Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_CBTPSHoBVjO_9-ui7XKCdoTjVA.roa
File: _CBTPSHoBVjO_9-ui7XKCdoTjVA.roa (raw, json)
Hash identifier: Ot1S8vOUhcCU5rInBqYhPHmtf6WXGksbHTgjeeVu2Zs=
Subject key identifier: FC:20:53:3D:21:E8:05:58:CE:FF:DF:AE:8B:B5:CA:09:DA:13:8D:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A3B712D597B95AC54C629A73F29C30DE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_CBTPSHoBVjO_9-ui7XKCdoTjVA.roa
Signing time: Thu 02 Mar 2023 19:05:29 +0000
ROA not before: Thu 02 Mar 2023 19:05:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:a3b6:25a7/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a3:b7:12:d5:97:b9:5a:c5:4c:62:9a:73:f2:9c:30:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 2 19:05:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc20533d21e80558ceffdfae8bb5ca09da138d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8d:c6:c2:7d:58:15:c4:d2:05:71:e9:94:1e:
ad:80:f0:76:45:4b:a5:47:71:fe:14:a4:c1:58:80:
c6:05:4d:41:d4:61:bc:d3:2d:d1:21:54:af:8c:c3:
c2:b0:b8:7b:b6:81:b3:4c:08:af:73:60:df:e3:bf:
21:3d:c7:4b:ad:2e:83:9b:37:d4:a7:d8:fb:8d:9e:
e4:13:83:ba:04:91:62:3e:11:ce:52:ff:8f:81:34:
a8:32:11:71:1a:c4:ed:80:f9:35:d7:9d:88:dd:31:
2e:6b:4c:6e:e3:2e:3f:d2:b8:c6:10:65:9b:0e:e8:
54:3e:17:ce:5d:b3:eb:80:0c:64:81:90:72:cb:42:
bc:73:dc:d3:74:e2:6c:71:4d:87:46:4e:53:58:fc:
ae:99:b3:83:b0:c8:84:ae:12:f2:76:ce:21:d1:6e:
3a:a3:bf:5c:98:36:ab:f0:80:ec:fc:e3:fd:fd:db:
ae:62:02:7b:20:0a:f5:8d:fd:96:e6:c3:f7:48:a1:
2a:c6:d9:27:53:83:2b:18:23:cb:30:02:b8:87:90:
06:b8:c3:3c:bf:7e:f0:c3:4b:8b:59:7f:74:e3:ad:
15:24:5a:e5:f5:a2:93:a4:d2:fc:dd:5c:ce:90:53:
4c:da:56:c7:31:06:b9:26:29:d8:43:7a:91:64:8f:
09:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:20:53:3D:21:E8:05:58:CE:FF:DF:AE:8B:B5:CA:09:DA:13:8D:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_CBTPSHoBVjO_9-ui7XKCdoTjVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:47:08:80:2c:e2:bd:50:d3:bf:47:42:dc:c4:99:88:3f:11:
1d:6b:4c:bd:fa:8a:bc:c4:af:c7:f5:78:a1:18:76:1e:59:68:
17:f7:9f:8b:7e:d5:55:06:11:dc:4f:5d:5b:04:3c:77:a9:b4:
ca:f0:39:b9:6e:a5:e9:41:bb:dd:8a:b1:51:16:52:e4:0f:42:
20:96:97:30:53:e2:e0:32:7d:02:bf:10:19:b2:0d:b3:2c:d4:
ba:30:6f:c5:8f:5a:07:17:8e:0a:63:90:05:2c:86:9e:6b:17:
40:6c:93:20:dc:9c:67:cb:60:43:45:84:c6:5f:75:db:27:23:
19:69:0d:af:01:13:94:8e:19:0b:c1:94:66:19:12:2f:97:1f:
c8:12:91:48:d5:73:e4:69:0a:37:46:04:2d:22:5c:e9:75:68:
51:34:db:2f:6a:64:16:f9:f8:84:c8:bb:18:50:fe:8c:88:ca:
d2:08:55:b1:68:80:1a:4d:dc:58:84:5b:45:db:cc:97:ca:cf:
a5:07:4a:06:71:db:22:91:57:f8:90:7c:33:85:1a:2c:66:26:
a1:d0:c8:9d:a2:9e:96:38:9d:b0:f9:2c:13:10:2a:9a:df:d4:
0a:38:8e:fd:19:d5:ae:6e:7c:ef:87:6d:94:7b:0e:e5:cc:35:
5a:d2:3b:0c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYajtxLVl7laxUximnPynDDeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzAyMTkwNTI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzIwNTMzZDIxZTgwNTU4Y2VmZmRmYWU4YmI1Y2EwOWRhMTM4ZDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI3Gwn1YFcTSBXHplB6tgPB2RUul
R3H+FKTBWIDGBU1B1GG80y3RIVSvjMPCsLh7toGzTAivc2Df478hPcdLrS6DmzfU
p9j7jZ7kE4O6BJFiPhHOUv+PgTSoMhFxGsTtgPk1152I3TEua0xu4y4/0rjGEGWb
DuhUPhfOXbPrgAxkgZByy0K8c9zTdOJscU2HRk5TWPyumbODsMiErhLyds4h0W46
o79cmDar8IDs/OP9/duuYgJ7IAr1jf2W5sP3SKEqxtknU4MrGCPLMAK4h5AGuMM8
v37ww0uLWX90460VJFrl9aKTpNL83VzOkFNM2lbHMQa5JinYQ3qRZI8JkQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPwgUz0h6AVYzv/frou1ygnaE41QMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvX0NCVFBTSG9CVmpPXzktdWk3WEtDZG9UalZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJtHCIAs4r1Q079HQtzE
mYg/ER1rTL36irzEr8f1eKEYdh5ZaBf3n4t+1VUGEdxPXVsEPHeptMrwOblupelB
u92KsVEWUuQPQiCWlzBT4uAyfQK/EBmyDbMs1Lowb8WPWgcXjgpjkAUshp5rF0Bs
kyDcnGfLYENFhMZfddsnIxlpDa8BE5SOGQvBlGYZEi+XH8gSkUjVc+RpCjdGBC0i
XOl1aFE02y9qZBb5+ITIuxhQ/oyIytIIVbFogBpN3FiEW0XbzJfKz6UHSgZx2yKR
V/iQfDOFGixmJqHQyJ2inpY4nbD5LBMQKprf1Ao4jv0Z1a5ufO+HbZR7DuXMNVrS
Oww=
-----END CERTIFICATE-----
Generated at Thu May 1 08:05:12 2025 by rpki-client