Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i5AOwcxpDB0N1b7Wj7GBp7oclxE.roa
File: i5AOwcxpDB0N1b7Wj7GBp7oclxE.roa (raw, json)
Hash identifier: Qh9vZJzyLFFBhuqEbEFi7QYWZ9aV/dC/tyspnx/RpGo=
Subject key identifier: 8B:90:0E:C1:CC:69:0C:1D:0D:D5:BE:D6:8F:B1:81:A7:BA:1C:97:11
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018951EDE2B5A7A4FE3E7603F58B57D8DDE1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i5AOwcxpDB0N1b7Wj7GBp7oclxE.roa
Signing time: Fri 14 Jul 2023 01:04:51 +0000
ROA not before: Fri 14 Jul 2023 01:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:189:51ed:64c2/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:51:ed:e2:b5:a7:a4:fe:3e:76:03:f5:8b:57:d8:dd:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 14 01:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b900ec1cc690c1d0dd5bed68fb181a7ba1c9711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:41:0a:ff:36:15:22:3b:1e:61:e5:b9:05:
e1:5b:df:7d:5e:53:6d:bf:d9:fc:89:9e:a8:57:87:
40:0c:f6:f7:83:cd:c6:b7:b0:40:d4:63:94:50:62:
fc:f5:00:ff:4e:0e:9f:13:96:08:ff:6f:40:81:51:
72:c1:da:2c:fb:4e:9a:77:1f:55:f4:36:91:d7:90:
e2:b7:21:17:7a:7c:1d:fe:15:a4:24:0a:b9:e6:32:
6c:43:ac:ff:d5:99:af:a4:28:f9:55:c9:01:a1:a2:
69:d9:0d:8f:97:90:ee:6c:d4:33:99:71:9e:31:9c:
d1:3b:6c:ae:10:b5:96:2a:a4:f6:ec:75:33:6b:07:
d3:21:92:43:c7:18:5f:de:52:51:d9:40:9b:67:7b:
d7:bd:8f:ae:87:d9:32:12:2e:ff:03:ff:aa:c8:17:
c7:c9:8b:f2:03:48:22:4e:15:36:64:2d:4d:69:8d:
a5:ed:ff:88:a7:4c:ad:78:ec:be:10:6d:04:e0:b8:
f9:77:a0:32:8d:e5:ba:5c:f9:d8:ff:8a:13:3b:26:
0d:29:92:76:e2:e6:94:5d:20:9a:6c:b0:69:43:ff:
d8:b9:7d:90:fb:da:ba:c2:d0:5c:0b:75:2a:5d:29:
8b:ab:dc:b5:11:29:0e:f2:05:7d:07:58:de:da:6c:
c0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:90:0E:C1:CC:69:0C:1D:0D:D5:BE:D6:8F:B1:81:A7:BA:1C:97:11
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i5AOwcxpDB0N1b7Wj7GBp7oclxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:a7:d2:43:1b:4d:06:99:41:04:c2:47:8b:bc:b9:99:d1:c1:
ad:39:38:98:fb:82:ca:be:21:e7:ec:c3:90:e9:2f:14:95:cb:
70:32:72:ea:b5:17:be:59:ef:01:14:6c:42:05:88:6e:ab:8c:
c7:ee:46:1f:b4:e7:df:c6:eb:f1:fd:4e:55:fc:6f:c5:99:d7:
ec:9f:8f:f7:85:fe:a8:5b:06:74:89:81:bd:02:63:9f:81:56:
0f:4f:a3:e3:fd:47:2d:95:03:2a:fe:76:b6:fd:be:b2:4e:78:
44:0b:1e:0a:6b:15:43:8d:ee:16:03:43:f8:b8:7a:89:7e:f8:
c9:bc:4f:07:40:f5:88:d3:51:f4:37:6d:53:79:49:4b:f5:d9:
93:1e:66:99:32:cb:23:7d:24:a0:15:0e:8a:1f:9b:e3:44:11:
e5:e9:ac:09:53:ec:9a:5a:06:b9:24:fd:cd:68:e2:00:b6:b2:
f8:18:6e:19:b2:1a:fc:e2:8a:b1:78:74:7b:ad:4c:19:9f:68:
7c:85:66:c1:fa:19:20:d7:fb:42:ce:83:49:1d:03:6c:b4:5a:
e8:f5:39:a6:cf:21:49:c4:98:a8:32:24:8f:1b:6d:70:3a:79:
48:30:65:24:e2:86:26:20:3b:89:b3:ad:ca:c3:de:5c:64:8e:
eb:24:ad:8f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlR7eK1p6T+PnYD9YtX2N3hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzE0MDEwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjkwMGVjMWNjNjkwYzFkMGRkNWJlZDY4ZmIxODFhN2JhMWM5NzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0NBCv82FSI7HmHluQXhW999XlNt
v9n8iZ6oV4dADPb3g83Gt7BA1GOUUGL89QD/Tg6fE5YI/29AgVFywdos+06adx9V
9DaR15DityEXenwd/hWkJAq55jJsQ6z/1ZmvpCj5VckBoaJp2Q2Pl5DubNQzmXGe
MZzRO2yuELWWKqT27HUzawfTIZJDxxhf3lJR2UCbZ3vXvY+uh9kyEi7/A/+qyBfH
yYvyA0giThU2ZC1NaY2l7f+Ip0yteOy+EG0E4Lj5d6AyjeW6XPnY/4oTOyYNKZJ2
4uaUXSCabLBpQ//YuX2Q+9q6wtBcC3UqXSmLq9y1ESkO8gV9B1je2mzAMwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIuQDsHMaQwdDdW+1o+xgae6HJcRMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvaTVBT3djeHBEQjBOMWI3V2o3R0JwN29jbHhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACin0kMbTQaZQQTCR4u8
uZnRwa05OJj7gsq+Iefsw5DpLxSVy3Aycuq1F75Z7wEUbEIFiG6rjMfuRh+059/G
6/H9TlX8b8WZ1+yfj/eF/qhbBnSJgb0CY5+BVg9Po+P9Ry2VAyr+drb9vrJOeEQL
HgprFUON7hYDQ/i4eol++Mm8TwdA9YjTUfQ3bVN5SUv12ZMeZpkyyyN9JKAVDoof
m+NEEeXprAlT7JpaBrkk/c1o4gC2svgYbhmyGvziirF4dHutTBmfaHyFZsH6GSDX
+0LOg0kdA2y0Wuj1OabPIUnEmKgyJI8bbXA6eUgwZSTihiYgO4mzrcrD3lxkjusk
rY8=
-----END CERTIFICATE-----
Generated at Thu May 1 03:24:27 2025 by rpki-client