Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fJLZw1fhR15Yl7dTrMl4_cSvgLo.roa
File: fJLZw1fhR15Yl7dTrMl4_cSvgLo.roa (raw, json)
Hash identifier: VfgEA02fl+5/513lYe4ZMuwY3EV9q8hbDOsj2goUBOU=
Subject key identifier: 7C:92:D9:C3:57:E1:47:5E:58:97:B7:53:AC:C9:78:FD:C4:AF:80:BA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855FEE2A9654AFE9E5C837D0470F6E926B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fJLZw1fhR15Yl7dTrMl4_cSvgLo.roa
Signing time: Thu 29 Dec 2022 22:08:42 +0000
ROA not before: Thu 29 Dec 2022 22:08:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5f:ee:2a:96:54:af:e9:e5:c8:37:d0:47:0f:6e:92:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 29 22:08:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c92d9c357e1475e5897b753acc978fdc4af80ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:58:92:0c:43:30:4f:7b:f6:18:e3:57:46:18:
00:de:49:17:6d:47:66:28:ad:26:ae:31:4b:29:3c:
e6:76:a9:b8:f2:23:fa:b7:5f:32:bb:23:82:ac:ad:
0e:b3:d9:e3:d6:a3:56:ee:58:88:ab:e1:da:90:7b:
21:2e:41:f9:b7:71:32:dc:4c:1a:d8:d8:b1:1c:0e:
0b:d2:c4:32:0c:c1:7e:18:60:5b:77:05:08:6c:09:
99:59:64:b0:51:d6:21:29:a6:89:85:c9:33:09:a5:
64:7d:49:5d:ce:89:2f:9d:cc:f4:86:f4:6a:3a:6d:
b6:9b:14:4d:48:22:07:51:4b:64:d1:85:27:c6:b4:
c6:33:fc:6b:a3:00:82:59:4f:5f:ca:1e:8d:1c:92:
23:0f:a1:98:4b:db:41:f5:47:25:65:b6:ac:ef:d6:
42:31:67:1a:5d:23:22:3a:69:8a:47:c8:a7:03:bf:
95:6d:8b:da:b5:b1:7f:8c:f5:1d:b3:63:91:bc:99:
46:5f:a2:59:d9:53:59:49:a6:29:fb:2b:da:5a:55:
57:31:17:52:c7:ec:e7:d3:d3:59:2c:65:00:29:ee:
f6:40:02:88:e7:8c:cb:28:ec:28:6e:53:f1:62:b9:
5b:b2:5f:da:e0:36:76:d3:ea:d2:79:6d:87:91:e3:
13:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:92:D9:C3:57:E1:47:5E:58:97:B7:53:AC:C9:78:FD:C4:AF:80:BA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fJLZw1fhR15Yl7dTrMl4_cSvgLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:33:1d:7d:41:79:4c:91:ca:b0:7f:92:67:6e:a8:07:42:c1:
23:ba:2a:5f:bc:00:82:49:f4:1e:26:df:94:98:49:9d:4c:c7:
00:c5:a7:db:69:9a:cd:2f:96:f5:1a:c0:0f:fe:7a:42:da:74:
07:3b:7a:43:9b:63:29:4c:32:38:0a:6d:cc:c4:89:a0:d3:8f:
e9:03:8f:57:eb:16:ef:db:5e:93:94:71:74:61:b7:24:b3:fb:
98:c4:6b:b0:ea:40:da:a8:35:44:ad:2c:65:d2:b8:dc:7b:ec:
f3:19:e8:68:f2:53:5a:bd:ef:94:f7:44:85:81:c8:65:56:df:
2a:94:47:b5:1b:53:a4:71:23:21:17:cd:51:2b:c7:c2:c9:49:
d2:36:94:36:13:dd:c8:4d:bc:15:81:b4:74:36:fd:48:2d:c6:
b6:2b:43:0f:9f:03:8e:a7:5a:73:d7:c2:7b:e2:57:ce:86:9f:
73:78:10:8c:9b:c6:73:dc:aa:e5:99:26:05:5e:b6:32:af:b7:
7b:c8:8d:f3:fa:5b:c8:3a:a7:ab:07:3c:3b:ff:1d:01:33:4b:
f0:98:cd:48:b2:61:7c:54:42:5b:63:dc:5e:2d:5a:35:72:79:
04:83:40:41:14:a4:d3:95:66:39:6a:17:ae:4c:9f:86:ee:a6:
80:8d:c7:9d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVf7iqWVK/p5cg30EcPbpJrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjI5MjIwODQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzkyZDljMzU3ZTE0NzVlNTg5N2I3NTNhY2M5NzhmZGM0YWY4MGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01iSDEMwT3v2GONXRhgA3kkXbUdm
KK0mrjFLKTzmdqm48iP6t18yuyOCrK0Os9nj1qNW7liIq+HakHshLkH5t3Ey3Ewa
2NixHA4L0sQyDMF+GGBbdwUIbAmZWWSwUdYhKaaJhckzCaVkfUldzokvncz0hvRq
Om22mxRNSCIHUUtk0YUnxrTGM/xrowCCWU9fyh6NHJIjD6GYS9tB9UclZbas79ZC
MWcaXSMiOmmKR8inA7+VbYvatbF/jPUds2ORvJlGX6JZ2VNZSaYp+yvaWlVXMRdS
x+zn09NZLGUAKe72QAKI54zLKOwoblPxYrlbsl/a4DZ20+rSeW2HkeMTRwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHyS2cNX4UdeWJe3U6zJeP3Er4C6MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZkpMWncxZmhSMTVZbDdkVHJNbDRfY1N2Z0xvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKozHX1BeUyRyrB/kmdu
qAdCwSO6Kl+8AIJJ9B4m35SYSZ1MxwDFp9tpms0vlvUawA/+ekLadAc7ekObYylM
MjgKbczEiaDTj+kDj1frFu/bXpOUcXRhtySz+5jEa7DqQNqoNUStLGXSuNx77PMZ
6GjyU1q975T3RIWByGVW3yqUR7UbU6RxIyEXzVErx8LJSdI2lDYT3chNvBWBtHQ2
/UgtxrYrQw+fA46nWnPXwnviV86Gn3N4EIybxnPcquWZJgVetjKvt3vIjfP6W8g6
p6sHPDv/HQEzS/CYzUiyYXxUQltj3F4tWjVyeQSDQEEUpNOVZjlqF65Mn4bupoCN
x50=
-----END CERTIFICATE-----
Generated at Thu May 1 19:09:41 2025 by rpki-client