Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u5PM6IsndPVYFKrm4bpno4x6p_0.roa
File: u5PM6IsndPVYFKrm4bpno4x6p_0.roa (raw, json)
Hash identifier: WiPa0GsF+SCsWVCxKAVa3YA6A3hy+JkCBtxXxoFE4Dg=
Subject key identifier: BB:93:CC:E8:8B:27:74:F5:58:14:AA:E6:E1:BA:67:A3:8C:7A:A7:FD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018540D1FB638C0C41BDE9F1FFD7834F5FC7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u5PM6IsndPVYFKrm4bpno4x6p_0.roa
Signing time: Fri 23 Dec 2022 21:09:41 +0000
ROA not before: Fri 23 Dec 2022 21:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:40:d1:fb:63:8c:0c:41:bd:e9:f1:ff:d7:83:4f:5f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 23 21:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb93cce88b2774f55814aae6e1ba67a38c7aa7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:40:85:36:2d:22:66:34:aa:82:b9:cb:c9:d5:
36:c2:ce:08:66:ea:3c:75:94:f6:7c:99:79:18:ee:
ce:82:16:59:94:f4:54:68:75:08:8e:d2:e4:71:43:
0f:e1:5c:89:e6:da:31:df:4a:ea:86:d0:7a:4f:1d:
9a:43:bc:cd:06:da:af:b8:85:6d:48:b3:a4:06:f7:
1b:f1:ec:06:55:1c:b8:bb:cf:94:38:27:48:59:71:
e0:ed:d3:15:5e:cb:02:4b:3b:a6:ee:49:49:50:9a:
85:dc:de:ae:b9:83:fa:9d:a3:62:6f:5b:7a:c8:e9:
f8:38:14:f4:fc:cd:6f:b2:50:60:ba:8a:0b:20:83:
09:6c:6a:14:03:3d:4c:8e:83:32:88:ff:29:be:bd:
97:6a:4f:ad:1c:17:27:ce:b2:f2:db:c4:22:93:28:
99:a8:6c:9c:de:54:ed:83:79:b2:ea:13:ca:f1:d8:
cc:d8:e5:2b:42:a5:88:3a:d4:b1:4f:fb:11:f9:ad:
05:20:85:10:b0:5e:4b:af:2d:52:47:78:b3:f2:40:
55:7b:f2:e6:07:f0:dd:37:d2:b7:16:e0:a0:7f:9b:
e7:f9:5f:82:f4:b9:45:24:69:3e:9b:34:89:94:5e:
12:d3:df:54:96:0c:e1:3c:5c:db:55:ac:62:79:6a:
10:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:93:CC:E8:8B:27:74:F5:58:14:AA:E6:E1:BA:67:A3:8C:7A:A7:FD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u5PM6IsndPVYFKrm4bpno4x6p_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:7b:73:d1:c4:8f:9f:52:0d:28:92:96:a5:b4:1a:e0:5d:46:
53:48:e5:e8:23:9d:ca:25:4d:20:6e:7c:5a:ce:75:42:c7:0d:
2b:3e:ee:84:21:c1:47:d1:f4:a3:14:09:f1:61:b8:aa:59:2e:
b7:85:3a:01:f7:6d:63:61:41:65:70:a3:56:3b:a5:70:ba:24:
b7:c4:92:d9:03:48:3e:af:a4:62:53:76:ee:0b:94:6e:bc:27:
f7:cc:80:55:27:4a:c7:84:bf:f0:db:e8:f5:f1:a6:9c:47:00:
b1:d5:24:43:9f:80:e3:0f:2b:a7:aa:6f:4d:5e:e0:bb:28:52:
da:8d:b3:77:da:ea:c8:e3:16:96:a1:fd:b1:32:15:57:cc:07:
8b:5e:5a:9e:39:6d:6a:7d:e9:e4:71:c2:b4:fa:d8:97:5a:3c:
83:9e:64:c5:6e:25:1e:e6:0a:56:c8:06:78:7c:a7:5c:16:cb:
c2:ab:71:81:8f:12:49:c9:0f:fa:ce:91:64:7c:f2:2a:58:a9:
91:44:73:cd:40:79:82:a7:3e:c9:06:1b:2b:00:d9:7b:6e:b8:
ba:19:b0:fe:b8:b8:c2:c0:1c:bd:90:f3:f8:3f:72:0e:97:3c:
e0:64:82:54:bc:1e:f8:0f:b9:4e:d8:48:85:5e:2d:7b:68:a8:
a8:59:8a:45
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVA0ftjjAxBvenx/9eDT1/HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjIzMjEwOTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjkzY2NlODhiMjc3NGY1NTgxNGFhZTZlMWJhNjdhMzhjN2FhN2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0CFNi0iZjSqgrnLydU2ws4IZuo8
dZT2fJl5GO7OghZZlPRUaHUIjtLkcUMP4VyJ5tox30rqhtB6Tx2aQ7zNBtqvuIVt
SLOkBvcb8ewGVRy4u8+UOCdIWXHg7dMVXssCSzum7klJUJqF3N6uuYP6naNib1t6
yOn4OBT0/M1vslBguooLIIMJbGoUAz1MjoMyiP8pvr2Xak+tHBcnzrLy28QikyiZ
qGyc3lTtg3my6hPK8djM2OUrQqWIOtSxT/sR+a0FIIUQsF5Lry1SR3iz8kBVe/Lm
B/DdN9K3FuCgf5vn+V+C9LlFJGk+mzSJlF4S099UlgzhPFzbVaxieWoQ0wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLuTzOiLJ3T1WBSq5uG6Z6OMeqf9MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdTVQTTZJc25kUFZZRktybTRicG5vNHg2cF8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABR7c9HEj59SDSiSlqW0
GuBdRlNI5egjncolTSBufFrOdULHDSs+7oQhwUfR9KMUCfFhuKpZLreFOgH3bWNh
QWVwo1Y7pXC6JLfEktkDSD6vpGJTdu4LlG68J/fMgFUnSseEv/Db6PXxppxHALHV
JEOfgOMPK6eqb01e4LsoUtqNs3fa6sjjFpah/bEyFVfMB4teWp45bWp96eRxwrT6
2JdaPIOeZMVuJR7mClbIBnh8p1wWy8KrcYGPEknJD/rOkWR88ipYqZFEc81AeYKn
PskGGysA2XtuuLoZsP64uMLAHL2Q8/g/cg6XPOBkglS8HvgPuU7YSIVeLXtoqKhZ
ikU=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:33:18 2025 by rpki-client