Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g3s0aSnZSHdhPPAG7mlKjlgRVj4.roa
File: g3s0aSnZSHdhPPAG7mlKjlgRVj4.roa (raw, json)
Hash identifier: rVq9JzDpQLWQA3g24nUgejEx/E7LDtb5TpM4ld8kxHc=
Subject key identifier: 83:7B:34:69:29:D9:48:77:61:3C:F0:06:EE:69:4A:8E:58:11:56:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183B77C53431AE6DCB1B257AC40AB1493D0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g3s0aSnZSHdhPPAG7mlKjlgRVj4.roa
Signing time: Sat 08 Oct 2022 12:05:21 +0000
ROA not before: Sat 08 Oct 2022 12:05:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:183:b77b:bf31/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b7:7c:53:43:1a:e6:dc:b1:b2:57:ac:40:ab:14:93:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 8 12:05:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=837b346929d94877613cf006ee694a8e5811563e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9d:11:76:97:8c:a5:4d:2f:35:8f:b3:6b:9b:
29:6f:ab:33:95:c9:70:e6:4f:f1:49:f6:dc:39:47:
2a:9c:06:40:f8:2a:7a:ff:72:ac:87:c1:c6:bb:70:
59:dc:5d:62:16:5a:0b:eb:52:5c:4c:60:75:fd:c3:
68:cd:dd:df:13:f9:fb:09:4d:76:c6:3f:ff:6b:c0:
d1:0e:da:ea:40:2f:ad:1e:42:5d:8b:fd:9b:df:62:
e8:a3:ca:7b:12:9b:db:c3:ab:b2:71:b8:23:37:81:
4a:83:7e:b4:23:53:3a:7e:6c:bd:4a:35:fa:d0:29:
91:83:e0:af:84:07:18:cd:bd:3e:8d:2d:c0:b3:4b:
3c:cc:a1:77:e2:f6:e4:57:a4:98:e3:9e:8b:33:40:
be:47:fa:7d:d7:e9:8c:23:bc:7e:96:c4:66:e0:5f:
a9:67:03:2b:da:da:50:a7:d4:00:32:00:7f:e3:2a:
14:c8:8c:00:40:47:0b:ed:45:6e:cb:7c:29:2a:c1:
8b:c8:4a:d3:44:6e:17:55:e1:a2:d2:1e:1a:cd:fd:
f7:25:0f:98:c1:e3:92:bf:88:b2:4c:d0:bb:01:1e:
11:ac:a1:47:79:a9:5d:d0:f7:b8:1e:70:53:21:f3:
c5:eb:ed:51:08:69:ea:bf:3c:bb:89:ab:ca:dc:a7:
ca:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7B:34:69:29:D9:48:77:61:3C:F0:06:EE:69:4A:8E:58:11:56:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g3s0aSnZSHdhPPAG7mlKjlgRVj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:3a:39:0a:57:0b:90:40:54:02:5f:db:cf:68:71:52:4a:cc:
fa:e6:40:22:00:03:0d:49:98:d1:ed:08:6b:6a:e4:c6:d3:13:
f3:54:4f:13:da:1b:d7:bf:ac:70:d1:e4:cd:aa:01:f6:94:55:
1d:4f:24:31:57:7f:b9:db:ff:58:31:2b:49:26:28:7a:f6:e5:
cf:b9:1a:08:62:ac:c7:7d:e6:02:1e:2e:81:35:2f:0d:a2:2b:
02:dc:6f:de:ac:ac:c0:66:1e:94:80:d9:b1:c5:06:a7:60:c1:
b1:60:aa:64:ff:30:7c:af:42:2c:84:0a:41:5f:b3:ae:29:8f:
c0:14:28:c8:3b:4c:a8:6c:b9:5b:57:35:bc:a5:b1:32:c5:52:
0f:54:f7:eb:e6:b8:1e:ce:a0:2d:7e:b8:d6:3d:f1:e5:1b:0b:
4d:df:a6:64:3c:0b:eb:bd:80:bd:d8:64:a6:2c:f3:46:41:0b:
2e:d7:84:e2:82:1a:ef:5d:0e:70:dd:72:7d:3d:90:f7:2a:29:
26:54:6e:df:64:36:c6:5f:1a:1f:1d:5d:fc:8e:c6:5c:ae:a9:
93:7b:f6:71:fd:02:bf:70:b1:ed:17:eb:01:37:0f:2e:43:52:
4b:0d:01:06:d0:c6:cd:8f:18:d5:d8:dd:0d:b9:10:e0:60:b5:
02:c8:8a:3b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYO3fFNDGubcsbJXrECrFJPQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDA4MTIwNTIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzdiMzQ2OTI5ZDk0ODc3NjEzY2YwMDZlZTY5NGE4ZTU4MTE1NjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ0RdpeMpU0vNY+za5spb6szlclw
5k/xSfbcOUcqnAZA+Cp6/3Ksh8HGu3BZ3F1iFloL61JcTGB1/cNozd3fE/n7CU12
xj//a8DRDtrqQC+tHkJdi/2b32Loo8p7Epvbw6uycbgjN4FKg360I1M6fmy9SjX6
0CmRg+CvhAcYzb0+jS3As0s8zKF34vbkV6SY456LM0C+R/p91+mMI7x+lsRm4F+p
ZwMr2tpQp9QAMgB/4yoUyIwAQEcL7UVuy3wpKsGLyErTRG4XVeGi0h4azf33JQ+Y
weOSv4iyTNC7AR4RrKFHeald0Pe4HnBTIfPF6+1RCGnqvzy7iavK3KfKJQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIN7NGkp2Uh3YTzwBu5pSo5YEVY+MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZzNzMGFTblpTSGRoUFBBRzdtbEtqbGdSVmo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFA6OQpXC5BAVAJf289o
cVJKzPrmQCIAAw1JmNHtCGtq5MbTE/NUTxPaG9e/rHDR5M2qAfaUVR1PJDFXf7nb
/1gxK0kmKHr25c+5GghirMd95gIeLoE1Lw2iKwLcb96srMBmHpSA2bHFBqdgwbFg
qmT/MHyvQiyECkFfs64pj8AUKMg7TKhsuVtXNbylsTLFUg9U9+vmuB7OoC1+uNY9
8eUbC03fpmQ8C+u9gL3YZKYs80ZBCy7XhOKCGu9dDnDdcn09kPcqKSZUbt9kNsZf
Gh8dXfyOxlyuqZN79nH9Ar9wse0X6wE3Dy5DUksNAQbQxs2PGNXY3Q25EOBgtQLI
ijs=
-----END CERTIFICATE-----
Generated at Thu May 1 03:01:51 2025 by rpki-client