Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/spKTh56pZ_igBOUZ9SLC3no5p64.roa
File: spKTh56pZ_igBOUZ9SLC3no5p64.roa (raw, json)
Hash identifier: hqfBscYg/5kgcFslqdOPhZq5WDg2LTf2fj9dK/H1BWI=
Subject key identifier: B2:92:93:87:9E:A9:67:F8:A0:04:E5:19:F5:22:C2:DE:7A:39:A7:AE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 700CB675
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/spKTh56pZ_igBOUZ9SLC3no5p64.roa
Signing time: Sun 06 Mar 2022 00:04:44 +0000
ROA not before: Sun 06 Mar 2022 00:04:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:5c8a:f09f/128 maxlen: 128
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1879881333 (0x700cb675)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 00:04:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b29293879ea967f8a004e519f522c2de7a39a7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:89:9a:a3:b3:3d:7a:00:b0:06:61:53:3e:37:
be:71:17:86:0f:cb:94:ca:2e:fa:45:37:9e:43:f2:
b3:43:ef:08:b4:f0:d3:a6:f8:6a:c0:2f:f2:89:40:
bf:d9:d9:f7:d1:96:ed:b8:c2:e4:c4:9c:33:85:44:
59:1b:e9:53:e2:1c:34:28:b0:22:d2:da:e7:3b:48:
3d:7c:33:7d:98:7d:bb:34:f8:59:2d:80:5f:e8:72:
33:87:e1:33:31:c1:38:cb:76:02:46:c9:82:99:2a:
3d:cf:00:c5:f5:0f:38:28:5a:b9:93:e7:99:d6:70:
97:f6:3b:7c:4d:19:21:a3:bc:80:bf:cd:bd:1c:3d:
7a:43:9b:d3:67:72:30:69:48:d0:ba:e5:4e:c8:84:
9b:a8:9d:85:69:b4:95:9b:0c:d9:74:d0:c1:51:d2:
f1:32:3b:4e:af:87:1d:28:e0:1e:19:2b:91:d5:95:
e4:47:28:24:9b:69:d9:5e:b9:9a:ee:83:a2:5a:3f:
49:5a:27:49:1e:6b:18:99:f8:fa:e2:36:09:d6:bd:
18:88:8d:73:a8:fe:f0:36:bb:89:ea:c7:ab:0f:ac:
93:e5:ca:a8:bf:ae:f2:3e:12:e1:67:90:7f:d2:fb:
5f:20:15:09:36:0b:b5:7b:fb:63:09:d8:48:d6:11:
f7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:92:93:87:9E:A9:67:F8:A0:04:E5:19:F5:22:C2:DE:7A:39:A7:AE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/spKTh56pZ_igBOUZ9SLC3no5p64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:7d:a4:68:51:49:3f:fe:e4:42:73:6b:95:9a:a3:ff:a7:ca:
1b:00:a7:a8:72:71:b8:77:2f:0c:70:13:46:4c:65:dd:fb:dd:
a2:b1:6e:a9:e3:a8:ee:4e:78:c5:af:01:68:05:4e:2f:ac:62:
e8:1d:40:df:bf:ac:1d:bd:75:69:73:7e:ab:f2:de:49:e3:be:
f7:06:1e:1b:b1:e6:8a:50:3f:da:f8:9a:e8:9a:28:50:2b:17:
d8:38:de:df:11:ee:e8:e6:2d:7a:75:ca:6d:81:42:1c:a8:c9:
ca:38:8a:6f:03:bf:3a:2f:3a:a1:3e:40:33:c6:d9:0b:fa:d2:
a9:66:bd:18:f6:c8:40:fb:63:07:e0:8c:f5:ce:77:c0:f2:dd:
62:cf:8c:7d:3a:ae:ab:52:75:e0:e7:58:32:96:af:12:93:9a:
71:54:44:48:d1:c9:23:55:38:7a:75:4d:0e:16:ec:a6:d8:4c:
c2:b3:bf:74:c5:94:bd:13:1d:7a:2e:91:b0:f1:7e:71:74:31:
56:02:c4:57:fb:87:ac:c2:6b:5f:40:cf:e7:3d:9d:1f:e5:fe:
32:d2:48:f5:12:df:3b:e1:dd:14:8a:c9:24:a9:6a:f0:12:3f:
8b:30:54:9a:73:57:5e:d2:18:c7:25:0e:f1:d8:ce:a0:8e:ea:
d3:c9:56:9c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEcAy2dTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMw
NjAwMDQ0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjI5MjkzODc5ZWE5
NjdmOGEwMDRlNTE5ZjUyMmMyZGU3YTM5YTdhZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJyJmqOzPXoAsAZhUz43vnEXhg/LlMou+kU3nkPys0PvCLTw
06b4asAv8olAv9nZ99GW7bjC5MScM4VEWRvpU+IcNCiwItLa5ztIPXwzfZh9uzT4
WS2AX+hyM4fhMzHBOMt2AkbJgpkqPc8AxfUPOChauZPnmdZwl/Y7fE0ZIaO8gL/N
vRw9ekOb02dyMGlI0LrlTsiEm6idhWm0lZsM2XTQwVHS8TI7Tq+HHSjgHhkrkdWV
5EcoJJtp2V65mu6Dolo/SVonSR5rGJn4+uI2Cda9GIiNc6j+8Da7ierHqw+sk+XK
qL+u8j4S4WeQf9L7XyAVCTYLtXv7YwnYSNYR908CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSykpOHnqln+KAE5Rn1IsLeejmnrjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L3NwS1RoNTZwWl9pZ0JPVVo5U0xDM25vNXA2NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAGfaRoUUk//uRCc2uVmqP/p8obAKeocnG4dy8M
cBNGTGXd+92isW6p46juTnjFrwFoBU4vrGLoHUDfv6wdvXVpc36r8t5J4773Bh4b
seaKUD/a+JromihQKxfYON7fEe7o5i16dcptgUIcqMnKOIpvA786LzqhPkAzxtkL
+tKpZr0Y9shA+2MH4Iz1znfA8t1iz4x9Oq6rUnXg51gylq8Sk5pxVERI0ckjVTh6
dU0OFuym2EzCs790xZS9Ex16LpGw8X5xdDFWAsRX+4eswmtfQM/nPZ0f5f4y0kj1
Et874d0UiskkqWrwEj+LMFSac1de0hjHJQ7x2M6gjurTyVac
-----END CERTIFICATE-----
Generated at Thu May 1 05:00:35 2025 by rpki-client