Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tXbM_5Glh8QN9mv_2DMQE7L3IIM.roa
File: tXbM_5Glh8QN9mv_2DMQE7L3IIM.roa (raw, json)
Hash identifier: EmJk85G5PY4Mac69dvjOEjYd+VoXmuHPn08jhPKY3Ag=
Subject key identifier: B5:76:CC:FF:91:A5:87:C4:0D:F6:6B:FF:D8:33:10:13:B2:F7:20:83
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B93C48F4D16ADC0546E5CB84594FA8EF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tXbM_5Glh8QN9mv_2DMQE7L3IIM.roa
Signing time: Mon 06 Mar 2023 23:23:00 +0000
ROA not before: Mon 06 Mar 2023 23:23:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b9:3c:48:f4:d1:6a:dc:05:46:e5:cb:84:59:4f:a8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 23:23:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b576ccff91a587c40df66bffd8331013b2f72083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0a:b0:ae:f7:d2:2d:8e:6f:fe:4b:1e:5f:76:
58:23:0c:83:40:f5:01:88:15:2e:e0:51:73:06:3f:
96:df:36:db:f5:1c:87:22:98:f0:14:fb:41:ff:56:
2f:93:00:58:97:43:a8:80:f9:a6:d7:39:19:21:7d:
d1:78:75:cb:ca:cd:20:4d:e9:5b:1b:a5:a6:e8:f8:
ef:24:7b:b4:69:3f:ef:f4:ec:a9:0a:b4:bf:f7:2f:
de:43:6c:f1:a7:6a:2c:1e:3c:d4:38:92:3f:ba:71:
ff:b2:61:58:30:6c:c5:57:72:ca:7d:71:0c:b8:5c:
77:65:ae:c3:83:1b:f0:dd:23:e0:49:98:42:1c:db:
41:c9:ae:a8:81:6d:27:49:9b:56:a3:05:15:cc:95:
d3:b6:1e:27:51:16:0f:6e:a9:db:83:7e:67:5e:c3:
f6:21:9f:5c:e5:b9:1e:8e:7a:65:67:33:b1:08:a4:
dc:30:50:c9:08:29:42:b6:5d:2f:3f:f5:12:93:c3:
f2:d8:29:81:b2:9c:6a:86:0d:c4:c8:af:81:df:50:
fe:a6:f2:d4:d0:6a:88:ad:c4:30:b5:13:61:56:1e:
62:75:11:d2:3d:7a:7c:b5:90:c3:24:e4:a0:50:28:
1b:a0:ad:27:c5:3c:bb:c2:fb:ef:2e:1f:04:e6:8c:
32:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:76:CC:FF:91:A5:87:C4:0D:F6:6B:FF:D8:33:10:13:B2:F7:20:83
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tXbM_5Glh8QN9mv_2DMQE7L3IIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:11:92:d2:70:8d:6f:b2:76:3f:68:0c:47:d9:fc:bd:cc:b6:
d5:c1:d6:96:2d:c4:9b:b8:e9:2f:97:15:97:64:5d:ca:13:48:
a9:a0:ac:dc:b5:de:cb:bc:b1:0c:17:42:1f:51:41:bb:79:3f:
04:9d:9a:59:2b:d4:fa:02:d5:ec:f6:fa:27:90:71:a4:77:2f:
81:ec:08:80:48:86:8f:17:9c:a7:e9:d9:a1:c0:8e:06:d1:e8:
4e:f2:e4:e8:88:2c:93:0a:d2:c1:95:7b:e6:42:85:97:f0:33:
6f:37:f2:88:27:af:e9:90:6f:2e:eb:e5:a3:b5:bd:8e:0f:90:
92:c8:60:3b:c2:c9:a8:1e:84:0a:61:f4:09:b0:8c:37:1a:fd:
91:b2:46:3c:84:77:28:15:34:5e:b4:f5:43:7b:7c:f0:a1:31:
90:1d:44:68:66:51:d8:e0:1d:83:53:2a:af:61:7d:cf:9a:01:
10:1d:11:d5:b4:2f:fe:43:3a:32:07:09:50:29:25:4c:20:73:
ab:a6:fe:6a:0e:5e:35:dc:21:31:50:99:06:59:43:98:55:ab:
5e:12:2b:87:1c:e5:e9:c9:89:89:05:78:95:60:bd:46:cb:35:
17:e6:d9:08:f8:e7:1c:57:1c:aa:30:5d:1c:a1:38:a3:17:c9:
e1:b0:9b:bc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYa5PEj00WrcBUbly4RZT6jvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzA2MjMyMzAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTc2Y2NmZjkxYTU4N2M0MGRmNjZiZmZkODMzMTAxM2IyZjcyMDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQqwrvfSLY5v/kseX3ZYIwyDQPUB
iBUu4FFzBj+W3zbb9RyHIpjwFPtB/1YvkwBYl0OogPmm1zkZIX3ReHXLys0gTelb
G6Wm6PjvJHu0aT/v9OypCrS/9y/eQ2zxp2osHjzUOJI/unH/smFYMGzFV3LKfXEM
uFx3Za7Dgxvw3SPgSZhCHNtBya6ogW0nSZtWowUVzJXTth4nURYPbqnbg35nXsP2
IZ9c5bkejnplZzOxCKTcMFDJCClCtl0vP/USk8Py2CmBspxqhg3EyK+B31D+pvLU
0GqIrcQwtRNhVh5idRHSPXp8tZDDJOSgUCgboK0nxTy7wvvvLh8E5owy3wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLV2zP+RpYfEDfZr/9gzEBOy9yCDMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdFhiTV81R2xoOFFOOW12XzJETVFFN0wzSUlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIgRktJwjW+ydj9oDEfZ
/L3MttXB1pYtxJu46S+XFZdkXcoTSKmgrNy13su8sQwXQh9RQbt5PwSdmlkr1PoC
1ez2+ieQcaR3L4HsCIBIho8XnKfp2aHAjgbR6E7y5OiILJMK0sGVe+ZChZfwM283
8ognr+mQby7r5aO1vY4PkJLIYDvCyagehAph9AmwjDca/ZGyRjyEdygVNF609UN7
fPChMZAdRGhmUdjgHYNTKq9hfc+aARAdEdW0L/5DOjIHCVApJUwgc6um/moOXjXc
ITFQmQZZQ5hVq14SK4cc5enJiYkFeJVgvUbLNRfm2Qj45xxXHKowXRyhOKMXyeGw
m7w=
-----END CERTIFICATE-----
Generated at Thu May 1 23:45:10 2025 by rpki-client