Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/soTLiZB9fNRBuIiQ1nXCnacLzfQ.roa
File: soTLiZB9fNRBuIiQ1nXCnacLzfQ.roa (raw, json)
Hash identifier: M4WKxqF00ZZ5KY0LDWtVMj8M2rDwLqxrd9BCG4fod+A=
Subject key identifier: B2:84:CB:89:90:7D:7C:D4:41:B8:88:90:D6:75:C2:9D:A7:0B:CD:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7F99DD99
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/soTLiZB9fNRBuIiQ1nXCnacLzfQ.roa
Signing time: Fri 29 Apr 2022 16:09:15 +0000
ROA not before: Fri 29 Apr 2022 16:09:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2140790169 (0x7f99dd99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 29 16:09:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b284cb89907d7cd441b88890d675c29da70bcdf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:43:06:c2:38:df:c8:2e:25:73:98:3b:76:de:
16:f3:c3:ee:f1:05:a3:d7:bd:4a:2b:dc:44:8e:ea:
7f:67:1e:a2:20:2a:87:2d:5e:f6:68:88:77:b3:44:
2e:b6:ee:54:fd:4e:5c:83:a5:ce:51:2c:0a:48:a9:
92:ca:32:50:36:e4:cf:bc:7b:02:6e:99:4a:51:b3:
54:d7:c1:8f:69:f0:5c:55:92:7c:0f:b3:b6:51:e7:
f3:2a:c4:12:11:31:4d:8a:f2:31:78:04:48:cf:a3:
5f:fc:62:86:8f:21:53:e1:29:3b:a5:15:8a:6a:e1:
20:29:0d:fa:6f:7b:c4:a0:bd:16:a6:7d:61:da:ac:
f5:f8:74:b0:bb:8f:1b:1b:57:42:79:a7:b3:37:4c:
07:c3:ea:70:60:7e:04:72:74:a6:8a:7b:0d:9c:10:
39:20:14:ce:8a:50:60:13:26:f2:68:80:77:a6:fa:
48:bf:64:fe:b9:c4:8e:d3:76:f9:14:a6:e7:52:47:
4e:5b:25:bf:da:3c:ac:de:74:46:bc:ae:a6:53:d4:
42:f6:33:70:53:8b:d8:03:c5:c8:3d:59:0a:7d:42:
2b:da:90:fc:09:f3:4d:9d:3f:ff:63:6a:e2:de:21:
93:cc:88:f1:2c:a7:72:6d:c4:64:8a:43:0a:cc:f3:
c6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:84:CB:89:90:7D:7C:D4:41:B8:88:90:D6:75:C2:9D:A7:0B:CD:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/soTLiZB9fNRBuIiQ1nXCnacLzfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:04:28:90:7f:d1:66:c9:0b:f0:74:80:8f:17:40:da:4a:d9:
8b:62:de:85:d4:f2:33:2a:f5:1e:e3:2b:6e:df:77:70:44:75:
46:2f:e6:bf:61:54:a5:10:96:7b:6a:1e:ad:06:0b:2e:f2:a4:
40:fc:a7:18:40:1d:49:5d:d0:5c:8f:25:a6:73:c7:59:70:a7:
30:7d:66:fd:2e:eb:75:70:a3:7d:9e:4f:cf:92:c1:91:aa:58:
b3:b6:32:17:39:62:72:d7:d0:52:05:6a:68:cd:12:d9:b1:c8:
de:dc:c4:29:7e:1e:b8:8c:1c:95:04:8a:34:3e:f3:01:90:19:
7a:bb:49:07:8c:ea:2f:6f:1a:a1:29:b2:05:18:2e:a2:ea:6d:
1b:4e:ee:04:ba:a9:e7:71:4f:1c:75:07:40:97:0f:4d:cc:cb:
17:0c:15:01:58:3b:dc:bd:f9:e9:9e:ca:87:f8:3a:39:58:34:
cf:ff:87:e6:47:2e:ad:3b:fc:1b:3f:1e:1e:1c:e6:3f:a1:fe:
af:ac:92:50:81:52:73:42:67:11:c6:8a:db:71:ab:0f:4d:01:
7b:e7:1f:33:d4:ce:6d:ca:bf:a9:95:f6:f2:37:32:a7:47:63:
77:e4:4c:92:1a:19:58:3d:6e:be:86:4a:21:fe:3a:17:1c:ec:
c6:4d:8d:da
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEf5ndmTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDQy
OTE2MDkxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjI4NGNiODk5MDdk
N2NkNDQxYjg4ODkwZDY3NWMyOWRhNzBiY2RmNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJJDBsI438guJXOYO3beFvPD7vEFo9e9SivcRI7qf2ceoiAq
hy1e9miId7NELrbuVP1OXIOlzlEsCkipksoyUDbkz7x7Am6ZSlGzVNfBj2nwXFWS
fA+ztlHn8yrEEhExTYryMXgESM+jX/xiho8hU+EpO6UVimrhICkN+m97xKC9FqZ9
Ydqs9fh0sLuPGxtXQnmnszdMB8PqcGB+BHJ0pop7DZwQOSAUzopQYBMm8miAd6b6
SL9k/rnEjtN2+RSm51JHTlslv9o8rN50RryuplPUQvYzcFOL2APFyD1ZCn1CK9qQ
/AnzTZ0//2Nq4t4hk8yI8Syncm3EZIpDCszzxtkCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSyhMuJkH181EG4iJDWdcKdpwvN9DAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L3NvVExpWkI5Zk5SQnVJaVExblhDbmFjTHpmUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCqBCiQf9FmyQvwdICPF0DaStmLYt6F1PIzKvUe
4ytu33dwRHVGL+a/YVSlEJZ7ah6tBgsu8qRA/KcYQB1JXdBcjyWmc8dZcKcwfWb9
Lut1cKN9nk/PksGRqliztjIXOWJy19BSBWpozRLZscje3MQpfh64jByVBIo0PvMB
kBl6u0kHjOovbxqhKbIFGC6i6m0bTu4EuqnncU8cdQdAlw9NzMsXDBUBWDvcvfnp
nsqH+Do5WDTP/4fmRy6tO/wbPx4eHOY/of6vrJJQgVJzQmcRxorbcasPTQF75x8z
1M5tyr+plfbyNzKnR2N35EySGhlYPW6+hkoh/joXHOzGTY3a
-----END CERTIFICATE-----
Generated at Sat May 3 05:29:12 2025 by rpki-client