Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rhveMBW8i1D72O4tiwmmGuwdEnM.roa
File: rhveMBW8i1D72O4tiwmmGuwdEnM.roa (raw, json)
Hash identifier: DZngVRLWU0tTEojmYfGD6nj/kHwAR66VT3EN6fWXBHc=
Subject key identifier: AE:1B:DE:30:15:BC:8B:50:FB:D8:EE:2D:8B:09:A6:1A:EC:1D:12:73
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6D3582D9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rhveMBW8i1D72O4tiwmmGuwdEnM.roa
Signing time: Thu 24 Feb 2022 04:20:21 +0000
ROA not before: Thu 24 Feb 2022 04:20:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1832223449 (0x6d3582d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 24 04:20:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae1bde3015bc8b50fbd8ee2d8b09a61aec1d1273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:cd:6b:64:fb:53:a0:ad:61:5d:1e:7e:e1:
94:14:20:ae:3b:93:af:81:63:41:4c:1e:77:12:e5:
d3:c2:31:13:d7:b9:b5:a6:28:78:b9:19:63:d3:0a:
e7:62:37:ce:30:d5:48:07:06:19:7c:18:85:9d:18:
ff:fc:7c:b2:62:94:34:79:e0:b6:b9:75:f8:f9:15:
ff:82:45:24:cc:1c:6c:54:10:e7:e0:09:c8:37:b1:
f4:c1:f6:91:a8:e0:8e:8f:5c:e7:65:69:bf:5e:6b:
7b:2c:3f:4c:b5:3e:14:6c:42:e8:26:16:cc:ac:0a:
14:e7:1b:05:1f:88:46:a4:7a:7e:61:11:67:22:d9:
51:df:8c:16:64:6e:bc:e1:6a:ed:9f:29:e5:de:54:
e3:e8:66:86:4a:a9:98:36:67:52:f5:15:b2:d2:25:
9a:11:3d:94:7a:16:d1:6b:4f:0c:89:50:51:5b:b5:
0c:f8:a4:e7:e7:e2:5e:5b:74:a9:51:75:de:2c:5e:
33:09:6f:93:cf:f7:d5:52:47:05:75:a9:c5:3f:96:
3e:55:c8:ba:73:fb:82:0a:f9:1f:f0:28:b5:f0:2d:
34:7b:da:51:32:d1:34:a1:51:a2:3e:39:a1:d9:d3:
ee:02:87:ba:c4:bc:f0:8c:7b:00:91:38:17:4a:78:
3a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1B:DE:30:15:BC:8B:50:FB:D8:EE:2D:8B:09:A6:1A:EC:1D:12:73
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rhveMBW8i1D72O4tiwmmGuwdEnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:4d:10:3c:ef:b6:a9:9b:da:74:be:14:2f:69:f5:5d:4f:fb:
83:95:c6:3c:02:bb:15:fc:18:5e:80:b5:f4:ef:03:d3:6f:81:
73:d0:eb:1e:12:8e:a9:a4:17:3a:f6:c5:d5:6e:dc:b0:33:ae:
4a:59:f6:1d:5e:25:57:84:cc:c3:ae:29:fb:6f:fa:e5:27:af:
e1:c4:ba:74:20:73:48:cd:6c:ed:50:4e:98:70:99:c7:d5:31:
59:25:71:df:c0:1a:b4:d5:26:e6:e9:8b:e2:3d:2f:bc:f4:aa:
17:8d:30:a4:c6:15:71:0d:1d:38:13:7e:56:bd:c1:5a:f1:c3:
55:b7:3a:58:76:68:9c:58:76:d7:bd:a3:03:52:48:b0:49:2e:
6c:f6:0b:fc:de:04:95:c9:bb:82:ce:d9:b0:93:78:0b:3c:7a:
10:65:1a:3c:a0:ef:e5:01:0e:3f:94:ef:1d:34:69:a2:7c:19:
63:9a:eb:12:b5:83:6d:91:c8:dc:8c:9a:9d:8f:e8:a0:11:e4:
ac:08:93:7a:af:6b:20:62:a4:62:3f:05:5a:b2:55:b1:01:c8:
c0:6c:a4:31:59:88:87:42:50:3d:2a:d1:cb:f3:aa:eb:6d:0b:
7f:79:12:d4:26:0f:b8:93:ec:ba:82:32:b2:8a:5e:a2:12:11:
5b:f3:11:35
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEbTWC2TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIy
NDA0MjAyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWUxYmRlMzAxNWJj
OGI1MGZiZDhlZTJkOGIwOWE2MWFlYzFkMTI3MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMUCzWtk+1OgrWFdHn7hlBQgrjuTr4FjQUwedxLl08IxE9e5
taYoeLkZY9MK52I3zjDVSAcGGXwYhZ0Y//x8smKUNHngtrl1+PkV/4JFJMwcbFQQ
5+AJyDex9MH2kajgjo9c52Vpv15reyw/TLU+FGxC6CYWzKwKFOcbBR+IRqR6fmER
ZyLZUd+MFmRuvOFq7Z8p5d5U4+hmhkqpmDZnUvUVstIlmhE9lHoW0WtPDIlQUVu1
DPik5+fiXlt0qVF13ixeMwlvk8/31VJHBXWpxT+WPlXIunP7ggr5H/AotfAtNHva
UTLRNKFRoj45odnT7gKHusS88Ix7AJE4F0p4OiUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSuG94wFbyLUPvY7i2LCaYa7B0SczAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L3JodmVNQlc4aTFENzJPNHRpd21tR3V3ZEVuTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQA/TRA877apm9p0vhQvafVdT/uDlcY8ArsV/Bhe
gLX07wPTb4Fz0OseEo6ppBc69sXVbtywM65KWfYdXiVXhMzDrin7b/rlJ6/hxLp0
IHNIzWztUE6YcJnH1TFZJXHfwBq01Sbm6YviPS+89KoXjTCkxhVxDR04E35WvcFa
8cNVtzpYdmicWHbXvaMDUkiwSS5s9gv83gSVybuCztmwk3gLPHoQZRo8oO/lAQ4/
lO8dNGmifBljmusStYNtkcjcjJqdj+igEeSsCJN6r2sgYqRiPwVaslWxAcjAbKQx
WYiHQlA9KtHL86rrbQt/eRLUJg+4k+y6gjKyil6iEhFb8xE1
-----END CERTIFICATE-----
Generated at Sat May 3 08:53:06 2025 by rpki-client