Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rn1Y-PhTFjnJWmUBe6pe_MY_RQE.roa
File: rn1Y-PhTFjnJWmUBe6pe_MY_RQE.roa (raw, json)
Hash identifier: NKFZD4s27tYCcWIBZ0TbKZdoWxuTvRjzsGirxtrBPPA=
Subject key identifier: AE:7D:58:F8:F8:53:16:39:C9:5A:65:01:7B:AA:5E:FC:C6:3F:45:01
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01880D4B294CE37093018556076642950F41
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rn1Y-PhTFjnJWmUBe6pe_MY_RQE.roa
Signing time: Fri 12 May 2023 00:10:09 +0000
ROA not before: Fri 12 May 2023 00:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0d:4b:29:4c:e3:70:93:01:85:56:07:66:42:95:0f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 12 00:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae7d58f8f8531639c95a65017baa5efcc63f4501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:06:52:db:fb:a1:80:c6:1a:9d:d7:b7:71:72:
57:96:af:3b:39:8d:bb:08:04:95:48:76:86:9e:8c:
79:72:d7:d7:be:ff:2c:8e:04:8c:bc:c4:93:3a:9d:
18:46:07:a2:c5:13:47:6d:17:ac:e9:ac:df:8b:b7:
4f:56:31:f6:c0:f6:4e:23:8b:59:13:07:de:9e:08:
9a:95:ff:46:c2:c4:a0:30:99:de:ae:2a:af:d4:71:
3f:85:41:8f:9c:ed:19:7a:3e:dc:b7:10:86:58:ea:
51:94:76:fc:80:9f:f2:1b:e7:98:b2:dd:16:fe:d5:
d2:de:8f:1d:fe:9d:97:19:f3:53:67:70:1a:e9:bb:
7d:cd:da:49:48:fd:06:d0:a9:a6:a8:07:e5:e2:2b:
bd:81:99:73:26:e5:ec:30:f7:13:60:bb:ed:94:71:
77:b3:7a:46:cb:93:4d:c1:80:bf:f9:96:1b:31:c0:
4e:87:60:df:16:6d:f3:7e:53:fe:fd:d1:ee:2b:e0:
84:ae:44:a4:bb:aa:e9:c4:9e:17:40:6f:0f:8c:20:
7a:50:98:9b:bd:e1:db:37:81:18:ef:62:d4:fb:53:
94:e5:ca:a8:28:cf:4c:ab:eb:09:df:6d:7f:1d:e5:
6f:71:8a:6d:9c:2f:a7:37:6b:8d:a1:b8:22:a0:72:
49:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7D:58:F8:F8:53:16:39:C9:5A:65:01:7B:AA:5E:FC:C6:3F:45:01
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rn1Y-PhTFjnJWmUBe6pe_MY_RQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:03:31:2f:27:2c:30:7c:30:15:72:95:ba:3b:56:8a:1a:b6:
d3:f0:be:ec:84:66:48:ff:6a:c6:a3:a8:e9:a6:70:5b:ea:2c:
3c:39:bb:34:7e:90:89:e8:5d:93:63:2a:3f:88:54:c4:c9:ba:
21:ac:95:49:8b:4a:1a:41:5e:2f:0d:c7:e2:11:3b:29:e4:89:
be:36:e2:11:6c:3c:5f:a9:c9:9f:4a:5f:09:31:58:3f:91:81:
4c:b3:c1:7f:d6:a5:e4:ee:83:b6:7d:33:81:71:15:27:52:61:
97:59:e9:6d:e8:25:13:d4:db:69:11:67:41:4b:dd:83:f1:9f:
11:8b:4e:48:c8:75:68:c7:d5:29:7b:8f:7a:8a:20:18:f5:1c:
9a:f4:b2:2c:a3:46:03:c8:fb:93:5b:d4:d3:68:6f:b3:e8:92:
d5:fc:49:e9:6d:a9:de:4a:1b:12:6b:02:26:52:1f:90:0e:68:
f2:ff:b1:c3:93:5c:8f:e3:18:49:1f:d1:0b:7f:e1:78:28:3b:
0f:30:d9:18:67:f9:d1:20:5d:b5:83:63:19:06:59:6a:55:47:
ef:eb:39:0e:e1:b1:30:02:91:32:01:ff:02:8b:72:2a:ee:7f:
f2:19:82:8a:21:2e:c8:d9:86:76:c4:62:48:43:8f:8d:b1:b5:
b5:10:2a:e2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYgNSylM43CTAYVWB2ZClQ9BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTEyMDAxMDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTdkNThmOGY4NTMxNjM5Yzk1YTY1MDE3YmFhNWVmY2M2M2Y0NTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQZS2/uhgMYande3cXJXlq87OY27
CASVSHaGnox5ctfXvv8sjgSMvMSTOp0YRgeixRNHbRes6azfi7dPVjH2wPZOI4tZ
Ewfengialf9GwsSgMJneriqv1HE/hUGPnO0Zej7ctxCGWOpRlHb8gJ/yG+eYst0W
/tXS3o8d/p2XGfNTZ3Aa6bt9zdpJSP0G0KmmqAfl4iu9gZlzJuXsMPcTYLvtlHF3
s3pGy5NNwYC/+ZYbMcBOh2DfFm3zflP+/dHuK+CErkSku6rpxJ4XQG8PjCB6UJib
veHbN4EY72LU+1OU5cqoKM9Mq+sJ321/HeVvcYptnC+nN2uNobgioHJJXwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFK59WPj4UxY5yVplAXuqXvzGP0UBMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcm4xWS1QaFRGam5KV21VQmU2cGVfTVlfUlFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAgDMS8nLDB8MBVylbo7
VooattPwvuyEZkj/asajqOmmcFvqLDw5uzR+kInoXZNjKj+IVMTJuiGslUmLShpB
Xi8Nx+IROynkib424hFsPF+pyZ9KXwkxWD+RgUyzwX/WpeTug7Z9M4FxFSdSYZdZ
6W3oJRPU22kRZ0FL3YPxnxGLTkjIdWjH1Sl7j3qKIBj1HJr0siyjRgPI+5Nb1NNo
b7PoktX8Seltqd5KGxJrAiZSH5AOaPL/scOTXI/jGEkf0Qt/4XgoOw8w2Rhn+dEg
XbWDYxkGWWpVR+/rOQ7hsTACkTIB/wKLciruf/IZgoohLsjZhnbEYkhDj42xtbUQ
KuI=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:44 2025 by rpki-client