Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lSGGEn_UTm7QgMAm4TvBu3pGofI.roa
File: lSGGEn_UTm7QgMAm4TvBu3pGofI.roa (raw, json)
Hash identifier: KJ4aotPV8cyeB8QpLk+mF5twnGG9rBdVEUoFhGSCrzY=
Subject key identifier: 95:21:86:12:7F:D4:4E:6E:D0:80:C0:26:E1:3B:C1:BB:7A:46:A1:F2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B819243F4B6423974D0615C43F10D04D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lSGGEn_UTm7QgMAm4TvBu3pGofI.roa
Signing time: Mon 06 Mar 2023 18:05:00 +0000
ROA not before: Mon 06 Mar 2023 18:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:b818:6b72/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b8:19:24:3f:4b:64:23:97:4d:06:15:c4:3f:10:d0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 18:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=952186127fd44e6ed080c026e13bc1bb7a46a1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:db:41:6e:42:96:2a:7c:e4:53:2b:d7:6b:42:
69:85:2f:2f:cc:f8:dc:e9:4d:fe:68:b0:e1:90:5b:
6e:5f:f7:6d:5b:ac:14:bf:f9:95:ed:6a:a5:ad:5b:
3d:f7:76:19:73:2e:f4:e8:ae:65:fd:15:6d:c3:a7:
fe:cf:fc:90:f6:bb:b1:01:f2:9b:90:a5:91:cc:10:
48:7d:cd:a1:69:d4:5d:79:69:d4:b2:bd:84:85:55:
8b:be:62:a6:15:bc:82:43:50:c7:3d:3a:59:d0:31:
1e:d1:ce:10:c2:81:1b:d2:41:20:d1:5a:32:86:f9:
d5:ac:63:e9:9c:84:4b:f4:57:f0:ee:04:cd:7f:de:
18:13:cb:65:e3:6b:42:05:3e:09:4a:7a:be:c2:bf:
d1:af:17:6b:62:35:88:85:c4:5b:52:14:29:87:83:
fd:27:03:ca:65:5c:d2:6b:9d:8f:e6:26:13:67:c1:
c3:f2:3d:7d:3e:13:ed:ad:b8:30:8e:ff:87:0a:81:
1c:12:8b:2a:fb:ca:75:ee:35:2c:33:ce:f1:20:83:
73:b5:6a:4b:7d:62:49:ae:d8:44:c3:2c:32:2e:f8:
98:b6:cb:f3:e9:dc:99:77:1d:28:f0:25:11:ab:85:
26:42:b3:87:07:e4:d4:18:bd:87:79:25:53:eb:97:
ac:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:21:86:12:7F:D4:4E:6E:D0:80:C0:26:E1:3B:C1:BB:7A:46:A1:F2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lSGGEn_UTm7QgMAm4TvBu3pGofI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:bc:87:c3:76:bb:b2:db:dc:70:c9:4d:5c:6c:d9:b5:bf:8f:
01:18:5f:97:e4:c4:79:9c:3e:a0:12:c4:dd:45:8c:af:a5:9f:
fe:05:fa:8d:4d:dd:af:85:41:de:e5:7a:8c:98:4d:5a:7a:df:
90:a6:7a:20:e7:03:e6:dc:1b:e5:4c:2d:70:3a:bc:89:cc:fe:
cd:10:e2:0e:b6:75:64:86:9b:e0:2d:5e:a5:76:d9:2e:85:67:
67:be:77:b0:87:60:bc:29:8b:4f:da:7c:b1:06:a8:85:58:1a:
e4:3c:92:66:39:7a:72:80:54:b2:3e:a6:7e:9c:f2:6f:2d:2b:
f7:6d:01:6b:24:a7:bb:1a:f3:fc:5e:39:64:1f:76:c2:f5:c7:
c0:e6:3e:d1:a5:29:4a:57:6f:e1:06:5f:f7:29:3d:5d:bf:f1:
61:67:af:5a:20:a5:05:bf:dc:55:2b:20:23:82:8b:79:97:93:
7f:dd:6a:28:a5:0c:2d:0a:1b:1e:59:82:de:98:20:53:40:5c:
dd:65:3f:4d:f9:ec:14:e5:43:d0:40:5d:bc:ca:c9:51:cf:ef:
61:04:bd:47:a5:3b:3b:7d:76:37:44:d5:dd:ae:1f:6e:fc:6f:
e0:19:a6:32:1a:90:98:4f:8b:4a:84:43:1c:fd:e9:5e:21:29:
80:6e:b9:60
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYa4GSQ/S2Qjl00GFcQ/ENBNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzA2MTgwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTIxODYxMjdmZDQ0ZTZlZDA4MGMwMjZlMTNiYzFiYjdhNDZhMWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9tBbkKWKnzkUyvXa0JphS8vzPjc
6U3+aLDhkFtuX/dtW6wUv/mV7WqlrVs993YZcy706K5l/RVtw6f+z/yQ9ruxAfKb
kKWRzBBIfc2hadRdeWnUsr2EhVWLvmKmFbyCQ1DHPTpZ0DEe0c4QwoEb0kEg0Voy
hvnVrGPpnIRL9Ffw7gTNf94YE8tl42tCBT4JSnq+wr/RrxdrYjWIhcRbUhQph4P9
JwPKZVzSa52P5iYTZ8HD8j19PhPtrbgwjv+HCoEcEosq+8p17jUsM87xIINztWpL
fWJJrthEwywyLviYtsvz6dyZdx0o8CURq4UmQrOHB+TUGL2HeSVT65esBwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJUhhhJ/1E5u0IDAJuE7wbt6RqHyMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbFNHR0VuX1VUbTdRZ01BbTRUdkJ1M3BHb2ZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEC8h8N2u7Lb3HDJTVxs
2bW/jwEYX5fkxHmcPqASxN1FjK+ln/4F+o1N3a+FQd7leoyYTVp635CmeiDnA+bc
G+VMLXA6vInM/s0Q4g62dWSGm+AtXqV22S6FZ2e+d7CHYLwpi0/afLEGqIVYGuQ8
kmY5enKAVLI+pn6c8m8tK/dtAWskp7sa8/xeOWQfdsL1x8DmPtGlKUpXb+EGX/cp
PV2/8WFnr1ogpQW/3FUrICOCi3mXk3/daiilDC0KGx5Zgt6YIFNAXN1lP0357BTl
Q9BAXbzKyVHP72EEvUelOzt9djdE1d2uH278b+AZpjIakJhPi0qEQxz96V4hKYBu
uWA=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:55 2025 by rpki-client