Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aNeEKjHCi32KGrOdcM_4jQcwZMo.roa
File: aNeEKjHCi32KGrOdcM_4jQcwZMo.roa (raw, json)
Hash identifier: 9aQ4LZCahilHzBM+4ZyxUV4mLk99QSm3KOit+ijjXu8=
Subject key identifier: 68:D7:84:2A:31:C2:8B:7D:8A:1A:B3:9D:70:CF:F8:8D:07:30:64:CA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851C2267DD8F18C3B9808D409EF717C9A3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aNeEKjHCi32KGrOdcM_4jQcwZMo.roa
Signing time: Fri 16 Dec 2022 18:11:34 +0000
ROA not before: Fri 16 Dec 2022 18:11:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1c:22:67:dd:8f:18:c3:b9:80:8d:40:9e:f7:17:c9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 16 18:11:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68d7842a31c28b7d8a1ab39d70cff88d073064ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c7:18:b1:6f:8f:ce:ba:a0:15:1d:98:4f:ed:
f8:ed:13:ca:c9:e7:60:13:15:ec:68:9e:75:d6:18:
f3:4f:12:8e:b8:27:99:5e:8c:0f:cd:d4:da:ea:72:
e4:a4:2b:37:a5:e5:cf:a3:90:fb:c3:98:b3:2d:3e:
98:6c:0d:26:27:43:49:dd:ca:00:76:27:83:be:0e:
4e:32:e0:04:c9:7b:c2:e7:e4:03:a9:a3:70:42:39:
6b:40:dd:8b:0a:47:71:d9:0a:25:d2:65:0a:7e:f8:
cd:ec:e7:9c:16:82:75:7b:dc:86:45:8f:c1:74:5a:
fd:30:4c:19:af:ca:33:16:8a:b7:ca:d5:8a:25:64:
cd:9a:cb:24:8b:0a:8e:d2:c4:f0:15:26:a1:18:53:
86:5d:b5:fe:f4:75:db:fc:59:d8:bf:83:5f:ca:38:
e2:bd:42:7c:65:6d:f8:52:42:20:95:c2:97:15:d9:
bd:13:f4:4c:a1:8f:d6:52:43:e3:32:b8:12:7f:2d:
8b:61:b3:9a:29:57:2b:4f:d8:79:b8:f6:72:34:a7:
01:3d:56:5c:bb:4c:79:5c:03:78:a4:db:ac:28:bc:
51:cb:36:89:1f:38:55:a8:f4:5f:9b:03:ec:0b:53:
82:eb:9c:ea:48:b6:5f:03:3a:c7:17:b8:c6:c0:a4:
82:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D7:84:2A:31:C2:8B:7D:8A:1A:B3:9D:70:CF:F8:8D:07:30:64:CA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aNeEKjHCi32KGrOdcM_4jQcwZMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:55:f0:3a:4d:bc:b0:8e:33:93:26:a2:53:a6:96:18:d1:58:
bb:2b:5c:fa:5b:a2:83:ef:0e:92:dc:c0:f7:9a:9c:85:0c:f9:
f8:ac:f1:54:c4:cf:11:7f:8d:fe:25:52:64:e1:db:dc:16:59:
f3:52:57:d9:8b:05:f2:de:04:ae:3b:ad:cc:b1:1a:e0:ca:f1:
d6:ad:4f:ca:83:eb:27:4f:16:d0:de:be:15:bc:c0:e9:a1:71:
40:c9:1e:fc:31:80:da:61:ed:7f:87:ea:37:a7:10:1e:02:f7:
58:80:ba:ea:3f:62:52:27:35:14:58:fb:1d:4e:ac:b9:0c:15:
8d:2b:14:d7:a6:04:f2:eb:1f:b6:e5:12:c8:76:f9:78:66:0a:
20:94:05:fe:2a:c0:0e:be:27:c5:43:ac:e9:54:ff:41:93:9e:
02:c7:f8:72:45:f7:d8:0f:cd:66:ae:dd:7c:41:1e:9f:92:48:
b9:e2:0b:f2:1c:a9:88:fc:76:8b:ae:3b:7e:f3:58:7d:13:a9:
50:7c:ea:6b:fd:ac:f1:4b:de:ec:57:39:52:3d:ec:14:d5:a6:
38:ec:1e:82:64:b5:d6:26:d7:13:d6:f4:a0:8a:c4:80:8f:56:
07:e6:d8:d7:88:be:49:7f:f0:b8:4b:c1:3a:22:b5:b2:41:8b:
a1:97:d3:64
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUcImfdjxjDuYCNQJ73F8mjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjE2MTgxMTM0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGQ3ODQyYTMxYzI4YjdkOGExYWIzOWQ3MGNmZjg4ZDA3MzA2NGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuccYsW+PzrqgFR2YT+347RPKyedg
ExXsaJ511hjzTxKOuCeZXowPzdTa6nLkpCs3peXPo5D7w5izLT6YbA0mJ0NJ3coA
dieDvg5OMuAEyXvC5+QDqaNwQjlrQN2LCkdx2Qol0mUKfvjN7OecFoJ1e9yGRY/B
dFr9MEwZr8ozFoq3ytWKJWTNmsskiwqO0sTwFSahGFOGXbX+9HXb/FnYv4Nfyjji
vUJ8ZW34UkIglcKXFdm9E/RMoY/WUkPjMrgSfy2LYbOaKVcrT9h5uPZyNKcBPVZc
u0x5XAN4pNusKLxRyzaJHzhVqPRfmwPsC1OC65zqSLZfAzrHF7jGwKSCpQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGjXhCoxwot9ihqznXDP+I0HMGTKMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYU5lRUtqSENpMzJLR3JPZGNNXzRqUWN3Wk1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF9V8DpNvLCOM5MmolOm
lhjRWLsrXPpbooPvDpLcwPeanIUM+fis8VTEzxF/jf4lUmTh29wWWfNSV9mLBfLe
BK47rcyxGuDK8datT8qD6ydPFtDevhW8wOmhcUDJHvwxgNph7X+H6jenEB4C91iA
uuo/YlInNRRY+x1OrLkMFY0rFNemBPLrH7blEsh2+XhmCiCUBf4qwA6+J8VDrOlU
/0GTngLH+HJF99gPzWau3XxBHp+SSLniC/IcqYj8douuO37zWH0TqVB86mv9rPFL
3uxXOVI97BTVpjjsHoJktdYm1xPW9KCKxICPVgfm2NeIvkl/8LhLwToitbJBi6GX
02Q=
-----END CERTIFICATE-----
Generated at Thu May 1 09:31:16 2025 by rpki-client