Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sudERwy4Tv7WXAoiLzNskMy3xoU.roa
File: sudERwy4Tv7WXAoiLzNskMy3xoU.roa (raw, json)
Hash identifier: 5MaDx+Pe8TD6ol4SHk2Cn0gF6CeXHvrISTm/tzBfxIc=
Subject key identifier: B2:E7:44:47:0C:B8:4E:FE:D6:5C:0A:22:2F:33:6C:90:CC:B7:C6:85
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01875CE9DAFDE38FC44C0521D6F9E7406747
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sudERwy4Tv7WXAoiLzNskMy3xoU.roa
Signing time: Fri 07 Apr 2023 18:10:42 +0000
ROA not before: Fri 07 Apr 2023 18:10:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5c:e9:da:fd:e3:8f:c4:4c:05:21:d6:f9:e7:40:67:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 7 18:10:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2e744470cb84efed65c0a222f336c90ccb7c685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e9:dd:55:bd:8d:97:c3:73:d8:1e:9b:02:99:
41:3e:e3:7e:ec:d7:1f:23:6d:50:eb:f6:a3:f9:ca:
a5:ac:ed:c7:6b:c7:cb:12:f0:0b:e0:e2:ac:c3:ea:
0a:55:3a:b6:47:45:99:5b:bc:9b:32:d6:7c:f3:9f:
f9:e9:a2:7c:2d:3f:ce:2c:8c:51:7a:9a:95:c0:4f:
be:62:41:a9:69:5f:1f:54:6a:eb:55:9f:df:a3:3c:
78:7d:05:0c:90:08:c9:00:64:ce:d1:7a:6b:68:54:
fa:fc:09:a7:06:d0:04:d7:6f:57:1d:09:0b:63:ca:
23:63:30:9e:07:14:dd:f7:64:77:25:8e:4a:b2:56:
ae:b0:d4:c2:93:59:cb:e1:8c:a7:b5:bb:44:25:4c:
1c:3b:93:d0:f5:89:a5:a9:bd:36:3a:5e:c0:5b:89:
43:73:4d:87:45:53:fd:fa:89:7d:c0:d8:54:b0:ea:
3e:00:e3:4f:4d:58:dc:b1:a6:68:0c:f8:56:40:90:
56:3a:38:b1:53:43:e9:7d:c3:9e:93:a5:9d:88:3e:
e8:68:8f:f0:38:8d:18:34:5f:70:48:f8:40:63:3b:
d9:5b:25:96:98:8b:a7:9c:9d:fe:f2:34:1b:b4:32:
a9:25:1c:b0:96:dd:16:c5:19:b6:9c:2f:26:8f:16:
12:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E7:44:47:0C:B8:4E:FE:D6:5C:0A:22:2F:33:6C:90:CC:B7:C6:85
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sudERwy4Tv7WXAoiLzNskMy3xoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:da:79:d2:d6:66:77:55:e8:ff:6b:d1:02:7d:45:1f:cc:54:
1e:ce:7f:b8:0a:b1:14:6e:e5:36:95:d3:1b:3c:34:ee:6c:ae:
8a:88:15:a0:f7:08:a2:1d:f0:ba:c2:e0:bf:2a:9e:32:e6:1e:
de:91:19:21:d9:36:7c:18:46:7c:a5:64:42:9a:33:9c:7c:cb:
93:db:5e:9d:b8:8a:4d:6f:14:95:eb:65:c0:41:ad:b0:00:8e:
31:5d:f0:a0:b0:a8:e7:86:f6:01:b4:af:55:19:36:cc:2a:11:
7e:77:eb:bf:e6:3f:c4:d3:f0:29:b5:4b:f4:00:41:d4:06:b3:
9e:e1:73:ae:2f:64:9b:d5:e6:c0:46:e8:3e:9d:c2:f3:55:80:
b0:9b:54:e3:bd:1e:da:45:70:0d:3f:eb:c2:2c:15:41:fb:b8:
75:5d:ed:21:87:0a:ef:29:58:85:a7:54:4e:10:95:eb:24:2c:
2e:55:2a:5f:86:30:32:04:69:07:32:30:21:c3:b5:5c:5d:92:
ed:52:5e:3b:01:e4:ff:30:3a:9f:e6:63:7c:15:ce:06:27:51:
64:43:1f:e0:36:79:6b:6c:37:6f:46:16:32:b3:8c:3d:16:89:
79:65:5b:d4:5d:b7:9c:8a:ad:73:92:ce:c5:ec:81:24:c5:cd:
fa:e5:5e:e4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdc6dr944/ETAUh1vnnQGdHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDA3MTgxMDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmU3NDQ0NzBjYjg0ZWZlZDY1YzBhMjIyZjMzNmM5MGNjYjdjNjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOndVb2Nl8Nz2B6bAplBPuN+7Ncf
I21Q6/aj+cqlrO3Ha8fLEvAL4OKsw+oKVTq2R0WZW7ybMtZ885/56aJ8LT/OLIxR
epqVwE++YkGpaV8fVGrrVZ/fozx4fQUMkAjJAGTO0XpraFT6/AmnBtAE129XHQkL
Y8ojYzCeBxTd92R3JY5KslausNTCk1nL4YyntbtEJUwcO5PQ9Ymlqb02Ol7AW4lD
c02HRVP9+ol9wNhUsOo+AONPTVjcsaZoDPhWQJBWOjixU0PpfcOek6WdiD7oaI/w
OI0YNF9wSPhAYzvZWyWWmIunnJ3+8jQbtDKpJRywlt0WxRm2nC8mjxYS6QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLLnREcMuE7+1lwKIi8zbJDMt8aFMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvc3VkRVJ3eTRUdjdXWEFvaUx6TnNrTXkzeG9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEPaedLWZndV6P9r0QJ9
RR/MVB7Of7gKsRRu5TaV0xs8NO5sroqIFaD3CKId8LrC4L8qnjLmHt6RGSHZNnwY
RnylZEKaM5x8y5PbXp24ik1vFJXrZcBBrbAAjjFd8KCwqOeG9gG0r1UZNswqEX53
67/mP8TT8Cm1S/QAQdQGs57hc64vZJvV5sBG6D6dwvNVgLCbVOO9HtpFcA0/68Is
FUH7uHVd7SGHCu8pWIWnVE4QleskLC5VKl+GMDIEaQcyMCHDtVxdku1SXjsB5P8w
Op/mY3wVzgYnUWRDH+A2eWtsN29GFjKzjD0WiXllW9Rdt5yKrXOSzsXsgSTFzfrl
XuQ=
-----END CERTIFICATE-----
Generated at Fri May 2 11:49:02 2025 by rpki-client