Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UP390t5YOzQipCrmt0qr-wD0djU.roa
File: UP390t5YOzQipCrmt0qr-wD0djU.roa (raw, json)
Hash identifier: 41t8CiXmZ73edEr0n880IzsqRfJInhIKHmMl/216754=
Subject key identifier: 50:FD:FD:D2:DE:58:3B:34:22:A4:2A:E6:B7:4A:AB:FB:00:F4:76:35
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01880146FCA8920936F67FAB9640958BD938
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UP390t5YOzQipCrmt0qr-wD0djU.roa
Signing time: Tue 09 May 2023 16:10:09 +0000
ROA not before: Tue 09 May 2023 16:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:01:46:fc:a8:92:09:36:f6:7f:ab:96:40:95:8b:d9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 9 16:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50fdfdd2de583b3422a42ae6b74aabfb00f47635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:ca:05:11:a4:85:af:a7:55:10:3a:11:b3:
90:d0:ef:5a:d2:f5:3b:9f:4c:a7:ca:80:ff:ad:01:
d8:02:0c:43:81:7e:ed:07:b6:e8:f5:33:e3:05:5b:
3c:f1:86:69:83:4f:3d:ea:99:a3:34:42:06:2f:0e:
5c:9c:ba:58:bc:83:cd:67:ff:9d:5f:e9:da:35:b7:
8a:82:46:b3:99:5d:77:dd:3f:57:6b:a4:63:0d:ce:
90:67:f4:03:17:0b:a9:dc:79:24:6d:5f:0a:d2:48:
2f:4f:d6:51:fd:fe:15:8b:36:db:24:92:a2:c7:03:
8f:9d:f3:27:80:23:5d:67:c7:cb:95:63:57:40:57:
9c:63:c9:b8:bf:cc:01:8d:b9:47:14:fd:c9:fb:2b:
9f:24:ef:03:1a:25:f7:ef:8d:48:53:3f:60:84:9a:
37:e2:15:fa:8e:ec:af:01:30:24:5e:19:fc:e3:97:
fe:e5:62:5b:26:b4:89:79:b5:10:7c:b1:bb:2c:00:
04:22:83:f5:ea:61:9e:16:5d:ca:a3:6b:82:55:fc:
e2:ba:02:84:58:12:f0:ed:b3:e1:da:93:59:24:eb:
31:63:c4:93:3a:c4:41:fd:2e:27:fa:70:fb:23:62:
eb:36:b3:3b:30:c3:2c:bb:47:35:0c:03:7c:56:ba:
1e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FD:FD:D2:DE:58:3B:34:22:A4:2A:E6:B7:4A:AB:FB:00:F4:76:35
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UP390t5YOzQipCrmt0qr-wD0djU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:e8:10:3d:84:2d:4b:cb:0e:9c:14:a2:b1:39:01:f3:9e:ec:
ec:6e:f3:c3:a3:1d:dc:aa:dc:bb:05:9f:d8:2c:8f:e0:6d:b9:
c8:76:ab:42:30:a2:88:a9:3d:31:3f:85:4b:66:51:20:bf:b1:
84:03:0f:58:93:15:c1:45:e9:51:4c:41:00:82:a2:3e:87:b0:
f6:fa:5f:8a:65:9f:05:20:70:3b:08:93:c4:47:de:7e:30:eb:
7d:e1:a0:9e:c0:4b:82:b1:83:77:78:1c:53:bf:93:21:75:16:
8b:43:55:fc:40:f1:76:10:f0:3b:a2:ad:ad:15:8e:e9:d5:b3:
a6:36:f9:47:0e:2f:9c:bc:82:a4:c1:2c:81:f1:b9:7b:64:60:
b2:7c:d7:a7:7a:ca:81:6f:cc:63:43:7d:ca:13:fa:f8:21:2d:
b4:47:87:43:ac:e0:b6:12:ec:41:8c:b6:3c:d2:09:cf:9b:30:
57:e1:dd:fd:55:98:b3:83:e2:4e:cd:2f:4b:b0:92:dd:5f:17:
ec:2c:26:c7:4f:6b:52:11:a2:2e:38:35:8a:8c:68:b1:49:93:
41:c4:f9:37:05:b1:7f:d0:5f:80:09:c4:e0:6c:3c:79:43:a0:
61:cc:bc:79:a2:0e:5f:cc:df:97:94:e3:41:f3:74:4e:2c:0e:
c7:bf:37:48
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYgBRvyokgk29n+rlkCVi9k4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTA5MTYxMDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGZkZmRkMmRlNTgzYjM0MjJhNDJhZTZiNzRhYWJmYjAwZjQ3NjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR3KBRGkha+nVRA6EbOQ0O9a0vU7
n0ynyoD/rQHYAgxDgX7tB7bo9TPjBVs88YZpg0896pmjNEIGLw5cnLpYvIPNZ/+d
X+naNbeKgkazmV133T9Xa6RjDc6QZ/QDFwup3HkkbV8K0kgvT9ZR/f4VizbbJJKi
xwOPnfMngCNdZ8fLlWNXQFecY8m4v8wBjblHFP3J+yufJO8DGiX3741IUz9ghJo3
4hX6juyvATAkXhn845f+5WJbJrSJebUQfLG7LAAEIoP16mGeFl3Ko2uCVfziugKE
WBLw7bPh2pNZJOsxY8STOsRB/S4n+nD7I2LrNrM7MMMsu0c1DAN8VroeLwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFD9/dLeWDs0IqQq5rdKq/sA9HY1MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVVAzOTB0NVlPelFpcENybXQwcXItd0QwZGpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB7oED2ELUvLDpwUorE5
AfOe7Oxu88OjHdyq3LsFn9gsj+Btuch2q0IwooipPTE/hUtmUSC/sYQDD1iTFcFF
6VFMQQCCoj6HsPb6X4plnwUgcDsIk8RH3n4w633hoJ7AS4Kxg3d4HFO/kyF1FotD
VfxA8XYQ8Duira0VjunVs6Y2+UcOL5y8gqTBLIHxuXtkYLJ816d6yoFvzGNDfcoT
+vghLbRHh0Os4LYS7EGMtjzSCc+bMFfh3f1VmLOD4k7NL0uwkt1fF+wsJsdPa1IR
oi44NYqMaLFJk0HE+TcFsX/QX4AJxOBsPHlDoGHMvHmiDl/M35eU40HzdE4sDse/
N0g=
-----END CERTIFICATE-----
Generated at Thu May 1 16:04:51 2025 by rpki-client