This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_VsPAyF-aVZhTKyePkb7N1ge8Go.roa
File:                     _VsPAyF-aVZhTKyePkb7N1ge8Go.roa (raw, json)
Hash identifier:          cKZrPBq000PfPbZXZfClpz9V4aMvUGJ7VF+k7WUPe1k=
Subject key identifier:   FD:5B:0F:03:21:7E:69:56:61:4C:AC:9E:3E:46:FB:37:58:1E:F0:6A
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186E7C3B10FD8C4289AE43A9BAA047B4929
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_VsPAyF-aVZhTKyePkb7N1ge8Go.roa
Signing time:             Thu 16 Mar 2023 00:13:27 +0000
ROA not before:           Thu 16 Mar 2023 00:13:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e7:c3:b1:0f:d8:c4:28:9a:e4:3a:9b:aa:04:7b:49:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 16 00:13:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fd5b0f03217e6956614cac9e3e46fb37581ef06a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:84:f1:a6:23:80:c6:82:dc:7b:98:6f:56:e5:
                    9c:2e:32:e6:79:8e:eb:56:aa:01:54:e8:a9:88:24:
                    01:6a:3f:b6:ce:3f:69:48:bf:72:8f:b9:32:82:69:
                    51:34:52:3b:41:db:f0:85:60:0b:12:9c:b9:c5:43:
                    10:5f:bf:cc:aa:4d:63:94:c4:61:a0:ef:b4:95:06:
                    73:90:9e:23:f5:82:52:36:45:2c:ff:7b:77:72:7d:
                    6e:9a:a8:bf:5f:9b:6c:d1:86:91:2c:f6:8b:56:6e:
                    08:55:96:15:4e:8b:75:bd:43:e3:ec:d6:78:34:01:
                    64:1b:08:32:41:49:d8:db:f0:43:9d:cb:2f:5d:27:
                    2f:e1:1b:5c:8c:a3:34:04:6a:2c:1a:81:bd:3d:75:
                    6f:48:40:77:75:43:af:55:59:47:b0:68:a8:13:6e:
                    63:57:8e:aa:40:e7:0e:63:dc:31:85:97:84:c9:0f:
                    da:1f:dd:6b:d8:aa:a8:21:e9:bf:64:76:32:53:8a:
                    4c:59:85:c8:35:4e:e1:76:c5:17:a0:12:a6:22:15:
                    24:e7:18:d4:3e:71:71:80:0a:b8:ac:7b:47:f2:c0:
                    89:fc:c1:a1:cd:85:f8:e0:3e:00:8f:af:31:f0:4b:
                    b0:e0:95:b2:3b:83:1c:9b:1a:ba:6b:81:18:03:c9:
                    7e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5B:0F:03:21:7E:69:56:61:4C:AC:9E:3E:46:FB:37:58:1E:F0:6A
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_VsPAyF-aVZhTKyePkb7N1ge8Go.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:7e:3c:7a:21:a5:39:dd:7e:6f:6a:62:4e:6f:d7:59:21:d8:
         86:75:1e:a4:98:d4:d4:de:2c:3a:2c:f8:96:c1:54:f1:f8:62:
         7d:18:35:c0:b9:46:4e:26:6c:e5:43:7e:75:1e:84:eb:b2:08:
         6f:c1:65:97:ca:46:35:9b:b9:31:01:e9:ad:8e:a2:df:07:1b:
         47:c9:be:9b:8c:1d:db:10:d3:82:f6:8c:81:ae:3e:ae:d0:94:
         cc:b5:7e:ba:13:d7:6f:c8:20:ce:c0:df:b9:d9:e0:93:0a:20:
         90:2a:04:e2:91:c3:88:34:7c:65:3e:ff:0b:0f:ab:3d:a2:3a:
         b8:ee:1f:bd:e4:2f:83:e0:7c:b7:d8:e4:5e:f6:02:c0:bd:c2:
         1e:b5:1b:e4:8a:a8:50:f3:94:48:80:af:e5:54:cb:72:29:47:
         ac:57:22:db:71:18:91:df:8a:86:a6:93:02:06:07:d2:ba:f8:
         6c:fa:e8:5c:f4:1c:66:9b:ab:c6:4e:f6:d0:8b:ff:52:5f:c0:
         6b:c4:2f:6d:93:fd:35:d6:91:93:5c:ee:ae:2e:06:40:1d:79:
         d8:ed:dd:44:71:e6:79:c5:db:91:23:1d:cc:ed:77:8a:02:96:
         da:03:9d:47:29:10:e4:41:ca:62:1b:dd:38:b7:41:e2:5c:b1:
         06:ca:e9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----