Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dfzUYyIQe0ZfYaxKFFxhAZl3-RE.roa
File: dfzUYyIQe0ZfYaxKFFxhAZl3-RE.roa (raw, json)
Hash identifier: 8K9ZGTC06X2AefZX9y8oGxeg1OCyft5g5wCrTe8e54k=
Subject key identifier: 75:FC:D4:63:22:10:7B:46:5F:61:AC:4A:14:5C:61:01:99:77:F9:11
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8574864B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dfzUYyIQe0ZfYaxKFFxhAZl3-RE.roa
Signing time: Thu 19 May 2022 13:14:29 +0000
ROA not before: Thu 19 May 2022 13:14:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2239006283 (0x8574864b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 19 13:14:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75fcd46322107b465f61ac4a145c61019977f911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:34:b6:94:0a:7d:1c:61:0e:61:e0:dc:c6:5e:
e5:66:07:00:3b:4b:25:c3:ef:09:6d:f0:cb:b9:de:
f0:6c:d2:c9:26:fc:71:07:5b:a3:3f:0a:33:62:68:
cc:2f:59:0e:d5:65:a7:7e:ee:53:69:e3:2a:8e:00:
e5:4c:f4:d9:5b:ec:6f:d8:75:0a:38:1c:bd:12:94:
62:0b:04:4c:90:d8:8d:d6:ca:c3:9c:70:a9:77:c3:
ef:1b:27:00:34:28:40:dc:cb:5c:c4:95:ae:dd:ab:
c4:59:7d:e8:f3:11:46:8b:f6:c0:92:f3:9e:1d:ee:
27:d7:08:3d:06:d9:36:77:1d:19:b4:f5:51:19:65:
fb:ba:06:30:74:3d:1b:ec:11:f0:29:10:f2:dc:95:
5f:da:df:01:7f:e7:dc:73:b2:6d:c6:3a:b4:15:4f:
fd:e0:f1:15:91:53:75:a7:40:93:a1:23:2c:06:11:
fa:b0:68:48:65:b9:d2:a4:fe:f0:92:97:1c:43:46:
26:55:6a:b2:88:5f:cc:e2:d5:00:e2:a7:7f:3e:de:
f3:cb:dd:7d:1f:e3:d7:61:3d:8f:55:03:d1:e7:07:
f7:28:d9:d4:5e:c8:fb:5e:c7:a5:72:0e:aa:da:04:
77:be:82:0d:75:c1:74:60:32:78:08:9e:82:bb:81:
1a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FC:D4:63:22:10:7B:46:5F:61:AC:4A:14:5C:61:01:99:77:F9:11
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dfzUYyIQe0ZfYaxKFFxhAZl3-RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:38:16:4d:37:75:b9:f5:a9:82:68:be:6e:58:c7:fd:7e:0c:
65:bd:d2:d9:56:aa:28:3c:ba:73:c3:ab:3d:27:2c:47:18:8a:
7b:17:e9:e2:1d:f4:91:6f:fa:49:77:72:9c:16:34:da:f3:30:
ff:cd:4a:88:20:fa:c6:59:01:51:0b:ba:33:5f:1f:dd:af:fe:
64:8f:fe:db:5f:8b:87:27:a5:06:49:e7:08:72:65:88:19:dd:
74:4e:60:87:4f:ab:2d:05:b9:34:e3:8f:7e:ce:ae:b8:72:d8:
06:ba:b9:ba:65:31:45:7f:8c:5c:09:a3:05:fa:3d:8b:38:50:
1d:6b:65:9e:a9:17:95:5f:17:21:f7:f7:fe:7b:90:37:73:37:
6f:38:0d:4f:34:65:fb:72:6b:f7:a2:ba:c9:df:88:85:72:a9:
68:e5:64:d7:37:3e:0c:ad:70:f9:e7:da:84:d5:aa:49:4b:1b:
48:53:d9:ae:02:2d:39:57:28:44:64:f1:a1:46:cd:9f:3e:40:
44:c0:bb:9d:d4:dc:a1:95:78:6a:d1:3e:e6:4c:5a:5e:df:38:
11:87:33:25:6b:35:cf:59:0e:01:e2:3f:78:94:23:97:bf:7a:
f7:a5:18:92:25:4d:70:34:28:73:40:15:44:77:e7:57:3c:e5:
ad:f3:a7:54
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIV0hkswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MTkxMzE0MjlaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDc1ZmNkNDYzMjIx
MDdiNDY1ZjYxYWM0YTE0NWM2MTAxOTk3N2Y5MTEwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCLNLaUCn0cYQ5h4NzGXuVmBwA7SyXD7wlt8Mu53vBs0skm
/HEHW6M/CjNiaMwvWQ7VZad+7lNp4yqOAOVM9Nlb7G/YdQo4HL0SlGILBEyQ2I3W
ysOccKl3w+8bJwA0KEDcy1zEla7dq8RZfejzEUaL9sCS854d7ifXCD0G2TZ3HRm0
9VEZZfu6BjB0PRvsEfApEPLclV/a3wF/59xzsm3GOrQVT/3g8RWRU3WnQJOhIywG
EfqwaEhludKk/vCSlxxDRiZVarKIX8zi1QDip38+3vPL3X0f49dhPY9VA9HnB/co
2dReyPtex6VyDqraBHe+gg11wXRgMngInoK7gRq5AgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUdfzUYyIQe0ZfYaxKFFxhAZl3+REwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9kZnpVWXlJUWUwWmZZYXhLRkZ4aEFabDMtUkUucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAgjgWTTd1ufWpgmi+bljH/X4MZb3S2VaqKDy6
c8OrPScsRxiKexfp4h30kW/6SXdynBY02vMw/81KiCD6xlkBUQu6M18f3a/+ZI/+
21+LhyelBknnCHJliBnddE5gh0+rLQW5NOOPfs6uuHLYBrq5umUxRX+MXAmjBfo9
izhQHWtlnqkXlV8XIff3/nuQN3M3bzgNTzRl+3Jr96K6yd+IhXKpaOVk1zc+DK1w
+efahNWqSUsbSFPZrgItOVcoRGTxoUbNnz5ARMC7ndTcoZV4atE+5kxaXt84EYcz
JWs1z1kOAeI/eJQjl79696UYkiVNcDQoc0AVRHfnVzzlrfOnVA==
-----END CERTIFICATE-----
Generated at Thu May 1 18:20:14 2025 by rpki-client