Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h_6iksBS9YMwcA2v2pjuCqgM3dU.roa
File: h_6iksBS9YMwcA2v2pjuCqgM3dU.roa (raw, json)
Hash identifier: hWpvoM95j3TrOWBfddmdNXyZ0ksnDcc8lPNeI7KMuV4=
Subject key identifier: 87:FE:A2:92:C0:52:F5:83:30:70:0D:AF:DA:98:EE:0A:A8:0C:DD:D5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01852DBAFA1D8AB603CFC7CFEABEDD7B9E09
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h_6iksBS9YMwcA2v2pjuCqgM3dU.roa
Signing time: Tue 20 Dec 2022 04:11:46 +0000
ROA not before: Tue 20 Dec 2022 04:11:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2d:ba:fa:1d:8a:b6:03:cf:c7:cf:ea:be:dd:7b:9e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 20 04:11:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87fea292c052f58330700dafda98ee0aa80cddd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5b:a2:6e:eb:65:4e:a3:a9:1e:13:4d:35:fa:
4c:f8:1b:15:92:73:13:41:42:05:f7:75:c6:8a:de:
f3:c8:9b:30:ea:4b:d1:4d:97:ef:b6:d7:4f:07:f0:
1e:ca:4e:c3:d4:0d:57:e7:ee:a3:80:e7:2a:33:e1:
3f:8f:61:da:7c:4f:e5:71:82:3f:c5:1a:25:6b:36:
f6:fe:34:98:df:f0:70:68:93:7a:85:8b:61:78:3d:
7c:17:12:17:fa:d2:05:9b:69:6b:b3:9a:9e:85:a3:
23:8d:bf:27:b5:0f:fc:41:83:a6:7e:78:ac:ed:dd:
31:a0:5c:9d:14:51:8a:f6:7e:a1:c7:fd:e9:dc:ae:
ac:43:e2:e1:66:c4:72:2b:a1:3c:c5:42:1c:4f:b2:
26:91:46:d0:ce:32:15:aa:c2:1a:73:84:c3:8f:f1:
da:8d:ae:ce:72:ca:0a:c2:63:b8:26:2e:f5:5b:17:
8c:8d:33:e5:83:55:f7:54:7a:99:7d:4c:34:96:47:
4b:13:6c:6e:32:77:f0:30:fe:6a:2f:20:87:76:57:
2b:0d:b2:dc:57:53:27:d5:d8:cf:42:00:96:89:83:
73:c6:6a:45:95:13:80:11:2c:ae:d7:37:b5:a8:8d:
28:00:d7:7a:b9:10:4e:5f:e4:71:44:bd:2c:d5:d4:
6b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FE:A2:92:C0:52:F5:83:30:70:0D:AF:DA:98:EE:0A:A8:0C:DD:D5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h_6iksBS9YMwcA2v2pjuCqgM3dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:d5:31:ca:0e:8a:8a:74:67:34:99:57:4b:2b:1d:df:c5:c2:
70:90:ff:22:e5:01:05:fd:2f:8c:7c:39:b4:7e:76:07:fc:32:
91:0a:ef:a2:a8:e0:47:ec:2e:47:e2:ba:4b:5b:e2:be:b0:76:
29:4b:a3:64:5f:1f:2e:1a:ab:84:26:85:2c:54:86:39:7e:58:
6d:e3:89:f8:31:a6:c7:27:8a:c5:fa:83:3c:b7:4d:2c:5f:bd:
29:d0:90:f0:cd:b7:6a:a8:7a:6a:72:c7:45:d6:54:63:92:c0:
97:0f:a6:f9:3c:ae:4a:44:7c:84:74:7e:9e:ed:93:9f:ef:3f:
aa:69:e8:92:7a:ad:21:fa:c3:8a:d2:4f:35:af:47:2b:0d:de:
da:4f:8a:a6:f6:d6:e0:f5:da:de:f7:74:63:bb:99:b3:9a:83:
c3:34:c4:c6:bc:69:d9:f6:1a:b8:d4:1b:a8:51:fa:26:6d:22:
c2:05:95:8d:0d:23:32:38:15:f5:86:c2:86:34:34:bc:3a:32:
b2:14:e6:4d:f7:45:5a:b4:6e:3c:15:96:9e:2d:d1:37:02:31:
c2:da:eb:63:a3:4e:c4:b6:c4:77:f1:9d:72:54:75:e6:46:d1:
11:0b:31:30:03:57:12:10:28:06:3f:a3:f9:ba:44:3a:c9:ab:
a2:9a:93:d2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUtuvodirYDz8fP6r7de54JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjIwMDQxMTQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2ZlYTI5MmMwNTJmNTgzMzA3MDBkYWZkYTk4ZWUwYWE4MGNkZGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVuibutlTqOpHhNNNfpM+BsVknMT
QUIF93XGit7zyJsw6kvRTZfvttdPB/Aeyk7D1A1X5+6jgOcqM+E/j2HafE/lcYI/
xRolazb2/jSY3/BwaJN6hYtheD18FxIX+tIFm2lrs5qehaMjjb8ntQ/8QYOmfnis
7d0xoFydFFGK9n6hx/3p3K6sQ+LhZsRyK6E8xUIcT7ImkUbQzjIVqsIac4TDj/Ha
ja7OcsoKwmO4Ji71WxeMjTPlg1X3VHqZfUw0lkdLE2xuMnfwMP5qLyCHdlcrDbLc
V1Mn1djPQgCWiYNzxmpFlROAESyu1ze1qI0oANd6uRBOX+RxRL0s1dRruQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIf+opLAUvWDMHANr9qY7gqoDN3VMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvaF82aWtzQlM5WU13Y0EydjJwanVDcWdNM2RVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHfVMcoOiop0ZzSZV0sr
Hd/FwnCQ/yLlAQX9L4x8ObR+dgf8MpEK76Ko4EfsLkfiuktb4r6wdilLo2RfHy4a
q4QmhSxUhjl+WG3jifgxpscnisX6gzy3TSxfvSnQkPDNt2qoempyx0XWVGOSwJcP
pvk8rkpEfIR0fp7tk5/vP6pp6JJ6rSH6w4rSTzWvRysN3tpPiqb21uD12t73dGO7
mbOag8M0xMa8adn2GrjUG6hR+iZtIsIFlY0NIzI4FfWGwoY0NLw6MrIU5k33RVq0
bjwVlp4t0TcCMcLa62OjTsS2xHfxnXJUdeZG0RELMTADVxIQKAY/o/m6RDrJq6Ka
k9I=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:47 2025 by rpki-client