Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i0OXIacc6Uw6kztLrY5MMMDDDqc.roa
File: i0OXIacc6Uw6kztLrY5MMMDDDqc.roa (raw, json)
Hash identifier: 5HreAD9BPxtWCai9TDipWPTIPki4FAN9J6SNMvNHcx8=
Subject key identifier: 8B:43:97:21:A7:1C:E9:4C:3A:93:3B:4B:AD:8E:4C:30:C0:C3:0E:A7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01886F9040BAB53C95A93E0787E0927C313A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i0OXIacc6Uw6kztLrY5MMMDDDqc.roa
Signing time: Wed 31 May 2023 02:08:24 +0000
ROA not before: Wed 31 May 2023 02:08:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6f:90:40:ba:b5:3c:95:a9:3e:07:87:e0:92:7c:31:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 31 02:08:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b439721a71ce94c3a933b4bad8e4c30c0c30ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:0b:a6:0b:7f:f9:c1:7a:61:b4:fe:9b:3b:
c2:6d:28:17:1d:2d:5c:39:d4:f7:7b:e1:5f:ec:9b:
5d:4f:44:06:ca:e5:36:52:30:cb:3e:38:2e:10:16:
e6:f0:5e:6b:88:2f:ea:cc:7e:0d:2a:8f:9c:cf:79:
f3:11:92:cb:f9:29:e1:19:1b:ff:2b:8e:76:5a:e1:
63:10:2d:e5:a8:9e:f0:e2:44:ea:15:d7:20:0e:ca:
c7:3d:a3:4f:65:15:60:68:73:16:80:f5:18:e9:d9:
4c:aa:f7:b4:75:d1:cd:78:e5:8b:7a:bf:3c:3c:e8:
4d:66:98:d8:ad:27:77:62:b2:9a:e8:c1:5a:de:15:
9b:08:ac:3c:7e:3e:99:d2:34:aa:39:46:5a:57:4d:
a6:28:b1:ee:16:8c:9d:73:3e:1b:f2:8d:7f:4a:38:
3b:f6:be:b8:45:71:3c:05:25:8f:e9:bb:19:3c:39:
de:17:9d:74:e3:3e:d5:ee:c4:62:54:b5:1b:99:e5:
77:9c:a5:2f:31:9f:68:98:37:94:3b:67:a2:96:7a:
32:2e:b9:ea:04:f9:e8:b0:08:03:46:72:2f:f3:86:
3d:0b:12:8f:28:f0:ee:de:1a:67:87:eb:0f:56:d8:
09:1b:ad:99:49:5c:23:e9:40:ed:cd:2f:4f:78:ca:
ba:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:43:97:21:A7:1C:E9:4C:3A:93:3B:4B:AD:8E:4C:30:C0:C3:0E:A7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i0OXIacc6Uw6kztLrY5MMMDDDqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:2f:3c:45:04:56:38:e8:8e:72:74:4f:1b:fe:7c:01:37:cd:
6c:98:76:24:e4:36:d1:32:8c:da:c7:c9:21:6a:80:33:6e:61:
50:c6:3a:84:53:41:ab:8b:79:71:e9:b3:8a:ef:c8:c2:08:31:
65:80:46:94:69:a2:f5:fb:39:66:da:76:ba:f7:ac:f8:3c:4b:
6e:8b:05:03:9a:37:dd:00:b0:03:08:22:0a:13:2a:3f:6a:3c:
73:9b:0b:04:f0:f0:37:04:dc:0b:46:16:04:10:b0:1f:be:24:
10:73:36:b8:84:69:c4:d1:ca:5a:b9:1b:3f:22:c9:79:f7:de:
b9:1c:bd:58:b4:13:b1:17:74:02:35:3c:68:3a:ed:2d:fe:7a:
97:35:3c:e7:67:5b:c8:bf:67:b2:af:ca:1e:8b:da:51:74:f3:
98:c6:11:07:5f:52:16:7c:f0:83:f7:83:31:05:53:c7:fe:f1:
b9:37:ef:45:79:99:96:37:fd:d3:14:5b:ee:7f:97:09:cc:2a:
ce:2e:ce:5a:01:57:76:f1:74:4e:02:99:03:47:64:93:35:0d:
cf:5a:d7:23:27:6e:0f:c4:ba:a1:21:83:33:74:cd:89:5a:f9:
c3:cc:64:0c:3f:36:4f:f5:86:0e:0f:b1:54:44:d3:ff:fa:0a:
ce:58:66:7e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhvkEC6tTyVqT4Hh+CSfDE6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTMxMDIwODI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjQzOTcyMWE3MWNlOTRjM2E5MzNiNGJhZDhlNGMzMGMwYzMwZWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKELpgt/+cF6YbT+mzvCbSgXHS1c
OdT3e+Ff7JtdT0QGyuU2UjDLPjguEBbm8F5riC/qzH4NKo+cz3nzEZLL+SnhGRv/
K452WuFjEC3lqJ7w4kTqFdcgDsrHPaNPZRVgaHMWgPUY6dlMqve0ddHNeOWLer88
POhNZpjYrSd3YrKa6MFa3hWbCKw8fj6Z0jSqOUZaV02mKLHuFoydcz4b8o1/Sjg7
9r64RXE8BSWP6bsZPDneF5104z7V7sRiVLUbmeV3nKUvMZ9omDeUO2eilnoyLrnq
BPnosAgDRnIv84Y9CxKPKPDu3hpnh+sPVtgJG62ZSVwj6UDtzS9PeMq6NQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFItDlyGnHOlMOpM7S62OTDDAww6nMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvaTBPWElhY2M2VXc2a3p0THJZNU1NTURERHFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAI4vPEUEVjjojnJ0Txv+
fAE3zWyYdiTkNtEyjNrHySFqgDNuYVDGOoRTQauLeXHps4rvyMIIMWWARpRpovX7
OWbadrr3rPg8S26LBQOaN90AsAMIIgoTKj9qPHObCwTw8DcE3AtGFgQQsB++JBBz
NriEacTRylq5Gz8iyXn33rkcvVi0E7EXdAI1PGg67S3+epc1POdnW8i/Z7Kvyh6L
2lF085jGEQdfUhZ88IP3gzEFU8f+8bk370V5mZY3/dMUW+5/lwnMKs4uzloBV3bx
dE4CmQNHZJM1Dc9a1yMnbg/EuqEhgzN0zYla+cPMZAw/Nk/1hg4PsVRE0//6Cs5Y
Zn4=
-----END CERTIFICATE-----
Generated at Sun May 4 13:49:53 2025 by rpki-client