Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u9SiYlB0CgrPc2-X9pGfm5FXQAc.roa
File: u9SiYlB0CgrPc2-X9pGfm5FXQAc.roa (raw, json)
Hash identifier: rgkuLeJ8ga7Aak1FaWB75MmBhIPhNASSxI6bLXxj6X8=
Subject key identifier: BB:D4:A2:62:50:74:0A:0A:CF:73:6F:97:F6:91:9F:9B:91:57:40:07
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6E4EA6D4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u9SiYlB0CgrPc2-X9pGfm5FXQAc.roa
Signing time: Mon 28 Feb 2022 00:17:31 +0000
ROA not before: Mon 28 Feb 2022 00:17:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1850648276 (0x6e4ea6d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 00:17:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbd4a26250740a0acf736f97f6919f9b91574007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ac:22:cf:dc:f9:04:18:ea:c1:29:cc:40:b3:
19:19:6f:b6:bd:8b:ef:d8:38:f6:2e:91:1e:0e:5d:
80:4e:66:ea:fd:eb:50:72:46:15:b2:98:0a:9f:a5:
bc:12:97:6e:b6:7a:95:df:6e:fa:c2:4b:b9:c4:d8:
2f:8a:6a:c8:6f:8c:03:5e:ce:23:88:1d:d7:09:53:
c4:21:5c:09:0d:23:dc:ab:0b:61:1b:cc:89:2c:88:
f8:3e:fa:d7:de:0d:7f:ce:c9:e3:54:db:cc:01:82:
3a:07:b3:31:8d:ea:59:e9:e5:d9:24:91:28:70:2a:
d9:47:3a:07:32:f7:48:02:08:76:25:ba:b0:a2:51:
3b:e7:31:5a:18:db:35:b1:bf:de:c8:f2:fc:a3:26:
e8:d2:99:24:9a:bd:aa:b5:34:59:04:04:20:e0:84:
31:df:a8:e9:cd:14:15:6d:b2:70:e8:cf:09:68:9f:
e7:14:e4:74:50:a9:32:0d:5b:2c:ca:19:21:23:a8:
28:be:85:2a:a7:60:fb:fb:c5:bc:80:b3:33:64:3c:
40:a1:9e:ec:0c:7f:45:ea:92:bd:80:34:07:8e:58:
12:d0:5a:1b:df:79:0d:2f:3a:62:ef:83:41:19:b1:
c0:b4:ea:8b:e4:fa:0e:d6:06:a3:06:16:6d:1c:2d:
d9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D4:A2:62:50:74:0A:0A:CF:73:6F:97:F6:91:9F:9B:91:57:40:07
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u9SiYlB0CgrPc2-X9pGfm5FXQAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:48:c4:47:31:c9:a8:39:a4:51:66:f0:ab:91:ac:18:c3:8d:
a6:ff:a0:00:4f:c0:f6:6f:43:f1:54:74:db:3f:c1:55:88:77:
af:5b:ae:59:37:6a:90:7e:c6:2b:7b:45:8f:73:46:3e:7a:97:
89:6c:55:ad:bc:78:13:7d:7e:43:35:e8:5b:4b:47:89:7f:1e:
b5:16:69:f8:cb:88:fe:f4:16:e6:7d:de:ab:75:ea:5d:55:b5:
79:cb:8c:66:61:3c:19:18:2d:9c:87:01:90:35:d8:f2:2c:bd:
fb:7f:c4:c6:04:09:bb:e4:13:0f:23:10:6f:40:d5:33:b4:39:
ea:68:9b:c5:6c:8a:b1:fc:ff:58:ab:19:08:ce:b2:86:12:3d:
35:be:ed:7b:c8:72:8e:28:99:9d:a1:c4:bb:91:c3:db:9f:53:
97:69:b3:aa:6b:37:8e:84:85:f4:8f:77:59:16:7d:5b:c4:ca:
ad:57:e9:fa:9f:7a:eb:83:2f:fa:f4:94:a2:4b:72:17:86:5a:
22:07:46:3f:bf:7b:95:ab:05:81:d9:e9:a1:36:50:9f:c7:54:
f4:fb:f0:b4:a8:07:e7:9a:f0:7a:f6:a6:8e:9f:6d:69:2d:66:
8e:a3:e8:9d:ca:0e:74:37:49:90:8f:d7:3d:95:7e:89:ad:82:
27:50:29:6c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEbk6m1DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIy
ODAwMTczMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmJkNGEyNjI1MDc0
MGEwYWNmNzM2Zjk3ZjY5MTlmOWI5MTU3NDAwNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMGsIs/c+QQY6sEpzECzGRlvtr2L79g49i6RHg5dgE5m6v3r
UHJGFbKYCp+lvBKXbrZ6ld9u+sJLucTYL4pqyG+MA17OI4gd1wlTxCFcCQ0j3KsL
YRvMiSyI+D76194Nf87J41TbzAGCOgezMY3qWenl2SSRKHAq2Uc6BzL3SAIIdiW6
sKJRO+cxWhjbNbG/3sjy/KMm6NKZJJq9qrU0WQQEIOCEMd+o6c0UFW2ycOjPCWif
5xTkdFCpMg1bLMoZISOoKL6FKqdg+/vFvICzM2Q8QKGe7Ax/ReqSvYA0B45YEtBa
G995DS86Yu+DQRmxwLTqi+T6DtYGowYWbRwt2YMCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBS71KJiUHQKCs9zb5f2kZ+bkVdABzAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L3U5U2lZbEIwQ2dyUGMyLVg5cEdmbTVGWFFBYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCxSMRHMcmoOaRRZvCrkawYw42m/6AAT8D2b0Px
VHTbP8FViHevW65ZN2qQfsYre0WPc0Y+epeJbFWtvHgTfX5DNehbS0eJfx61Fmn4
y4j+9Bbmfd6rdepdVbV5y4xmYTwZGC2chwGQNdjyLL37f8TGBAm75BMPIxBvQNUz
tDnqaJvFbIqx/P9YqxkIzrKGEj01vu17yHKOKJmdocS7kcPbn1OXabOqazeOhIX0
j3dZFn1bxMqtV+n6n3rrgy/69JSiS3IXhloiB0Y/v3uVqwWB2emhNlCfx1T0+/C0
qAfnmvB69qaOn21pLWaOo+idyg50N0mQj9c9lX6JrYInUCls
-----END CERTIFICATE-----
Generated at Fri May 2 06:01:31 2025 by rpki-client