Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/osJ4dB5x_uFGypQn70O_bdoD4wQ.roa
File: osJ4dB5x_uFGypQn70O_bdoD4wQ.roa (raw, json)
Hash identifier: Xmq1EgkqFFcNcEh2pJJj/OH0+1SdmJvKLaxPoNi8zkM=
Subject key identifier: A2:C2:78:74:1E:71:FE:E1:46:CA:94:27:EF:43:BF:6D:DA:03:E3:04
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8E65D8AF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/osJ4dB5x_uFGypQn70O_bdoD4wQ.roa
Signing time: Mon 20 Jun 2022 13:10:44 +0000
ROA not before: Mon 20 Jun 2022 13:10:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2389039279 (0x8e65d8af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 20 13:10:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2c278741e71fee146ca9427ef43bf6dda03e304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:46:e4:0f:8b:8d:4e:8c:32:5e:34:cf:59:7e:
a1:13:8d:ad:c3:7f:7a:bc:fa:71:88:aa:0c:00:be:
cf:e2:26:97:35:de:48:7c:dd:42:d6:e2:71:54:26:
76:71:40:ad:a3:fc:70:9d:81:8d:0f:b8:47:e6:14:
1c:b1:91:12:f9:ad:a6:27:18:d2:d8:17:ed:14:a7:
89:aa:68:f9:3d:e7:3f:30:48:e0:d7:ea:91:66:4c:
0f:e0:67:ad:28:f0:e8:68:17:ca:c9:ee:5d:ff:1f:
b6:88:94:da:a7:61:c2:cd:08:58:86:e3:b7:64:77:
d9:81:48:d9:a4:3d:e7:29:30:33:e1:f9:5c:d3:1e:
3c:b5:85:14:38:50:8f:c9:43:9d:72:31:a6:a2:f2:
14:e9:5f:ee:06:c6:e9:3c:a0:64:c0:0f:65:7c:cc:
a6:77:6a:60:df:4b:75:6b:d7:78:a0:7c:9d:b7:3e:
fd:15:7e:e1:41:76:3a:e2:32:4a:95:06:52:ba:d5:
79:56:28:40:65:1f:13:8b:03:5c:ac:3d:f2:4d:ba:
b0:d0:fc:aa:a2:c1:56:ea:87:80:25:3a:e6:ed:3c:
ce:d9:f3:65:7b:61:cf:ec:d9:85:57:c2:53:38:97:
ef:9b:f4:04:37:4a:b7:e1:10:1f:9e:28:09:89:7d:
ce:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C2:78:74:1E:71:FE:E1:46:CA:94:27:EF:43:BF:6D:DA:03:E3:04
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/osJ4dB5x_uFGypQn70O_bdoD4wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:03:c3:2a:cc:c1:77:32:26:9d:63:ba:a7:74:fd:df:1b:81:
20:75:98:49:d6:58:d8:53:39:4b:a0:fd:e5:f3:1b:69:d6:13:
98:9b:25:3c:3b:26:b1:a4:7a:b1:2a:5b:02:2e:b3:bd:5b:12:
48:ef:cd:ff:6a:59:b3:44:d2:b5:bb:31:8d:9b:07:30:ac:5a:
3f:3c:73:75:99:6f:01:c1:0c:08:98:ad:b0:64:0f:1b:b6:88:
87:5a:50:67:6d:79:a2:84:cd:fa:45:85:52:96:6d:98:d7:ef:
c4:a2:ee:5b:14:95:95:1e:a8:14:24:4a:b9:a9:a1:8e:34:10:
61:d8:3c:96:82:2c:50:e1:1e:04:f2:f0:0a:4d:c4:13:98:e3:
7a:08:50:02:cd:52:27:97:6c:fd:b7:12:63:10:6b:69:4d:89:
ec:7f:96:d3:fb:f5:e1:02:6f:39:99:94:2e:60:5a:26:15:2c:
e4:30:af:9a:a9:a2:93:26:27:8a:b8:62:a5:6d:fd:8d:e1:6b:
4b:78:07:87:7d:c6:9d:e1:19:64:fa:d1:0c:58:7e:33:9a:56:
33:b9:b3:8c:b3:e2:1c:40:21:a8:c5:e2:a9:cb:5e:bf:61:ff:
c2:8c:32:1c:29:98:d1:24:80:30:cd:63:97:d7:d4:20:ff:ad:
6c:72:0a:dc
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAI5l2K8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MjAxMzEwNDRaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGEyYzI3ODc0MWU3
MWZlZTE0NmNhOTQyN2VmNDNiZjZkZGEwM2UzMDQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDQRuQPi41OjDJeNM9ZfqETja3Df3q8+nGIqgwAvs/iJpc1
3kh83ULW4nFUJnZxQK2j/HCdgY0PuEfmFByxkRL5raYnGNLYF+0Up4mqaPk95z8w
SODX6pFmTA/gZ60o8OhoF8rJ7l3/H7aIlNqnYcLNCFiG47dkd9mBSNmkPecpMDPh
+VzTHjy1hRQ4UI/JQ51yMaai8hTpX+4Gxuk8oGTAD2V8zKZ3amDfS3Vr13igfJ23
Pv0VfuFBdjriMkqVBlK61XlWKEBlHxOLA1ysPfJNurDQ/KqiwVbqh4AlOubtPM7Z
82V7Yc/s2YVXwlM4l++b9AQ3SrfhEB+eKAmJfc55AgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUosJ4dB5x/uFGypQn70O/bdoD4wQwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9vc0o0ZEI1eF91Rkd5cFFuNzBPX2Jkb0Q0d1Eucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAlwPDKszBdzImnWO6p3T93xuBIHWYSdZY2FM5
S6D95fMbadYTmJslPDsmsaR6sSpbAi6zvVsSSO/N/2pZs0TStbsxjZsHMKxaPzxz
dZlvAcEMCJitsGQPG7aIh1pQZ215ooTN+kWFUpZtmNfvxKLuWxSVlR6oFCRKuamh
jjQQYdg8loIsUOEeBPLwCk3EE5jjeghQAs1SJ5ds/bcSYxBraU2J7H+W0/v14QJv
OZmULmBaJhUs5DCvmqmikyYnirhipW39jeFrS3gHh33GneEZZPrRDFh+M5pWM7mz
jLPiHEAhqMXiqctev2H/wowyHCmY0SSAMM1jl9fUIP+tbHIK3A==
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:29:58 2025 by rpki-client