Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lA8JpxiEdaRrbivlHWWgkoYTsv8.roa
File: lA8JpxiEdaRrbivlHWWgkoYTsv8.roa (raw, json)
Hash identifier: XEwNEiTMR3hJanbUCmCakzZrqvUSMNkS4j0OCDyo15U=
Subject key identifier: 94:0F:09:A7:18:84:75:A4:6B:6E:2B:E5:1D:65:A0:92:86:13:B2:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 817E32D1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lA8JpxiEdaRrbivlHWWgkoYTsv8.roa
Signing time: Thu 05 May 2022 23:08:29 +0000
ROA not before: Thu 05 May 2022 23:08:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2172531409 (0x817e32d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 5 23:08:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=940f09a7188475a46b6e2be51d65a0928613b2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:6c:6f:4f:b9:e2:88:a2:6d:f6:44:98:5b:
31:9d:46:46:2e:a8:06:a6:35:aa:f3:ef:71:47:db:
c5:38:f1:94:cb:a7:4d:9c:54:3f:82:db:60:41:81:
59:e4:c7:9a:00:92:0c:5e:e1:7b:b1:32:93:b4:f0:
ef:48:48:f4:e1:61:0e:8d:dd:30:b3:c3:13:57:74:
da:bc:c3:5d:a8:4b:e2:90:4c:ef:92:8a:1d:21:2b:
61:c1:14:1b:95:64:a4:58:98:17:96:26:12:50:55:
fb:b8:73:2b:b1:9f:7e:e5:a5:84:22:cc:e2:0e:01:
e5:78:cc:b8:98:e5:40:d7:56:b5:da:f5:09:2a:e9:
04:8c:2e:49:47:ca:12:ed:2a:f8:e1:60:d0:73:1d:
cb:d4:84:aa:7f:2f:0b:c0:31:0e:83:f4:00:00:b4:
58:bb:b0:c4:1c:77:e0:ac:fd:3a:34:c7:ab:3f:68:
cf:2f:4c:bb:f7:e3:45:ef:1e:de:c9:8d:69:4f:00:
fb:91:56:c7:7a:bf:eb:a2:e0:35:a5:cc:83:7f:ae:
5d:80:db:79:16:5a:00:99:2d:a3:30:bc:53:40:f7:
fd:3b:65:c5:2a:c9:f9:b0:46:46:78:cb:bb:f9:ed:
8a:d8:3e:f2:17:e7:68:5d:ab:29:20:96:b5:35:ff:
95:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0F:09:A7:18:84:75:A4:6B:6E:2B:E5:1D:65:A0:92:86:13:B2:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lA8JpxiEdaRrbivlHWWgkoYTsv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:6e:9e:5f:dd:ff:c5:3e:51:79:ae:52:63:ae:7a:ee:96:73:
64:47:fc:f4:ea:a3:0a:f2:b1:2e:70:aa:df:9c:85:bc:8d:47:
17:6b:0c:7c:27:f9:3f:8f:cf:77:00:1f:33:86:e7:b0:73:f2:
01:9c:ee:1c:3d:11:1c:3a:4f:e5:98:54:74:fd:60:5c:48:1d:
61:5d:bb:a7:94:0c:f6:9d:a6:dd:9f:63:e3:ae:62:b2:c7:12:
c8:f5:f9:66:fb:a2:f8:3b:c9:99:f6:d6:ad:55:09:f8:85:e1:
9b:18:d1:cb:ee:f2:6c:83:d5:83:71:0e:5a:69:b2:54:6e:d1:
a5:32:1e:b4:80:38:6e:f8:39:32:a3:7a:28:e1:1f:b2:9b:4c:
da:8d:4b:0d:bc:73:7c:2c:8b:db:bf:0e:fc:13:b7:30:e3:6a:
22:69:c5:06:5f:fc:3d:37:e1:c8:ef:e1:5d:f3:2f:5e:b2:44:
4e:6b:e4:0e:33:7b:e5:f5:54:c5:11:e9:0a:04:35:ea:78:b0:
9d:82:9a:6b:a0:35:92:ea:86:c0:2a:5e:fe:92:38:2c:59:37:
45:9f:c6:40:19:c9:5f:c4:35:a7:85:ce:f8:7b:e1:8c:8c:e4:
b8:6a:a8:15:75:a7:e7:64:4f:12:13:43:2a:00:8a:ea:86:68:
d8:8a:53:2c
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIF+MtEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MDUyMzA4MjlaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDk0MGYwOWE3MTg4
NDc1YTQ2YjZlMmJlNTFkNjVhMDkyODYxM2IyZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCrMmxvT7niiKJt9kSYWzGdRkYuqAamNarz73FH28U48ZTL
p02cVD+C22BBgVnkx5oAkgxe4XuxMpO08O9ISPThYQ6N3TCzwxNXdNq8w12oS+KQ
TO+Sih0hK2HBFBuVZKRYmBeWJhJQVfu4cyuxn37lpYQizOIOAeV4zLiY5UDXVrXa
9Qkq6QSMLklHyhLtKvjhYNBzHcvUhKp/LwvAMQ6D9AAAtFi7sMQcd+Cs/To0x6s/
aM8vTLv340XvHt7JjWlPAPuRVsd6v+ui4DWlzIN/rl2A23kWWgCZLaMwvFNA9/07
ZcUqyfmwRkZ4y7v57YrYPvIX52hdqykglrU1/5VjAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUlA8JpxiEdaRrbivlHWWgkoYTsv8wHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9sQThKcHhpRWRhUnJiaXZsSFdXZ2tvWVRzdjgucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEATm6eX93/xT5Rea5SY6567pZzZEf89OqjCvKx
LnCq35yFvI1HF2sMfCf5P4/PdwAfM4bnsHPyAZzuHD0RHDpP5ZhUdP1gXEgdYV27
p5QM9p2m3Z9j465isscSyPX5Zvui+DvJmfbWrVUJ+IXhmxjRy+7ybIPVg3EOWmmy
VG7RpTIetIA4bvg5MqN6KOEfsptM2o1LDbxzfCyL278O/BO3MONqImnFBl/8PTfh
yO/hXfMvXrJETmvkDjN75fVUxRHpCgQ16niwnYKaa6A1kuqGwCpe/pI4LFk3RZ/G
QBnJX8Q1p4XO+HvhjIzkuGqoFXWn52RPEhNDKgCK6oZo2IpTLA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:59:43 2025 by rpki-client