUXr6D
TEeNwnDwV5jpS4tDZNp5o4hmCjV0zLjmvhTyh8a4Xady1idfSn2fZuYSNXoTKiIS
CynHkRMNutXWeiZxkON5hJSqQZC2txZA9oiX5WYMphhOELZTNQ01Fx0khKLfAX/+
mP4=
-----END CERTIFICATE-----
Generated at Mon May 5 05:05:52 2025 by rpki-client