Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oC51TZ-s4xN5mzejdd9PGZf7V7M.roa
File: oC51TZ-s4xN5mzejdd9PGZf7V7M.roa (raw, json)
Hash identifier: uvtOWM8RxUmb1miDS1MZ7JGx/B4CMhx5Rr3XH1ZhWJA=
Subject key identifier: A0:2E:75:4D:9F:AC:E3:13:79:9B:37:A3:75:DF:4F:19:97:FB:57:B3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018241F099790D0B18222379D0BBF1B76ABE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oC51TZ-s4xN5mzejdd9PGZf7V7M.roa
Signing time: Wed 27 Jul 2022 23:14:23 +0000
ROA not before: Wed 27 Jul 2022 23:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:41:f0:99:79:0d:0b:18:22:23:79:d0:bb:f1:b7:6a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 23:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a02e754d9face313799b37a375df4f1997fb57b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b1:c1:a7:9e:c4:8f:1b:1e:bd:d7:bc:7d:60:
ff:4b:67:d5:2c:45:b6:f5:c8:4a:0f:de:15:92:18:
af:dc:e6:0c:94:7e:f2:a5:38:59:e4:76:92:6c:08:
3e:69:bf:75:5f:5c:3a:29:4a:d5:6a:b9:5a:4c:19:
b0:1f:7d:36:f1:a1:13:c9:14:62:5e:3e:0a:b8:ca:
b8:15:f1:14:f7:3d:1c:b4:dd:fe:39:f6:43:42:09:
dc:f4:aa:62:db:55:07:c7:55:b6:98:d2:e2:2c:ba:
f0:6b:47:c3:87:d5:5b:8c:fa:a0:8a:33:dd:ae:47:
dc:1f:c4:aa:0e:1e:c9:42:c4:38:bb:81:18:fe:34:
31:7b:89:02:f2:f9:3b:c7:7b:62:08:f0:c6:21:96:
7c:81:0f:8b:08:1b:5d:1b:cc:f7:26:da:c2:8c:f6:
4f:da:86:15:8d:21:07:2a:a6:47:82:02:ed:8e:0c:
13:66:4c:b1:eb:66:8c:cf:2e:50:a8:4b:22:50:9c:
28:92:e7:21:56:77:2a:a4:b0:95:ca:7b:a5:1d:0b:
9d:8d:f1:24:c3:0a:36:df:47:22:f5:db:68:99:ad:
5c:f5:88:40:38:c5:f9:8f:20:12:e2:17:30:41:db:
b9:78:ba:13:0f:56:66:f0:b1:fb:f4:56:f5:9e:ea:
c0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2E:75:4D:9F:AC:E3:13:79:9B:37:A3:75:DF:4F:19:97:FB:57:B3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oC51TZ-s4xN5mzejdd9PGZf7V7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:99:99:35:58:25:78:db:ad:3d:19:87:fa:35:bc:8f:2f:27:
39:31:2f:cc:e9:5a:4f:e3:11:da:6b:c3:c4:f0:ee:3a:f1:0b:
1f:87:13:60:7f:f8:6b:f3:2b:55:df:fc:91:1e:18:25:8e:a8:
73:44:87:45:cc:f9:0d:75:e7:bd:00:cd:1c:fe:d0:8a:75:a8:
5e:39:51:5b:c5:cb:4c:01:c9:3d:76:35:18:a5:f4:ef:59:55:
b4:2c:bb:48:93:61:69:63:ce:71:83:f1:bb:cd:c0:bb:3e:50:
df:4b:d3:4a:dc:54:78:b0:0c:32:78:fc:af:8d:36:ea:70:1d:
32:0b:89:eb:1d:2b:2f:14:1c:ee:9a:aa:b0:d3:f4:7a:b7:1e:
f5:64:bc:97:c3:84:79:c6:51:96:bb:4a:01:b6:1f:13:42:80:
70:f1:97:1a:ac:e0:89:00:79:5a:49:69:2c:e8:e9:c3:32:08:
ec:67:9e:dd:17:a1:05:c2:d1:42:0b:65:36:db:f4:6c:e4:9d:
54:35:01:96:1d:40:88:f8:c4:33:69:d5:10:ac:39:23:03:35:
e1:75:b9:25:a4:eb:d1:d5:bb:9c:e8:6b:24:46:f5:08:c9:f5:
c9:4d:f6:c6:93:0c:25:93:bd:62:f9:7b:dc:03:f0:4b:02:18:
ef:7d:bc:53
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYJB8Jl5DQsYIiN50Lvxt2q+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzI3MjMxNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDJlNzU0ZDlmYWNlMzEzNzk5YjM3YTM3NWRmNGYxOTk3ZmI1N2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bHBp57Ejxsevde8fWD/S2fVLEW2
9chKD94Vkhiv3OYMlH7ypThZ5HaSbAg+ab91X1w6KUrVarlaTBmwH3028aETyRRi
Xj4KuMq4FfEU9z0ctN3+OfZDQgnc9Kpi21UHx1W2mNLiLLrwa0fDh9VbjPqgijPd
rkfcH8SqDh7JQsQ4u4EY/jQxe4kC8vk7x3tiCPDGIZZ8gQ+LCBtdG8z3JtrCjPZP
2oYVjSEHKqZHggLtjgwTZkyx62aMzy5QqEsiUJwokuchVncqpLCVynulHQudjfEk
wwo230ci9dtoma1c9YhAOMX5jyAS4hcwQdu5eLoTD1Zm8LH79Fb1nurAkQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKAudU2frOMTeZs3o3XfTxmX+1ezMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvb0M1MVRaLXM0eE41bXplamRkOVBHWmY3VjdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJ2ZmTVYJXjbrT0Zh/o1
vI8vJzkxL8zpWk/jEdprw8Tw7jrxCx+HE2B/+GvzK1Xf/JEeGCWOqHNEh0XM+Q11
570AzRz+0Ip1qF45UVvFy0wByT12NRil9O9ZVbQsu0iTYWljznGD8bvNwLs+UN9L
00rcVHiwDDJ4/K+NNupwHTILiesdKy8UHO6aqrDT9Hq3HvVkvJfDhHnGUZa7SgG2
HxNCgHDxlxqs4IkAeVpJaSzo6cMyCOxnnt0XoQXC0UILZTbb9GzknVQ1AZYdQIj4
xDNp1RCsOSMDNeF1uSWk69HVu5zoayRG9QjJ9clN9saTDCWTvWL5e9wD8EsCGO99
vFM=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:00:45 2025 by rpki-client