Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fSbJozTwSj3_Nv1SgFWdUCkOQJ0.roa
File: fSbJozTwSj3_Nv1SgFWdUCkOQJ0.roa (raw, json)
Hash identifier: /mGoWP1mRSziqY4tPe3wOUTf2zzfONWmltUuB7Xag2E=
Subject key identifier: 7D:26:C9:A3:34:F0:4A:3D:FF:36:FD:52:80:55:9D:50:29:0E:40:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A6EE0E3D8FFC721D73538EED80FF460C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fSbJozTwSj3_Nv1SgFWdUCkOQJ0.roa
Signing time: Sun 30 Jul 2023 13:12:46 +0000
ROA not before: Sun 30 Jul 2023 13:12:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a6:ee:0e:3d:8f:fc:72:1d:73:53:8e:ed:80:ff:46:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 30 13:12:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d26c9a334f04a3dff36fd5280559d50290e409d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a8:3f:23:92:60:81:b8:ac:a5:9f:dd:63:48:
60:56:e6:85:9a:b1:54:36:0b:73:c2:d9:6a:2a:5b:
26:fd:0b:83:ff:91:df:15:dd:38:b8:0a:f3:52:49:
07:1e:4c:55:f5:8d:c1:a6:f8:00:3b:e5:e1:fa:f4:
2b:5c:85:aa:d3:24:e8:e7:cb:09:e3:b1:44:eb:fb:
8f:df:93:94:fe:9d:5f:31:5f:5f:18:3b:23:2f:6e:
9e:b4:d2:44:3d:13:a4:de:2a:d7:b0:b9:da:7f:92:
2f:aa:5d:94:7e:9f:47:8f:d4:11:6c:bb:8d:13:a5:
d5:6c:b2:34:e8:27:5a:fd:3d:cf:a0:61:81:b0:d2:
d7:f0:0f:76:f0:6c:48:f7:a7:db:13:af:db:80:30:
57:23:e5:73:5a:e2:cc:d0:38:03:44:06:28:c8:2d:
c6:4c:19:14:a0:f4:c6:ab:62:18:dd:79:aa:ba:a6:
ac:2a:d6:1f:4a:45:2f:3a:e0:4d:65:31:45:53:8c:
ac:c4:d7:1d:8a:93:5e:e0:e2:2d:9d:a6:7a:36:0e:
60:a1:ae:1b:20:5e:26:6e:cb:f1:5a:fd:4c:5b:e7:
ad:92:7e:2f:13:37:66:7c:b0:c1:ab:7e:bb:ab:02:
cc:d5:12:e8:a8:7c:4b:b1:b1:2e:a0:53:86:bb:29:
c4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:26:C9:A3:34:F0:4A:3D:FF:36:FD:52:80:55:9D:50:29:0E:40:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fSbJozTwSj3_Nv1SgFWdUCkOQJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:e2:1d:19:db:7d:e1:e0:fb:7c:73:d8:00:0b:0b:1d:ab:7d:
19:fe:19:20:ad:06:44:10:90:5b:ec:ce:ef:3a:8f:d5:9b:d2:
94:82:a5:bf:44:1b:15:e7:f6:3a:01:04:4f:03:e2:0d:c3:be:
10:f7:d0:5d:c5:d3:e6:c8:12:7e:2e:71:04:4f:d7:d2:4e:6b:
38:33:97:99:f2:29:19:4e:71:e5:e5:7f:60:ee:2e:8a:55:22:
a9:15:f2:44:28:c2:49:60:6d:17:28:81:b4:5c:cc:d5:1c:76:
13:14:d9:da:ac:ab:b0:d8:ce:63:50:27:9f:b4:7d:b0:0b:be:
a1:cc:70:87:02:95:26:74:27:d2:ca:dc:49:2d:db:d9:44:1b:
fd:43:34:47:e6:f3:bb:b9:6d:f2:67:b6:42:32:0c:26:15:ae:
b5:63:4e:fb:e2:4c:31:61:29:ff:cb:e9:65:97:50:bf:e8:d0:
5f:1b:e4:1f:16:65:f8:3e:34:ee:42:8a:0c:5e:5d:32:f4:a0:
ce:71:ed:37:82:8d:04:4b:df:9e:8d:39:38:61:26:82:f2:1e:
ba:26:a1:e4:f9:af:cb:6a:6c:e0:b5:da:dc:9c:c5:bd:5d:cb:
18:c0:af:30:04:45:c1:59:98:b1:b3:c1:fa:53:76:85:5d:b7:
b9:e5:5d:aa
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmm7g49j/xyHXNTju2A/0YMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzMwMTMxMjQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDI2YzlhMzM0ZjA0YTNkZmYzNmZkNTI4MDU1OWQ1MDI5MGU0MDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjag/I5JggbispZ/dY0hgVuaFmrFU
NgtzwtlqKlsm/QuD/5HfFd04uArzUkkHHkxV9Y3BpvgAO+Xh+vQrXIWq0yTo58sJ
47FE6/uP35OU/p1fMV9fGDsjL26etNJEPROk3irXsLnaf5Ivql2Ufp9Hj9QRbLuN
E6XVbLI06Cda/T3PoGGBsNLX8A928GxI96fbE6/bgDBXI+VzWuLM0DgDRAYoyC3G
TBkUoPTGq2IY3XmquqasKtYfSkUvOuBNZTFFU4ysxNcdipNe4OItnaZ6Ng5goa4b
IF4mbsvxWv1MW+etkn4vEzdmfLDBq367qwLM1RLoqHxLsbEuoFOGuynEKwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFH0myaM08Eo9/zb9UoBVnVApDkCdMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZlNiSm96VHdTajNfTnYxU2dGV2RVQ2tPUUowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAriHRnbfeHg+3xz2AAL
Cx2rfRn+GSCtBkQQkFvszu86j9Wb0pSCpb9EGxXn9joBBE8D4g3DvhD30F3F0+bI
En4ucQRP19JOazgzl5nyKRlOceXlf2DuLopVIqkV8kQowklgbRcogbRczNUcdhMU
2dqsq7DYzmNQJ5+0fbALvqHMcIcClSZ0J9LK3Ekt29lEG/1DNEfm87u5bfJntkIy
DCYVrrVjTvviTDFhKf/L6WWXUL/o0F8b5B8WZfg+NO5CigxeXTL0oM5x7TeCjQRL
356NOThhJoLyHromoeT5r8tqbOC12tycxb1dyxjArzAERcFZmLGzwfpTdoVdt7nl
Xao=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:06 2025 by rpki-client