Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fA0hCtHH9ZUo9avmf_EWiLtrL2Y.roa
File: fA0hCtHH9ZUo9avmf_EWiLtrL2Y.roa (raw, json)
Hash identifier: 9ipESuD6rRv8mKyYoMYRBAU8hNaJZZjZD4Alg0NfWSM=
Subject key identifier: 7C:0D:21:0A:D1:C7:F5:95:28:F5:AB:E6:7F:F1:16:88:BB:6B:2F:66
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018567DF8E585604F7B85C946A4389CF02D3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fA0hCtHH9ZUo9avmf_EWiLtrL2Y.roa
Signing time: Sat 31 Dec 2022 11:09:42 +0000
ROA not before: Sat 31 Dec 2022 11:09:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:67:df:8e:58:56:04:f7:b8:5c:94:6a:43:89:cf:02:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 31 11:09:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c0d210ad1c7f59528f5abe67ff11688bb6b2f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:97:69:e5:cc:23:b9:1f:78:a8:4d:7a:6c:3b:
8c:83:be:8f:20:03:36:55:43:ba:a4:2f:5a:85:70:
56:de:a5:7d:01:24:6c:42:c9:07:67:42:61:95:bf:
d6:29:2a:be:ab:d5:07:7b:72:64:78:46:01:a0:c8:
ad:80:99:8f:27:63:e5:f0:db:cc:78:c4:26:05:cd:
2a:14:99:89:2c:2d:a2:94:92:9f:7a:57:27:4b:6a:
e0:b9:0b:c5:c4:40:0d:a9:5c:10:f4:b6:83:ff:a8:
0a:e5:d1:68:07:f0:17:7c:27:47:5f:a3:a9:21:85:
03:49:d4:6a:43:5b:f1:40:93:12:cc:08:66:09:ae:
d7:fd:82:0f:b1:4a:0b:97:7f:dd:96:f1:28:99:f2:
04:af:51:55:ad:9d:0c:bb:d6:a1:b3:5f:66:51:ec:
79:48:bd:7b:c2:89:1f:6b:66:c9:8f:14:15:88:62:
a2:28:c8:e0:b3:0c:df:31:52:ae:84:c8:40:ac:d2:
db:7e:97:e4:a8:ac:44:01:e6:67:0a:45:aa:e1:df:
bd:46:24:49:56:ed:73:78:6b:36:2e:17:0a:89:6d:
e9:e0:2c:33:ed:83:be:6d:e9:9e:73:a8:2e:82:6e:
dd:f5:1f:c0:8e:91:3e:fb:6f:27:dc:02:dc:18:04:
a8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0D:21:0A:D1:C7:F5:95:28:F5:AB:E6:7F:F1:16:88:BB:6B:2F:66
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fA0hCtHH9ZUo9avmf_EWiLtrL2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:29:e0:75:75:af:1c:13:51:6d:69:0f:b2:00:29:5c:c5:f1:
d5:9e:c8:b6:9e:01:40:d6:46:3a:13:3b:1e:40:d4:66:7b:54:
cd:01:0c:ef:8e:ee:16:1b:d2:7f:bf:78:3f:8b:cc:e3:51:5f:
93:f1:ed:eb:4e:4b:46:03:c1:e4:52:55:cf:d4:dd:0e:a3:53:
70:e5:0d:71:e3:6f:f2:83:de:38:34:cb:4c:82:c5:19:3a:2d:
22:21:94:1f:20:e4:a9:0f:92:1b:2c:71:d9:11:e5:22:4e:a4:
3c:95:df:c1:93:ab:45:30:65:7b:0a:f3:84:c8:4e:fd:38:27:
c0:85:42:f6:e0:8f:a6:cd:22:55:2a:ee:6a:09:47:f4:17:14:
c8:b1:ca:06:2e:5b:6f:70:2e:aa:5d:9d:3b:0a:d1:ce:61:ed:
d3:04:99:35:65:43:23:42:c8:34:73:87:dc:9a:2d:f4:ee:9b:
71:01:36:3e:1c:b7:67:b8:ba:70:f8:79:a3:0c:b3:5e:74:41:
d9:f3:65:53:62:4a:28:78:ca:b1:08:e7:c4:99:38:2b:11:58:
cd:21:6f:5c:80:7a:49:dc:9e:e2:46:34:ac:c3:f5:f2:6f:0b:
b4:51:c4:8d:93:f7:37:1e:db:18:8f:8c:af:3f:06:b9:d3:f3:
42:16:8e:20
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVn345YVgT3uFyUakOJzwLTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjMxMTEwOTQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzBkMjEwYWQxYzdmNTk1MjhmNWFiZTY3ZmYxMTY4OGJiNmIyZjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5dp5cwjuR94qE16bDuMg76PIAM2
VUO6pC9ahXBW3qV9ASRsQskHZ0Jhlb/WKSq+q9UHe3JkeEYBoMitgJmPJ2Pl8NvM
eMQmBc0qFJmJLC2ilJKfelcnS2rguQvFxEANqVwQ9LaD/6gK5dFoB/AXfCdHX6Op
IYUDSdRqQ1vxQJMSzAhmCa7X/YIPsUoLl3/dlvEomfIEr1FVrZ0Mu9ahs19mUex5
SL17wokfa2bJjxQViGKiKMjgswzfMVKuhMhArNLbfpfkqKxEAeZnCkWq4d+9RiRJ
Vu1zeGs2LhcKiW3p4Cwz7YO+bemec6gugm7d9R/AjpE++28n3ALcGASoqwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHwNIQrRx/WVKPWr5n/xFoi7ay9mMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZkEwaEN0SEg5WlVvOWF2bWZfRVdpTHRyTDJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIQp4HV1rxwTUW1pD7IA
KVzF8dWeyLaeAUDWRjoTOx5A1GZ7VM0BDO+O7hYb0n+/eD+LzONRX5Px7etOS0YD
weRSVc/U3Q6jU3DlDXHjb/KD3jg0y0yCxRk6LSIhlB8g5KkPkhsscdkR5SJOpDyV
38GTq0UwZXsK84TITv04J8CFQvbgj6bNIlUq7moJR/QXFMixygYuW29wLqpdnTsK
0c5h7dMEmTVlQyNCyDRzh9yaLfTum3EBNj4ct2e4unD4eaMMs150QdnzZVNiSih4
yrEI58SZOCsRWM0hb1yAekncnuJGNKzD9fJvC7RRxI2T9zce2xiPjK8/BrnT80IW
jiA=
-----END CERTIFICATE-----
Generated at Thu May 1 07:06:37 2025 by rpki-client