Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fMDsLxPcWPboUyQtwsTFc35bxv4.roa
File: fMDsLxPcWPboUyQtwsTFc35bxv4.roa (raw, json)
Hash identifier: KHLEaFCQcywg1HAYAbgCqEvy6PnDOppNTlWpZESVjPk=
Subject key identifier: 7C:C0:EC:2F:13:DC:58:F6:E8:53:24:2D:C2:C4:C5:73:7E:5B:C6:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01863496924A1726BBF5738B3ACF34BAF25E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fMDsLxPcWPboUyQtwsTFc35bxv4.roa
Signing time: Thu 09 Feb 2023 05:12:08 +0000
ROA not before: Thu 09 Feb 2023 05:12:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:34:96:92:4a:17:26:bb:f5:73:8b:3a:cf:34:ba:f2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 9 05:12:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cc0ec2f13dc58f6e853242dc2c4c5737e5bc6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:0d:1b:ec:c0:b1:cf:6f:e4:fe:a3:63:ed:
41:ac:53:1a:a9:e1:e2:2b:87:51:d6:0d:55:05:d1:
87:3e:8c:73:d2:29:67:08:99:9d:d9:e7:c5:22:29:
e5:b8:a5:e3:47:01:22:ac:fb:14:3a:96:bb:8f:47:
30:6d:6a:02:e6:00:51:66:18:3b:7e:48:f6:2c:72:
46:63:55:1f:f1:f1:29:bb:36:d3:8b:bf:c3:8b:0f:
68:1a:bb:97:83:32:ba:a7:ae:46:72:d4:81:f5:41:
8f:0d:0e:c1:3e:38:cc:01:ef:b8:49:5d:8e:6d:ea:
3a:24:41:57:a4:04:a2:3f:a0:3a:f5:09:ff:29:b4:
1e:b5:81:26:04:97:c6:05:81:fc:f0:cf:8c:b5:04:
8a:64:4e:7a:a5:a5:96:55:f8:77:f4:58:67:f6:5b:
77:1c:f0:f3:cd:1c:f2:43:33:47:bf:7a:17:48:c8:
7c:25:b1:59:ec:f5:92:ad:da:34:0a:1a:29:65:a6:
ea:43:ce:ab:2c:55:3a:cb:18:1b:d9:e1:a4:be:fa:
40:a4:61:a2:55:05:14:e1:7e:a5:a4:d8:93:3e:28:
45:36:ec:51:4b:2f:33:a9:fb:2a:b4:cf:b7:e9:b4:
1f:1f:c4:18:38:6f:b0:7b:ef:75:34:0c:90:59:6c:
85:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C0:EC:2F:13:DC:58:F6:E8:53:24:2D:C2:C4:C5:73:7E:5B:C6:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fMDsLxPcWPboUyQtwsTFc35bxv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:ee:b0:09:21:41:40:b5:92:75:3c:18:2b:39:45:79:79:1e:
c3:8c:5c:63:45:5e:47:85:c5:7d:b6:c2:66:a0:e8:1d:ee:c5:
98:4b:c2:29:e6:f8:05:21:ec:4b:16:11:b6:da:e1:2f:2f:d8:
5f:3a:73:e1:be:c1:c1:9c:3c:15:5c:65:b9:dc:f2:b1:ea:78:
61:f8:31:89:ac:97:65:75:9b:94:e4:d1:ee:bc:61:da:a0:b1:
08:3d:61:46:ce:2c:68:21:f1:28:a3:9b:5e:5c:fd:8c:a9:6e:
3e:cf:de:1e:2e:4d:fd:84:c8:41:09:23:2b:74:22:a7:00:4d:
9a:f5:f9:79:c8:61:34:0f:f2:4c:eb:1a:de:3f:07:bb:e5:c6:
d8:f9:5e:2a:86:a4:f9:f7:9a:66:f0:43:82:cc:71:85:f6:a5:
c0:08:4a:7e:4f:1a:aa:4e:e4:eb:13:0c:9f:a5:3a:5e:56:78:
6d:a2:60:00:db:99:18:61:88:f0:93:04:81:f0:f4:eb:62:7a:
4d:7d:d6:d7:ba:67:68:f0:81:49:37:fd:58:2c:f6:78:9c:16:
61:7f:ea:36:b5:ca:03:32:78:be:ab:f6:86:c5:20:f8:a6:1f:
6c:89:36:52:83:77:04:09:bc:7a:88:58:bd:60:76:da:f2:fe:
e7:39:25:ee
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYY0lpJKFya79XOLOs80uvJeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjA5MDUxMjA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2MwZWMyZjEzZGM1OGY2ZTg1MzI0MmRjMmM0YzU3MzdlNWJjNmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfwNG+zAsc9v5P6jY+1BrFMaqeHi
K4dR1g1VBdGHPoxz0ilnCJmd2efFIinluKXjRwEirPsUOpa7j0cwbWoC5gBRZhg7
fkj2LHJGY1Uf8fEpuzbTi7/Diw9oGruXgzK6p65GctSB9UGPDQ7BPjjMAe+4SV2O
beo6JEFXpASiP6A69Qn/KbQetYEmBJfGBYH88M+MtQSKZE56paWWVfh39Fhn9lt3
HPDzzRzyQzNHv3oXSMh8JbFZ7PWSrdo0ChopZabqQ86rLFU6yxgb2eGkvvpApGGi
VQUU4X6lpNiTPihFNuxRSy8zqfsqtM+36bQfH8QYOG+we+91NAyQWWyFiwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHzA7C8T3Fj26FMkLcLExXN+W8b+MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZk1Ec0x4UGNXUGJvVXlRdHdzVEZjMzVieHY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKnusAkhQUC1knU8GCs5
RXl5HsOMXGNFXkeFxX22wmag6B3uxZhLwinm+AUh7EsWEbba4S8v2F86c+G+wcGc
PBVcZbnc8rHqeGH4MYmsl2V1m5Tk0e68YdqgsQg9YUbOLGgh8Sijm15c/Yypbj7P
3h4uTf2EyEEJIyt0IqcATZr1+XnIYTQP8kzrGt4/B7vlxtj5XiqGpPn3mmbwQ4LM
cYX2pcAISn5PGqpO5OsTDJ+lOl5WeG2iYADbmRhhiPCTBIHw9Otiek191te6Z2jw
gUk3/Vgs9nicFmF/6ja1ygMyeL6r9obFIPimH2yJNlKDdwQJvHqIWL1gdtry/uc5
Je4=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:40:51 2025 by rpki-client