Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pCm8oxfBDzmc84iPde095PPUAU0.roa
File: pCm8oxfBDzmc84iPde095PPUAU0.roa (raw, json)
Hash identifier: NCbFyHjoa6Qj5d81BnEkTGmnTzPprnoNEtkGNOWKhP8=
Subject key identifier: A4:29:BC:A3:17:C1:0F:39:9C:F3:88:8F:75:ED:3D:E4:F3:D4:01:4D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185F434EFEC16FBDBB1D2A3F4288BC3EDCD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pCm8oxfBDzmc84iPde095PPUAU0.roa
Signing time: Fri 27 Jan 2023 17:09:48 +0000
ROA not before: Fri 27 Jan 2023 17:09:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f4:34:ef:ec:16:fb:db:b1:d2:a3:f4:28:8b:c3:ed:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 27 17:09:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a429bca317c10f399cf3888f75ed3de4f3d4014d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:59:a0:25:e6:d6:aa:d8:af:93:2d:c5:b5:72:
af:7a:e4:ab:ae:b6:b9:6f:20:29:16:bf:8e:55:9a:
43:01:1b:4a:d3:ec:8a:ca:c8:8c:0f:bd:ee:5f:a5:
f2:11:31:6c:48:13:d0:bc:1c:87:95:80:09:08:66:
d8:81:21:8a:42:09:03:a9:a9:f8:aa:ce:9a:b5:a4:
5c:13:8a:3a:b7:96:91:bc:f9:f8:c5:34:f7:76:28:
1b:3c:9b:d2:52:a4:24:31:f7:d4:fc:98:39:b0:d6:
a6:71:9b:50:d7:e9:14:5b:a2:4e:11:e8:44:38:68:
ca:ea:38:f2:d2:af:5f:a0:49:ff:72:8d:36:19:f0:
9b:7b:6c:14:0f:4a:f5:c0:d3:24:b1:b5:8a:04:d4:
be:ba:ae:db:2d:8c:b9:cd:fd:4c:8a:48:ca:a9:dc:
12:9c:49:a6:b3:f0:b4:3b:ac:dd:59:f9:db:13:8d:
d7:5e:82:ec:cf:f7:aa:92:9d:0a:b3:6e:29:02:8f:
a9:05:7b:e9:51:be:b6:95:fd:24:7d:dd:a4:d3:82:
81:d6:98:0f:f8:e1:e6:c7:5e:30:58:ec:2b:5f:96:
06:18:93:1b:8a:6a:1d:83:e3:5c:4e:1e:af:5d:aa:
14:69:d9:30:0c:52:02:05:5f:ac:f9:45:96:bb:bb:
3b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:29:BC:A3:17:C1:0F:39:9C:F3:88:8F:75:ED:3D:E4:F3:D4:01:4D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pCm8oxfBDzmc84iPde095PPUAU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:e3:39:a7:b5:61:27:c8:cc:e2:c7:13:e6:2e:4f:9e:e7:b1:
d5:7f:bb:f9:17:cd:1e:bb:bc:01:a4:3d:50:25:59:9b:33:da:
1d:5d:e7:55:cb:2b:13:cc:bd:25:49:43:ee:80:9c:a6:cf:26:
d2:30:3e:e1:21:cf:c6:59:be:de:aa:57:3e:32:1f:2a:4c:ef:
53:09:84:af:04:b7:5a:2c:97:e7:97:97:19:27:a4:d2:ec:0f:
b8:99:4f:14:5b:7a:a7:e3:6d:e3:b5:f5:e5:41:b1:cc:dc:7a:
4b:96:b6:6d:c4:3b:f6:62:95:a9:ef:61:b5:4a:2a:cc:ff:7f:
0a:2c:55:51:43:d7:83:00:a0:db:3c:9b:57:a0:64:d0:5a:50:
93:41:62:1e:d8:5a:18:c9:a0:29:d7:b0:ce:78:e6:4f:cd:6b:
40:b5:31:19:96:32:d8:9b:6d:1c:0a:95:e8:4c:89:43:f6:6a:
ab:d8:08:c3:72:97:cd:7b:be:81:d8:27:92:56:18:e2:53:19:
9a:d2:9e:f6:25:0d:8f:f3:13:76:db:f0:47:f0:0a:1a:28:ff:
4b:5a:e9:cb:8c:f9:53:84:fa:32:6d:d1:03:ea:50:86:61:73:
f5:39:a2:cc:d5:1f:41:4d:1a:5c:6b:da:4b:9a:e2:fe:e3:f5:
00:c1:ac:42
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYX0NO/sFvvbsdKj9CiLw+3NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTI3MTcwOTQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDI5YmNhMzE3YzEwZjM5OWNmMzg4OGY3NWVkM2RlNGYzZDQwMTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1mgJebWqtivky3FtXKveuSrrra5
byApFr+OVZpDARtK0+yKysiMD73uX6XyETFsSBPQvByHlYAJCGbYgSGKQgkDqan4
qs6ataRcE4o6t5aRvPn4xTT3digbPJvSUqQkMffU/Jg5sNamcZtQ1+kUW6JOEehE
OGjK6jjy0q9foEn/co02GfCbe2wUD0r1wNMksbWKBNS+uq7bLYy5zf1MikjKqdwS
nEmms/C0O6zdWfnbE43XXoLsz/eqkp0Ks24pAo+pBXvpUb62lf0kfd2k04KB1pgP
+OHmx14wWOwrX5YGGJMbimodg+NcTh6vXaoUadkwDFICBV+s+UWWu7s7RQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKQpvKMXwQ85nPOIj3XtPeTz1AFNMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcENtOG94ZkJEem1jODRpUGRlMDk1UFBVQVUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIzjOae1YSfIzOLHE+Yu
T57nsdV/u/kXzR67vAGkPVAlWZsz2h1d51XLKxPMvSVJQ+6AnKbPJtIwPuEhz8ZZ
vt6qVz4yHypM71MJhK8Et1osl+eXlxknpNLsD7iZTxRbeqfjbeO19eVBsczcekuW
tm3EO/ZilanvYbVKKsz/fwosVVFD14MAoNs8m1egZNBaUJNBYh7YWhjJoCnXsM54
5k/Na0C1MRmWMtibbRwKlehMiUP2aqvYCMNyl817voHYJ5JWGOJTGZrSnvYlDY/z
E3bb8EfwChoo/0ta6cuM+VOE+jJt0QPqUIZhc/U5oszVH0FNGlxr2kua4v7j9QDB
rEI=
-----END CERTIFICATE-----
Generated at Thu May 1 15:02:08 2025 by rpki-client