Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dz6r0KHIZfUkDNjv_1-ik8Xgb4U.roa
File: dz6r0KHIZfUkDNjv_1-ik8Xgb4U.roa (raw, json)
Hash identifier: II5EUB+6qheuoYR6I0HN1YYQSVuldRJX34syuVh0rBc=
Subject key identifier: 77:3E:AB:D0:A1:C8:65:F5:24:0C:D8:EF:FF:5F:A2:93:C5:E0:6F:85
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186263544F79EF63CA8F1D09426DAA038C1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dz6r0KHIZfUkDNjv_1-ik8Xgb4U.roa
Signing time: Mon 06 Feb 2023 10:11:10 +0000
ROA not before: Mon 06 Feb 2023 10:11:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:26:35:44:f7:9e:f6:3c:a8:f1:d0:94:26:da:a0:38:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 6 10:11:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=773eabd0a1c865f5240cd8efff5fa293c5e06f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:92:5a:09:8a:f1:c8:ed:32:0a:d3:c9:98:08:
b8:7c:99:58:28:39:cd:7f:18:31:15:1a:d1:30:3c:
4b:49:d5:40:3f:b4:8f:a2:50:d8:b7:73:fd:02:b5:
6a:2b:3c:37:f9:a9:cf:4a:bb:95:31:d5:6f:54:ae:
ae:bc:fc:ea:28:ec:44:3a:2d:13:2c:e1:4d:25:2a:
ac:24:b8:d9:f6:15:55:69:0b:9e:39:ae:49:0b:8c:
ac:2e:0a:1d:3f:2b:a8:b0:09:87:a5:b4:bc:ec:c3:
5c:63:65:cc:8d:d6:80:75:ed:9e:b7:33:3b:a1:d3:
61:25:b6:73:8f:65:51:85:32:ba:90:9f:2d:8c:ff:
39:8f:f4:57:9c:8b:66:25:54:7d:f3:e1:70:4c:38:
0a:bc:5f:1f:68:27:57:66:57:d1:f2:69:bf:44:a0:
46:9b:a0:8f:53:7d:a5:b2:43:c1:a8:d0:7f:06:d1:
4f:b2:82:b4:1f:8a:c1:9f:94:b9:71:17:e1:27:74:
22:d4:bb:ad:b5:2a:a3:88:02:b6:a0:1f:1e:62:b1:
85:f1:e0:bf:b4:64:12:81:ca:13:98:d5:56:a7:8c:
f0:5c:02:fd:94:5b:b0:50:77:45:29:8b:2a:20:e7:
ae:ac:89:03:38:94:e5:8f:71:f5:5d:14:28:59:78:
2e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3E:AB:D0:A1:C8:65:F5:24:0C:D8:EF:FF:5F:A2:93:C5:E0:6F:85
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dz6r0KHIZfUkDNjv_1-ik8Xgb4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:42:f7:06:6e:c5:fb:de:38:dc:5c:e1:2b:1b:f6:d6:db:98:
43:d7:be:f6:40:a3:e9:87:95:26:6a:96:24:87:89:fe:f5:fc:
91:56:c1:3d:4e:30:48:b4:fa:49:de:aa:12:85:cd:57:cb:d4:
2e:7f:d8:75:17:d0:a3:0b:6f:1b:e0:0c:fe:27:d0:b8:bc:d1:
c1:f1:8b:4d:2f:4b:3e:80:4c:17:40:8a:6e:f5:1d:3c:bc:3e:
67:ec:d0:1c:23:96:67:11:b6:ad:d2:71:e8:93:e3:39:cd:e6:
1e:51:d1:f4:ad:93:67:41:4f:d5:34:e2:f0:fc:a0:19:5c:f8:
85:d9:a0:f5:2d:ef:c2:cb:44:5c:e1:ff:88:80:89:88:97:ef:
54:89:da:bb:c0:26:66:1b:0a:f5:96:be:49:05:63:c3:9a:88:
61:bd:af:4e:3e:34:dd:47:28:8f:87:25:cd:43:d4:94:de:16:
0b:e0:88:20:9f:eb:4c:ac:0d:d0:bd:49:fe:7e:04:16:9d:22:
62:07:6e:f3:41:12:69:69:17:85:f7:de:29:16:c1:af:8a:ad:
03:09:49:a9:3b:75:a0:2a:9a:50:48:3e:59:4e:da:a8:f8:45:
fe:7e:52:f2:cf:48:65:0f:9f:b0:9a:af:6b:b4:fd:3d:b1:c0:
04:4b:22:e2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYYmNUT3nvY8qPHQlCbaoDjBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjA2MTAxMTEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzNlYWJkMGExYzg2NWY1MjQwY2Q4ZWZmZjVmYTI5M2M1ZTA2Zjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5JaCYrxyO0yCtPJmAi4fJlYKDnN
fxgxFRrRMDxLSdVAP7SPolDYt3P9ArVqKzw3+anPSruVMdVvVK6uvPzqKOxEOi0T
LOFNJSqsJLjZ9hVVaQueOa5JC4ysLgodPyuosAmHpbS87MNcY2XMjdaAde2etzM7
odNhJbZzj2VRhTK6kJ8tjP85j/RXnItmJVR98+FwTDgKvF8faCdXZlfR8mm/RKBG
m6CPU32lskPBqNB/BtFPsoK0H4rBn5S5cRfhJ3Qi1LuttSqjiAK2oB8eYrGF8eC/
tGQSgcoTmNVWp4zwXAL9lFuwUHdFKYsqIOeurIkDOJTlj3H1XRQoWXguRQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHc+q9ChyGX1JAzY7/9fopPF4G+FMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZHo2cjBLSElaZlVrRE5qdl8xLWlrOFhnYjRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABJC9wZuxfveONxc4Ssb
9tbbmEPXvvZAo+mHlSZqliSHif71/JFWwT1OMEi0+kneqhKFzVfL1C5/2HUX0KML
bxvgDP4n0Li80cHxi00vSz6ATBdAim71HTy8Pmfs0BwjlmcRtq3SceiT4znN5h5R
0fStk2dBT9U04vD8oBlc+IXZoPUt78LLRFzh/4iAiYiX71SJ2rvAJmYbCvWWvkkF
Y8OaiGG9r04+NN1HKI+HJc1D1JTeFgvgiCCf60ysDdC9Sf5+BBadImIHbvNBEmlp
F4X33ikWwa+KrQMJSak7daAqmlBIPllO2qj4Rf5+UvLPSGUPn7Car2u0/T2xwARL
IuI=
-----END CERTIFICATE-----
Generated at Sat May 3 06:17:08 2025 by rpki-client