Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_3Vu2XW3_neLMhEzIway9Vi_VO4.roa
File: _3Vu2XW3_neLMhEzIway9Vi_VO4.roa (raw, json)
Hash identifier: sCvrw/74hiV6nGahkjy0I3eOttcBXl8XNRn13BkV3ek=
Subject key identifier: FF:75:6E:D9:75:B7:FE:77:8B:32:11:33:23:06:B2:F5:58:BF:54:EE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C1B96004A708FC618C58BDD841A16437
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_3Vu2XW3_neLMhEzIway9Vi_VO4.roa
Signing time: Fri 04 Aug 2023 18:04:58 +0000
ROA not before: Fri 04 Aug 2023 18:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:c1b8:db87/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c1:b9:60:04:a7:08:fc:61:8c:58:bd:d8:41:a1:64:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 4 18:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff756ed975b7fe778b3211332306b2f558bf54ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:30:75:6f:10:01:36:bc:f1:4b:d5:cf:55:
9f:8f:e6:a8:41:a0:64:21:16:b0:bf:79:87:8d:11:
a3:de:01:1f:be:d9:c7:bf:f2:eb:51:2f:76:cb:00:
23:a2:37:38:e8:66:9c:70:92:55:f3:f3:d9:af:fd:
2c:d0:63:c3:ed:5e:0b:11:7d:3d:a8:38:e4:a1:51:
4f:1a:a1:80:8a:69:11:ab:b7:0a:5f:58:bf:79:5c:
14:75:3b:05:70:ac:c9:d5:97:4d:03:af:e8:ce:4e:
eb:f8:5f:c0:6c:92:11:a7:c6:19:52:54:12:cb:be:
f7:60:db:38:10:6b:21:e7:5a:95:32:26:df:7c:c6:
45:86:b2:2f:bc:1c:58:62:e8:09:a2:82:5c:14:4d:
92:8e:69:08:94:b6:ea:6b:04:5c:81:85:bc:7b:8b:
72:14:49:97:88:13:00:23:f0:74:1b:11:4b:b2:d7:
e5:43:3e:f5:b1:17:2d:39:d2:25:0d:76:04:9d:b6:
22:13:c5:d9:0c:f9:ff:3f:da:d1:c0:70:85:da:00:
64:45:bb:b5:c7:75:bc:d7:14:c2:3d:8b:ec:21:db:
a4:83:28:61:54:f2:eb:63:73:84:cd:b2:14:ea:6c:
3a:ba:81:d2:cd:c3:11:62:e0:0e:10:e8:0e:c0:92:
7f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:75:6E:D9:75:B7:FE:77:8B:32:11:33:23:06:B2:F5:58:BF:54:EE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_3Vu2XW3_neLMhEzIway9Vi_VO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:09:ef:11:ae:59:91:53:33:98:1d:4f:33:9e:0d:f2:c1:54:
9c:99:96:5f:e0:ac:b3:95:f3:73:36:a6:22:0e:22:cf:12:7f:
44:47:94:09:ef:a0:ff:ce:02:a0:13:d1:91:e0:44:09:80:53:
86:a8:e6:03:b8:37:0c:59:79:24:c5:3b:fb:e3:02:0f:6e:05:
d6:2e:04:26:a6:df:b3:e3:d7:50:02:6f:1b:40:c0:b5:04:f9:
4a:2a:4c:3c:25:f8:79:2a:16:78:ce:c0:1b:9f:ff:7a:ce:bd:
b1:c0:cb:c1:4d:e2:18:6d:01:d3:7b:77:01:e6:4b:e4:73:6f:
3b:56:4f:2c:cc:04:bb:71:f8:f2:ea:c9:5a:3d:d4:8e:94:63:
bd:6c:67:a8:40:50:da:ae:30:12:84:71:4f:21:d3:56:99:15:
6a:04:8d:9d:0d:b3:9e:8c:60:5a:2d:16:bd:11:4a:76:6a:a1:
50:a0:46:6a:1e:5f:b9:b1:89:e2:eb:99:36:b2:91:f3:44:3a:
f0:ca:13:7f:dc:e3:d0:8a:c3:24:e7:04:4e:4d:f1:5e:71:87:
ab:79:05:a5:96:02:39:c3:18:b5:92:3e:09:bf:01:82:4e:1d:
65:11:9a:3c:37:e6:33:47:93:e5:f9:38:5a:ca:cc:35:11:56:
9c:8f:15:66
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnBuWAEpwj8YYxYvdhBoWQ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODA0MTgwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjc1NmVkOTc1YjdmZTc3OGIzMjExMzMyMzA2YjJmNTU4YmY1NGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuswdW8QATa88UvVz1Wfj+aoQaBk
IRawv3mHjRGj3gEfvtnHv/LrUS92ywAjojc46GaccJJV8/PZr/0s0GPD7V4LEX09
qDjkoVFPGqGAimkRq7cKX1i/eVwUdTsFcKzJ1ZdNA6/ozk7r+F/AbJIRp8YZUlQS
y773YNs4EGsh51qVMibffMZFhrIvvBxYYugJooJcFE2SjmkIlLbqawRcgYW8e4ty
FEmXiBMAI/B0GxFLstflQz71sRctOdIlDXYEnbYiE8XZDPn/P9rRwHCF2gBkRbu1
x3W81xTCPYvsIdukgyhhVPLrY3OEzbIU6mw6uoHSzcMRYuAOEOgOwJJ/rwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFP91btl1t/53izIRMyMGsvVYv1TuMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvXzNWdTJYVzNfbmVMTWhFekl3YXk5VmlfVk80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADoJ7xGuWZFTM5gdTzOe
DfLBVJyZll/grLOV83M2piIOIs8Sf0RHlAnvoP/OAqAT0ZHgRAmAU4ao5gO4NwxZ
eSTFO/vjAg9uBdYuBCam37Pj11ACbxtAwLUE+UoqTDwl+HkqFnjOwBuf/3rOvbHA
y8FN4hhtAdN7dwHmS+RzbztWTyzMBLtx+PLqyVo91I6UY71sZ6hAUNquMBKEcU8h
01aZFWoEjZ0Ns56MYFotFr0RSnZqoVCgRmoeX7mxieLrmTaykfNEOvDKE3/c49CK
wyTnBE5N8V5xh6t5BaWWAjnDGLWSPgm/AYJOHWURmjw35jNHk+X5OFrKzDURVpyP
FWY=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:33:17 2025 by rpki-client