Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V5yVTM9059MauRvBAKlgN-DAeS0.roa
File: V5yVTM9059MauRvBAKlgN-DAeS0.roa (raw, json)
Hash identifier: pZbGA2UNBrRAzyZyo0f5kIn5A51DelF1T5ad5quC5T0=
Subject key identifier: 57:9C:95:4C:CF:74:E7:D3:1A:B9:1B:C1:00:A9:60:37:E0:C0:79:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183AF8C9E409C50A10ECE4730849ACCC156
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V5yVTM9059MauRvBAKlgN-DAeS0.roa
Signing time: Thu 06 Oct 2022 23:06:11 +0000
ROA not before: Thu 06 Oct 2022 23:06:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:af8b:176/128 maxlen: 128
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:af:8c:9e:40:9c:50:a1:0e:ce:47:30:84:9a:cc:c1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 6 23:06:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=579c954ccf74e7d31ab91bc100a96037e0c0792d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a6:a4:4e:5a:94:50:c1:dd:88:ed:4c:a1:ef:
c8:c7:ef:97:90:9c:0a:96:97:01:7c:87:68:44:9b:
b9:72:10:4e:eb:17:00:c2:59:5c:6f:7d:cc:2c:68:
30:59:bf:2a:88:ad:58:db:6e:a0:e1:2a:76:6c:57:
2f:d7:33:52:c7:62:3d:e5:b1:80:4f:b5:d1:a3:c5:
c3:41:6c:72:e5:91:0f:64:ea:46:ab:fe:c7:b8:17:
c9:e7:11:96:39:65:95:8a:0f:0c:d5:60:c1:3f:04:
21:0d:8c:24:c0:09:72:33:22:c2:11:42:fe:ab:4a:
a3:27:95:ef:76:8d:85:c2:45:7c:ca:11:10:ef:6b:
63:7a:f9:4b:c2:13:35:9e:7c:ed:6b:74:77:ee:d5:
ce:ed:2f:22:fb:e4:4a:97:f4:c8:91:49:cb:6c:d0:
39:a1:90:e2:71:5b:6f:c3:1c:65:84:54:a7:28:b7:
a2:f7:96:83:87:82:1f:de:ac:ef:6e:f1:52:04:a4:
cc:51:19:34:ac:2e:74:58:88:7c:d6:57:1a:8f:e7:
92:3d:bf:c4:e3:a9:f3:62:f8:60:0f:e5:7e:90:a9:
1c:eb:d4:68:de:db:bc:b3:1d:88:9e:bf:87:ad:cd:
bd:ab:f5:b1:eb:5a:79:a7:71:f0:7d:e8:66:21:01:
d4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9C:95:4C:CF:74:E7:D3:1A:B9:1B:C1:00:A9:60:37:E0:C0:79:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V5yVTM9059MauRvBAKlgN-DAeS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:fe:26:16:53:31:91:15:0f:56:77:65:a0:60:6f:21:8d:d2:
7c:38:f0:62:a7:71:48:8c:b3:ab:94:ce:ee:e7:ad:76:e3:8c:
d3:38:a3:d7:10:85:27:13:1a:86:3d:f1:48:f6:13:e8:57:fb:
da:62:33:a6:94:f7:9c:36:f0:03:59:59:78:8b:d7:6b:a1:77:
93:be:2b:59:61:40:85:de:85:08:6d:7b:4b:b5:32:d5:62:a4:
e6:4c:e7:7e:6b:52:85:a2:a5:65:bd:fb:f9:ec:54:ae:88:de:
e8:67:d5:23:67:55:78:9a:ef:87:44:31:ae:e5:87:78:bd:62:
c7:f3:ee:4e:fb:bf:f2:db:b7:9a:84:2e:b6:8e:a1:9e:bd:d8:
66:64:e9:6d:a7:62:d1:90:50:1e:8d:b8:24:4d:4a:c6:6b:2e:
3e:a7:4d:12:53:84:23:a5:b7:59:7c:6f:80:6a:93:9d:75:66:
cd:fe:2a:ad:be:be:40:44:7d:4f:ae:da:bb:5f:34:b1:91:97:
7d:6e:26:61:47:13:d1:8a:40:66:1a:46:43:ba:b1:d9:f7:3f:
b9:66:3b:bb:1f:5f:10:7a:79:d6:9b:a7:fb:cd:8c:60:3f:f8:
18:ae:79:ce:f1:81:1e:51:36:db:62:13:75:d4:44:29:82:8c:
df:12:29:d3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYOvjJ5AnFChDs5HMISazMFWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDA2MjMwNjExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzljOTU0Y2NmNzRlN2QzMWFiOTFiYzEwMGE5NjAzN2UwYzA3OTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKakTlqUUMHdiO1Moe/Ix++XkJwK
lpcBfIdoRJu5chBO6xcAwllcb33MLGgwWb8qiK1Y226g4Sp2bFcv1zNSx2I95bGA
T7XRo8XDQWxy5ZEPZOpGq/7HuBfJ5xGWOWWVig8M1WDBPwQhDYwkwAlyMyLCEUL+
q0qjJ5Xvdo2FwkV8yhEQ72tjevlLwhM1nnzta3R37tXO7S8i++RKl/TIkUnLbNA5
oZDicVtvwxxlhFSnKLei95aDh4If3qzvbvFSBKTMURk0rC50WIh81lcaj+eSPb/E
46nzYvhgD+V+kKkc69Ro3tu8sx2Inr+Hrc29q/Wx61p5p3HwfehmIQHUoQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFeclUzPdOfTGrkbwQCpYDfgwHktMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVjV5VlRNOTA1OU1hdVJ2QkFLbGdOLURBZVMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACD+JhZTMZEVD1Z3ZaBg
byGN0nw48GKncUiMs6uUzu7nrXbjjNM4o9cQhScTGoY98Uj2E+hX+9piM6aU95w2
8ANZWXiL12uhd5O+K1lhQIXehQhte0u1MtVipOZM535rUoWipWW9+/nsVK6I3uhn
1SNnVXia74dEMa7lh3i9Ysfz7k77v/Lbt5qELraOoZ692GZk6W2nYtGQUB6NuCRN
SsZrLj6nTRJThCOlt1l8b4Bqk511Zs3+Kq2+vkBEfU+u2rtfNLGRl31uJmFHE9GK
QGYaRkO6sdn3P7lmO7sfXxB6edabp/vNjGA/+Biuec7xgR5RNttiE3XURCmCjN8S
KdM=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:47:58 2025 by rpki-client