Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u5DaFORGRuJawg6_H7ysezTul10.roa
File: u5DaFORGRuJawg6_H7ysezTul10.roa (raw, json)
Hash identifier: tISKSYXgLNN16h+J+j1afL8UAElq2Fv5CzXWzV9wThk=
Subject key identifier: BB:90:DA:14:E4:46:46:E2:5A:C2:0E:BF:1F:BC:AC:7B:34:EE:97:5D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01866DDFA08A96737BCB7F0F5ECE075FCEBE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u5DaFORGRuJawg6_H7ysezTul10.roa
Signing time: Mon 20 Feb 2023 08:10:17 +0000
ROA not before: Mon 20 Feb 2023 08:10:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6d:df:a0:8a:96:73:7b:cb:7f:0f:5e:ce:07:5f:ce:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 08:10:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb90da14e44646e25ac20ebf1fbcac7b34ee975d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4b:a6:85:b9:ba:4d:c4:f2:29:ea:14:d2:24:
95:62:fb:c4:43:62:6c:40:2e:f1:d2:05:13:fd:53:
83:e4:d7:c6:66:1a:f7:9d:4c:0d:a1:85:5c:9a:41:
e7:8f:31:9d:13:40:3d:72:d8:eb:a7:8a:b7:e0:0b:
50:f5:5c:09:78:cd:a3:ed:77:c1:c9:90:79:8a:02:
f4:ac:74:05:28:df:ff:32:7a:7c:58:b6:5f:5e:ff:
d2:60:34:5e:eb:0e:85:50:65:98:08:fd:56:ff:7f:
09:25:15:b7:fe:ad:4d:9c:9a:c3:46:1c:e6:b4:bd:
3d:6d:78:e3:4e:dc:ab:0e:49:3d:1a:21:be:d0:ff:
f3:56:23:bc:29:1b:f8:1c:93:97:9b:74:3c:ac:6d:
25:a1:b0:85:2c:5a:cf:2f:e4:a5:eb:f5:3e:88:f9:
a6:b4:db:8f:1f:89:70:d3:81:b9:88:12:66:38:24:
97:3b:10:a2:7b:5b:b1:e7:7a:4f:3a:20:8f:4d:83:
17:7e:70:5d:56:c4:6d:07:26:1c:43:68:75:5d:f3:
49:ea:98:32:d6:69:94:23:14:6c:80:8f:6b:75:7f:
d7:35:67:45:58:18:55:12:97:1c:7c:a4:4c:a6:41:
93:14:ec:bb:87:da:b8:23:8c:e4:ee:fb:12:86:b8:
46:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:90:DA:14:E4:46:46:E2:5A:C2:0E:BF:1F:BC:AC:7B:34:EE:97:5D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u5DaFORGRuJawg6_H7ysezTul10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:41:72:33:e7:67:c6:70:b5:60:34:e6:90:0b:af:5d:d4:6c:
a0:e6:c1:72:f3:58:a5:5e:ac:99:34:8d:4f:fa:c2:95:88:0c:
39:96:89:bd:e0:bb:6f:4f:60:dc:3b:d8:22:81:32:e5:70:eb:
ad:ff:88:1e:21:ef:78:f4:ab:9d:20:a5:eb:3f:fc:fe:03:75:
4b:9b:89:13:73:92:b8:a9:56:69:59:1a:69:f6:c8:9c:3b:3b:
e1:8b:4f:ab:7a:df:d8:8c:29:de:a5:09:6b:9e:7c:40:31:a6:
fd:52:0e:dc:af:ae:25:1e:3c:d6:60:a7:34:36:dd:95:f2:c3:
2b:85:68:25:2b:11:1d:83:4d:83:2a:fb:a5:4f:d2:f5:34:14:
ed:91:b0:dc:c3:23:b0:ec:fa:8f:34:cc:ae:2d:a6:0c:eb:fa:
0a:6a:1a:6c:60:fb:11:b7:3d:dd:6e:2f:02:fc:ec:b8:74:79:
62:04:ca:93:cc:92:3e:94:26:8c:cc:18:b8:f1:d3:07:aa:e5:
99:02:dc:30:74:72:e0:f3:5e:bc:18:68:47:74:cf:ba:4f:74:
97:30:30:78:ab:8d:3b:5a:57:af:39:da:5b:1c:3e:9c:88:8c:
ea:43:84:61:bb:54:fb:4c:e3:0c:9f:16:38:0e:12:a4:3b:8f:
a4:08:4e:de
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZt36CKlnN7y38PXs4HX86+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjIwMDgxMDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjkwZGExNGU0NDY0NmUyNWFjMjBlYmYxZmJjYWM3YjM0ZWU5NzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkumhbm6TcTyKeoU0iSVYvvEQ2Js
QC7x0gUT/VOD5NfGZhr3nUwNoYVcmkHnjzGdE0A9ctjrp4q34AtQ9VwJeM2j7XfB
yZB5igL0rHQFKN//Mnp8WLZfXv/SYDRe6w6FUGWYCP1W/38JJRW3/q1NnJrDRhzm
tL09bXjjTtyrDkk9GiG+0P/zViO8KRv4HJOXm3Q8rG0lobCFLFrPL+Sl6/U+iPmm
tNuPH4lw04G5iBJmOCSXOxCie1ux53pPOiCPTYMXfnBdVsRtByYcQ2h1XfNJ6pgy
1mmUIxRsgI9rdX/XNWdFWBhVEpccfKRMpkGTFOy7h9q4I4zk7vsShrhGkQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLuQ2hTkRkbiWsIOvx+8rHs07pddMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdTVEYUZPUkdSdUphd2c2X0g3eXNlelR1bDEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIxBcjPnZ8ZwtWA05pAL
r13UbKDmwXLzWKVerJk0jU/6wpWIDDmWib3gu29PYNw72CKBMuVw663/iB4h73j0
q50gpes//P4DdUubiRNzkripVmlZGmn2yJw7O+GLT6t639iMKd6lCWuefEAxpv1S
DtyvriUePNZgpzQ23ZXywyuFaCUrER2DTYMq+6VP0vU0FO2RsNzDI7Ds+o80zK4t
pgzr+gpqGmxg+xG3Pd1uLwL87Lh0eWIEypPMkj6UJozMGLjx0weq5ZkC3DB0cuDz
XrwYaEd0z7pPdJcwMHirjTtaV6852lscPpyIjOpDhGG7VPtM4wyfFjgOEqQ7j6QI
Tt4=
-----END CERTIFICATE-----
Generated at Sat May 3 03:15:17 2025 by rpki-client