Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pLYYnrYMn2LgWeu8qUq-ZSt-63s.roa
File: pLYYnrYMn2LgWeu8qUq-ZSt-63s.roa (raw, json)
Hash identifier: mx0QaFgIC2yxBcvRkXyaNwuMQ26InxXIpfb6Oli/dgc=
Subject key identifier: A4:B6:18:9E:B6:0C:9F:62:E0:59:EB:BC:A9:4A:BE:65:2B:7E:EB:7B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018861D67629A296680FB77D3BE07CEC87F8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pLYYnrYMn2LgWeu8qUq-ZSt-63s.roa
Signing time: Sun 28 May 2023 10:10:24 +0000
ROA not before: Sun 28 May 2023 10:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:61:d6:76:29:a2:96:68:0f:b7:7d:3b:e0:7c:ec:87:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 28 10:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4b6189eb60c9f62e059ebbca94abe652b7eeb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:1f:1c:97:99:4d:13:b0:ff:b3:20:27:bb:
29:d3:19:44:37:a9:b8:8b:e1:0f:8a:8a:66:65:6d:
47:c6:b5:9f:fb:a9:b6:e3:66:74:c4:f1:b0:f8:18:
25:2a:f1:90:cc:8d:4d:aa:ca:9e:7f:e4:f9:bb:a6:
3e:2d:8d:ac:c9:31:47:ff:bd:07:15:8b:40:b2:af:
8d:59:e3:22:bc:04:a6:35:39:af:d6:e3:8a:68:07:
8f:2b:3a:89:94:1c:86:5a:87:73:2e:00:65:fe:2d:
76:ce:92:31:2a:77:41:b5:c0:aa:70:4c:32:06:26:
75:79:33:1a:29:aa:91:22:80:9d:5c:c3:96:d6:98:
f0:52:45:ba:1c:7d:39:5d:a5:f1:c5:0c:7a:56:92:
f4:88:3e:02:25:4b:c9:40:e9:c3:8f:05:4d:b7:46:
5b:18:df:75:63:6f:41:51:8f:47:14:4d:be:aa:33:
a9:74:bf:96:f2:e6:9d:51:fb:3c:09:bb:c8:16:4c:
f4:92:cd:2b:c1:ee:36:e3:93:f7:60:4a:61:8f:65:
33:76:e0:17:6d:99:12:fd:af:9e:3c:fe:4a:d0:ff:
b0:81:11:7c:eb:d8:da:18:35:ac:d4:e3:e1:97:5f:
88:3a:30:5a:9c:6e:0d:f1:0a:01:05:a9:08:38:5f:
f1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B6:18:9E:B6:0C:9F:62:E0:59:EB:BC:A9:4A:BE:65:2B:7E:EB:7B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pLYYnrYMn2LgWeu8qUq-ZSt-63s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:c6:7c:7c:56:1a:87:8e:33:04:45:6c:f8:4f:5d:62:f6:28:
b3:66:d7:ae:30:fd:50:a6:68:13:1c:10:91:56:2b:7f:b7:a2:
98:73:dd:a6:88:cd:ec:64:21:68:ad:b3:09:33:53:03:a0:4a:
21:09:bc:17:fa:5f:4e:0d:23:aa:61:81:b9:77:8d:f0:6f:cc:
d2:1f:cd:7d:44:af:3f:31:7a:13:a1:d7:83:17:fa:74:57:94:
e6:8a:e0:6f:b4:29:67:87:14:e0:57:bb:8c:5c:a5:29:83:55:
cc:ba:a8:cb:b7:27:3f:b4:10:ff:fa:e8:65:79:29:94:03:6e:
31:40:01:b9:08:94:68:b1:46:f8:a0:17:3a:7f:78:d2:2e:9e:
4e:8b:5e:dd:cc:43:ee:d4:50:38:53:6f:be:4c:8f:d8:2d:c4:
8f:41:9c:56:52:d1:53:89:c6:76:63:ad:ae:51:14:2d:17:c7:
05:8f:9f:22:22:72:20:64:d3:4a:4e:61:d6:d9:ee:42:2f:32:
53:27:6c:5d:27:36:96:d9:d6:77:46:63:f4:d8:94:e6:eb:e9:
11:11:33:5a:99:f0:e1:80:a6:f0:93:75:86:d1:66:34:b0:5e:
b0:7c:c9:a9:28:be:99:37:3f:e6:a4:a2:da:73:db:de:ff:13:
70:d7:22:15
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhh1nYpopZoD7d9O+B87If4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTI4MTAxMDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGI2MTg5ZWI2MGM5ZjYyZTA1OWViYmNhOTRhYmU2NTJiN2VlYjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzYfHJeZTROw/7MgJ7sp0xlEN6m4
i+EPiopmZW1HxrWf+6m242Z0xPGw+BglKvGQzI1Nqsqef+T5u6Y+LY2syTFH/70H
FYtAsq+NWeMivASmNTmv1uOKaAePKzqJlByGWodzLgBl/i12zpIxKndBtcCqcEwy
BiZ1eTMaKaqRIoCdXMOW1pjwUkW6HH05XaXxxQx6VpL0iD4CJUvJQOnDjwVNt0Zb
GN91Y29BUY9HFE2+qjOpdL+W8uadUfs8CbvIFkz0ks0rwe4245P3YEphj2UzduAX
bZkS/a+ePP5K0P+wgRF869jaGDWs1OPhl1+IOjBanG4N8QoBBakIOF/xMQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKS2GJ62DJ9i4FnrvKlKvmUrfut7MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcExZWW5yWU1uMkxnV2V1OHFVcS1aU3QtNjNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH7GfHxWGoeOMwRFbPhP
XWL2KLNm164w/VCmaBMcEJFWK3+3ophz3aaIzexkIWitswkzUwOgSiEJvBf6X04N
I6phgbl3jfBvzNIfzX1Erz8xehOh14MX+nRXlOaK4G+0KWeHFOBXu4xcpSmDVcy6
qMu3Jz+0EP/66GV5KZQDbjFAAbkIlGixRvigFzp/eNIunk6LXt3MQ+7UUDhTb75M
j9gtxI9BnFZS0VOJxnZjra5RFC0XxwWPnyIiciBk00pOYdbZ7kIvMlMnbF0nNpbZ
1ndGY/TYlObr6RERM1qZ8OGApvCTdYbRZjSwXrB8yakovpk3P+akotpz297/E3DX
IhU=
-----END CERTIFICATE-----
Generated at Sun May 4 22:13:49 2025 by rpki-client