Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tI8Hdqcm1z-8SdCe6XWq8J9pLgM.roa
File: tI8Hdqcm1z-8SdCe6XWq8J9pLgM.roa (raw, json)
Hash identifier: OGHRincYOekSb0P0U2Y2lp1qMoOzR6owf1lQlxBmMck=
Subject key identifier: B4:8F:07:76:A7:26:D7:3F:BC:49:D0:9E:E9:75:AA:F0:9F:69:2E:03
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189EE2C750B7F9F278109068286CCB34CC7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tI8Hdqcm1z-8SdCe6XWq8J9pLgM.roa
Signing time: Sun 13 Aug 2023 09:13:58 +0000
ROA not before: Sun 13 Aug 2023 09:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ee:2c:75:0b:7f:9f:27:81:09:06:82:86:cc:b3:4c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 13 09:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b48f0776a726d73fbc49d09ee975aaf09f692e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d8:6d:8e:9b:91:16:4d:14:0e:fa:98:43:7d:
4d:fc:c5:1f:a9:5e:01:80:09:9f:94:9d:0e:2c:96:
79:c5:ae:ff:4d:5b:ba:43:cf:41:9d:a2:69:d6:eb:
97:e2:33:84:c4:6a:7e:d8:f0:58:d3:81:6b:dc:60:
24:b7:e8:cd:b2:56:59:d0:4e:ea:7b:08:8f:55:f9:
d6:12:6f:52:a9:f5:96:0a:fd:ee:90:95:33:13:e5:
ce:63:93:bd:6b:9b:b2:5b:5f:5a:23:c1:f7:42:a9:
88:0d:f0:2b:41:be:e7:f1:df:01:3d:c9:82:f8:7d:
55:ef:b6:e3:44:de:66:55:96:f9:49:8e:97:3f:a7:
35:05:e6:12:c6:c3:57:2b:a9:f7:cb:27:95:4b:a8:
21:c2:15:05:2f:b9:33:8d:3c:21:c4:95:76:ba:27:
16:b5:47:92:d4:dc:48:1a:66:4f:b4:a5:c1:fc:2e:
a1:23:1d:a4:e2:27:57:58:39:53:20:06:91:8a:4e:
4f:54:41:d2:60:7b:b6:46:a3:45:d6:bc:31:4f:c5:
80:ec:eb:69:61:58:b8:3a:5b:ec:a7:e8:76:f9:09:
b4:d6:a2:7d:32:fb:b1:82:ae:30:94:7e:a0:58:bf:
0e:a0:14:53:6c:dd:7a:45:96:3a:30:43:7d:7d:b0:
80:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8F:07:76:A7:26:D7:3F:BC:49:D0:9E:E9:75:AA:F0:9F:69:2E:03
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tI8Hdqcm1z-8SdCe6XWq8J9pLgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:79:8b:6e:8c:3c:52:22:4f:31:18:c8:4d:e9:c8:94:75:0b:
86:35:f4:54:ef:17:23:62:43:79:37:89:ed:08:8b:34:4c:bf:
2c:29:24:5e:b8:c9:05:79:3b:19:3d:4b:95:40:1e:a5:41:ff:
65:5e:f1:c6:45:43:0d:a0:3f:70:ea:24:72:72:cd:75:36:89:
df:67:5a:ab:df:bf:95:f9:c1:52:41:5a:b6:c2:f0:fb:b6:c9:
ac:be:0b:34:f5:e1:3e:57:58:58:58:b8:b9:e1:68:3a:54:3d:
3b:55:99:bb:60:84:64:39:d8:fc:49:9b:dd:fb:cf:11:ac:79:
94:12:99:b7:e0:7a:61:3a:fd:1f:b7:a4:e6:b8:48:c9:57:25:
32:17:98:40:6f:0f:6b:67:c8:62:26:b0:6a:c3:36:1a:7f:ad:
94:07:b6:09:83:be:48:48:e5:34:91:14:09:b0:4d:e8:dc:fb:
f0:1e:04:f6:e7:41:03:10:48:a8:93:73:e7:0e:c2:9a:a3:0f:
52:54:b1:4b:8e:4e:46:b8:e0:99:c8:0a:56:aa:d6:58:76:9c:
46:13:b3:a5:15:fa:69:f3:10:82:7e:d9:be:fe:55:65:f7:40:
83:31:6b:cd:97:61:25:08:7a:be:aa:ec:06:71:cc:c8:b4:42:
d3:15:81:5b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnuLHULf58ngQkGgobMs0zHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODEzMDkxMzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDhmMDc3NmE3MjZkNzNmYmM0OWQwOWVlOTc1YWFmMDlmNjkyZTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9htjpuRFk0UDvqYQ31N/MUfqV4B
gAmflJ0OLJZ5xa7/TVu6Q89BnaJp1uuX4jOExGp+2PBY04Fr3GAkt+jNslZZ0E7q
ewiPVfnWEm9SqfWWCv3ukJUzE+XOY5O9a5uyW19aI8H3QqmIDfArQb7n8d8BPcmC
+H1V77bjRN5mVZb5SY6XP6c1BeYSxsNXK6n3yyeVS6ghwhUFL7kzjTwhxJV2uicW
tUeS1NxIGmZPtKXB/C6hIx2k4idXWDlTIAaRik5PVEHSYHu2RqNF1rwxT8WA7Otp
YVi4Olvsp+h2+Qm01qJ9Mvuxgq4wlH6gWL8OoBRTbN16RZY6MEN9fbCAiQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLSPB3anJtc/vEnQnul1qvCfaS4DMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdEk4SGRxY20xei04U2RDZTZYV3E4SjlwTGdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB95i26MPFIiTzEYyE3p
yJR1C4Y19FTvFyNiQ3k3ie0IizRMvywpJF64yQV5Oxk9S5VAHqVB/2Ve8cZFQw2g
P3DqJHJyzXU2id9nWqvfv5X5wVJBWrbC8Pu2yay+CzT14T5XWFhYuLnhaDpUPTtV
mbtghGQ52PxJm937zxGseZQSmbfgemE6/R+3pOa4SMlXJTIXmEBvD2tnyGImsGrD
Nhp/rZQHtgmDvkhI5TSRFAmwTejc+/AeBPbnQQMQSKiTc+cOwpqjD1JUsUuOTka4
4JnIClaq1lh2nEYTs6UV+mnzEIJ+2b7+VWX3QIMxa82XYSUIer6q7AZxzMi0QtMV
gVs=
-----END CERTIFICATE-----
Generated at Thu May 1 05:16:01 2025 by rpki-client