Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fhTOuA2pOhVI0qDwOy6assR2_dg.roa
File: fhTOuA2pOhVI0qDwOy6assR2_dg.roa (raw, json)
Hash identifier: K3zhh68ufdD+q6E9oUqo5yv4arQSue9+xjYLq3hgyQY=
Subject key identifier: 7E:14:CE:B8:0D:A9:3A:15:48:D2:A0:F0:3B:2E:9A:B2:C4:76:FD:D8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018876A6A2A44A645356BC2D0316D5B5B77F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fhTOuA2pOhVI0qDwOy6assR2_dg.roa
Signing time: Thu 01 Jun 2023 11:10:12 +0000
ROA not before: Thu 01 Jun 2023 11:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:76:a6:a2:a4:4a:64:53:56:bc:2d:03:16:d5:b5:b7:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 1 11:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e14ceb80da93a1548d2a0f03b2e9ab2c476fdd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:e2:3d:ab:5b:3d:17:da:bf:d6:c7:51:01:
b9:33:8b:00:89:78:12:99:e8:52:a1:df:ac:f9:6a:
7a:c0:8d:60:49:4c:9c:6c:17:29:8b:78:35:9a:55:
98:e5:81:d7:ad:69:7b:d1:be:f2:70:99:17:74:cf:
fe:70:d5:07:b2:18:1e:4c:71:1a:fc:5a:3e:00:dd:
47:75:28:9a:6f:e4:97:7e:7b:6b:0c:b9:27:55:c0:
ca:3b:0e:c6:3d:5c:58:d0:3a:9b:fe:92:e7:bb:dd:
09:f8:60:ef:0d:45:34:78:ae:55:0b:82:2a:ce:59:
9a:5a:b0:ea:98:03:5f:45:97:2e:b8:e8:d9:7c:2a:
64:c3:3b:8c:c0:50:15:d1:f6:7b:34:97:37:35:14:
51:e9:eb:f1:80:63:e5:31:ea:02:9d:8e:14:16:6d:
64:f8:02:be:36:34:70:36:a1:ea:f5:6c:3c:b7:bc:
08:e1:0c:aa:da:ba:e9:32:9e:ee:1d:7a:88:e2:dc:
dd:82:31:5e:a8:df:d4:05:56:62:3f:95:90:6c:52:
6b:c2:b8:c0:22:6f:61:03:f1:03:a9:01:7a:7a:cf:
f8:cc:1e:e5:4a:b3:97:4d:10:a8:a5:0c:66:51:6a:
8a:3a:b5:e2:02:4d:da:7e:f5:2c:f9:5c:30:f1:df:
b0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:14:CE:B8:0D:A9:3A:15:48:D2:A0:F0:3B:2E:9A:B2:C4:76:FD:D8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fhTOuA2pOhVI0qDwOy6assR2_dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:65:1e:da:b2:d5:af:a6:c7:14:77:14:eb:93:4d:bd:7a:94:
b6:48:d1:fb:d5:89:b3:3a:21:69:b4:11:9c:e1:c4:91:b4:f0:
d1:1e:51:98:a0:ca:1c:c0:ec:1d:4c:20:a7:44:2f:ff:68:f3:
54:a6:12:24:d8:5a:d0:d6:ae:84:2f:8b:60:19:cb:d6:b9:13:
d9:4a:58:e0:74:c2:6f:1e:0a:08:f5:e5:a6:eb:cf:c2:ec:d1:
79:8d:42:4f:42:18:34:67:4d:ba:6a:f3:cb:06:6c:ca:91:3d:
ee:2a:63:15:64:4a:04:44:a9:18:b9:0a:64:7c:1c:c1:1e:6c:
06:da:6c:90:c7:ba:c5:f9:15:f8:9d:8f:e9:c5:3b:4d:c6:cf:
ae:a4:7b:f3:bc:c0:fe:f6:13:f3:06:5a:51:d6:f7:86:97:ea:
1f:6a:62:0a:97:36:7a:29:da:91:9b:c4:5a:33:fa:d1:86:60:
e0:fd:36:de:33:b6:90:5c:9c:53:fa:1e:d8:86:0b:c8:30:a0:
35:f1:13:83:9e:04:8c:58:8a:35:cf:6c:ae:fb:da:6b:b6:87:
a6:fc:d4:a4:63:72:57:6e:b6:a3:9f:22:17:a7:93:18:a7:11:
a7:32:cf:96:02:95:a9:33:01:13:62:d6:29:56:63:d6:99:81:
33:b2:b7:b9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYh2pqKkSmRTVrwtAxbVtbd/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjAxMTExMDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTE0Y2ViODBkYTkzYTE1NDhkMmEwZjAzYjJlOWFiMmM0NzZmZGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLziPatbPRfav9bHUQG5M4sAiXgS
mehSod+s+Wp6wI1gSUycbBcpi3g1mlWY5YHXrWl70b7ycJkXdM/+cNUHshgeTHEa
/Fo+AN1HdSiab+SXfntrDLknVcDKOw7GPVxY0Dqb/pLnu90J+GDvDUU0eK5VC4Iq
zlmaWrDqmANfRZcuuOjZfCpkwzuMwFAV0fZ7NJc3NRRR6evxgGPlMeoCnY4UFm1k
+AK+NjRwNqHq9Ww8t7wI4Qyq2rrpMp7uHXqI4tzdgjFeqN/UBVZiP5WQbFJrwrjA
Im9hA/EDqQF6es/4zB7lSrOXTRCopQxmUWqKOrXiAk3afvUs+Vww8d+wtwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFH4UzrgNqToVSNKg8DsumrLEdv3YMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZmhUT3VBMnBPaFZJMHFEd095NmFzc1IyX2RnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJplHtqy1a+mxxR3FOuT
Tb16lLZI0fvVibM6IWm0EZzhxJG08NEeUZigyhzA7B1MIKdEL/9o81SmEiTYWtDW
roQvi2AZy9a5E9lKWOB0wm8eCgj15abrz8Ls0XmNQk9CGDRnTbpq88sGbMqRPe4q
YxVkSgREqRi5CmR8HMEebAbabJDHusX5Ffidj+nFO03Gz66ke/O8wP72E/MGWlHW
94aX6h9qYgqXNnop2pGbxFoz+tGGYOD9Nt4ztpBcnFP6HtiGC8gwoDXxE4OeBIxY
ijXPbK772mu2h6b81KRjcldutqOfIhenkxinEacyz5YClakzARNi1ilWY9aZgTOy
t7k=
-----END CERTIFICATE-----
Generated at Wed Apr 30 23:12:23 2025 by rpki-client