Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pnTsduWvo8rzntCQpjeKS92S5fk.roa
File: pnTsduWvo8rzntCQpjeKS92S5fk.roa (raw, json)
Hash identifier: wThMpWhX1XOZbuN/8IbMoU6QL3yUQIhFCBd/pUAJyRY=
Subject key identifier: A6:74:EC:76:E5:AF:A3:CA:F3:9E:D0:90:A6:37:8A:4B:DD:92:E5:F9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185383C400BB8CE95006DD2AAF7F959AA49
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pnTsduWvo8rzntCQpjeKS92S5fk.roa
Signing time: Thu 22 Dec 2022 05:09:10 +0000
ROA not before: Thu 22 Dec 2022 05:09:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:38:3c:40:0b:b8:ce:95:00:6d:d2:aa:f7:f9:59:aa:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 22 05:09:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a674ec76e5afa3caf39ed090a6378a4bdd92e5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:38:66:b8:35:b4:fd:55:0c:f6:55:ac:91:9d:
27:a3:21:b5:2c:ac:da:ef:ab:e8:f5:40:a8:d3:92:
2f:53:45:d4:7b:e7:ee:9a:d5:a7:c7:d5:38:1f:27:
d4:d2:d1:5b:c3:62:92:57:25:40:cc:3c:b0:37:4e:
c5:af:05:14:64:36:e1:1a:2b:27:08:12:85:dc:9a:
03:32:a0:18:50:c5:c5:16:2e:1d:a6:86:1a:33:f7:
2c:db:db:95:e9:84:49:59:19:03:2d:dd:27:4a:47:
2d:53:02:81:b7:96:07:8a:a5:c2:f5:b7:ef:fb:d9:
23:13:57:59:21:71:6f:fb:1f:59:28:35:8d:a1:b0:
cc:9a:d3:1f:70:df:f6:48:dd:21:68:6c:68:cc:2a:
9e:b7:7e:69:84:08:63:f2:b0:5e:dc:30:75:36:8a:
d2:54:04:83:34:dd:78:b8:d6:5e:a7:d5:e5:2b:a8:
40:9d:98:66:5d:a8:c6:c3:6c:8f:a2:4b:0e:c2:87:
a3:d7:a7:dd:72:4a:c9:35:fa:27:38:d3:f5:f5:cf:
a5:2b:8e:20:8f:7f:0f:78:35:36:12:61:68:1d:52:
ab:2f:87:61:67:79:0d:95:64:12:43:12:05:07:28:
e7:d6:b1:79:41:25:1d:ef:23:b2:58:a6:55:5d:dd:
7a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:74:EC:76:E5:AF:A3:CA:F3:9E:D0:90:A6:37:8A:4B:DD:92:E5:F9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pnTsduWvo8rzntCQpjeKS92S5fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:e7:0f:76:f7:c1:76:32:7f:0b:b8:d9:0d:7b:17:2a:c4:a9:
d0:fc:0c:64:44:d8:01:b3:76:77:a4:10:fd:83:c2:ae:ca:6f:
5f:9d:57:8f:20:d3:cc:85:6b:c1:20:14:2e:50:94:51:ac:e0:
19:a4:c6:de:b2:79:be:10:8c:fa:ba:72:81:e0:e6:a2:e8:69:
0e:c4:d9:2a:fb:98:47:f1:44:8b:ce:43:ec:91:aa:8b:00:c3:
ec:be:65:20:9f:41:ea:55:40:55:96:a1:d2:9f:42:ef:e6:ca:
1c:ae:5c:88:0b:27:f4:7d:c4:c4:5e:25:7a:e9:91:10:33:86:
78:ad:00:7c:42:bc:10:6d:81:ff:d9:b5:99:d7:35:27:ed:d8:
92:68:c8:79:7f:22:d5:1d:4f:e4:16:ae:81:87:a8:3b:1a:b1:
22:81:fb:ed:39:59:3d:80:97:b3:a9:74:d8:63:f1:ee:2a:74:
92:22:e5:00:bf:68:7c:e4:56:95:8c:b0:e2:ce:0a:02:ef:32:
8d:55:4f:08:1c:d1:7d:65:4d:58:4f:97:09:18:35:18:4c:51:
2e:99:44:5e:47:02:d0:0e:ef:e4:35:70:75:a3:c2:5c:07:5f:
40:a4:1e:be:93:0f:cd:8e:89:e4:43:71:f2:21:64:2c:c2:6e:
d1:5d:0b:41
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYU4PEALuM6VAG3Sqvf5WapJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjIyMDUwOTEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjc0ZWM3NmU1YWZhM2NhZjM5ZWQwOTBhNjM3OGE0YmRkOTJlNWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzhmuDW0/VUM9lWskZ0noyG1LKza
76vo9UCo05IvU0XUe+fumtWnx9U4HyfU0tFbw2KSVyVAzDywN07FrwUUZDbhGisn
CBKF3JoDMqAYUMXFFi4dpoYaM/cs29uV6YRJWRkDLd0nSkctUwKBt5YHiqXC9bfv
+9kjE1dZIXFv+x9ZKDWNobDMmtMfcN/2SN0haGxozCqet35phAhj8rBe3DB1NorS
VASDNN14uNZep9XlK6hAnZhmXajGw2yPoksOwoej16fdckrJNfonONP19c+lK44g
j38PeDU2EmFoHVKrL4dhZ3kNlWQSQxIFByjn1rF5QSUd7yOyWKZVXd16EwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKZ07Hblr6PK857QkKY3ikvdkuX5MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcG5Uc2R1V3ZvOHJ6bnRDUXBqZUtTOTJTNWZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAArnD3b3wXYyfwu42Q17
FyrEqdD8DGRE2AGzdnekEP2Dwq7Kb1+dV48g08yFa8EgFC5QlFGs4Bmkxt6yeb4Q
jPq6coHg5qLoaQ7E2Sr7mEfxRIvOQ+yRqosAw+y+ZSCfQepVQFWWodKfQu/myhyu
XIgLJ/R9xMReJXrpkRAzhnitAHxCvBBtgf/ZtZnXNSft2JJoyHl/ItUdT+QWroGH
qDsasSKB++05WT2Al7OpdNhj8e4qdJIi5QC/aHzkVpWMsOLOCgLvMo1VTwgc0X1l
TVhPlwkYNRhMUS6ZRF5HAtAO7+Q1cHWjwlwHX0CkHr6TD82OieRDcfIhZCzCbtFd
C0E=
-----END CERTIFICATE-----
Generated at Thu May 1 21:54:02 2025 by rpki-client