Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vRc5QyaFDeLgjxvhzPIDCs5fFt4.roa
File: vRc5QyaFDeLgjxvhzPIDCs5fFt4.roa (raw, json)
Hash identifier: MHr0J19PJIP3hEOHQSt//eWu05DsvqMtNMudJdQ6hhs=
Subject key identifier: BD:17:39:43:26:85:0D:E2:E0:8F:1B:E1:CC:F2:03:0A:CE:5F:16:DE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E4C0D54A5DC5A08869F8064FCAA4F521
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vRc5QyaFDeLgjxvhzPIDCs5fFt4.roa
Signing time: Wed 15 Mar 2023 10:11:28 +0000
ROA not before: Wed 15 Mar 2023 10:11:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e4:c0:d5:4a:5d:c5:a0:88:69:f8:06:4f:ca:a4:f5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 15 10:11:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd17394326850de2e08f1be1ccf2030ace5f16de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b7:d0:95:14:cb:1c:bd:a0:1c:52:55:71:6e:
9e:c7:12:1b:8c:59:e0:36:b7:52:2f:cb:bf:ca:0f:
8c:35:32:c0:d0:16:93:b1:76:b6:9d:29:20:fa:8f:
cd:0e:1e:66:02:3e:ce:11:ef:e8:2b:a4:01:69:e5:
2a:31:26:1d:da:98:92:ee:34:1a:fc:0c:7e:a9:11:
22:b3:61:45:48:50:0e:ef:9d:9f:b2:1a:18:9a:4c:
6f:47:03:6e:a9:d5:2a:ea:10:92:3e:68:67:ba:5d:
67:36:37:47:06:cd:a3:7c:31:25:8f:ce:fd:62:41:
a2:8b:59:3f:0b:2c:33:f2:10:6a:36:74:5d:d4:9b:
bd:17:4b:39:9b:96:54:32:d9:16:d4:07:98:49:d1:
85:d4:ea:77:b3:2e:2b:29:b0:10:67:4d:b7:91:4a:
9f:51:8f:2f:36:43:f9:e4:38:24:5d:87:3a:29:1a:
44:c6:9e:09:2b:62:ba:d0:11:69:b4:41:93:5d:7c:
32:da:1d:77:34:e6:db:28:fa:ed:a7:ff:5c:c9:a7:
02:8d:d1:ce:01:72:c5:3c:55:28:4c:e2:d3:9e:22:
73:63:c2:1e:7e:ce:46:e2:f0:c0:33:90:c7:5e:00:
14:8c:c8:e6:41:df:61:5e:07:8b:1c:dd:de:c2:34:
c6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:17:39:43:26:85:0D:E2:E0:8F:1B:E1:CC:F2:03:0A:CE:5F:16:DE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vRc5QyaFDeLgjxvhzPIDCs5fFt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:c5:ca:2f:3c:74:0a:83:87:79:db:50:0c:2c:bb:d4:71:e3:
81:60:73:9b:7e:2b:96:ff:48:92:db:ba:00:7f:5a:58:63:28:
46:29:56:f1:30:b8:2f:8b:17:bc:44:15:fb:69:37:b5:41:44:
05:b8:bb:4e:17:e5:6a:02:3a:81:d1:f4:01:3b:ff:c1:81:81:
8d:d2:e1:90:3f:6b:d8:a8:bb:71:8f:9c:a6:bb:30:b8:50:c1:
a4:8a:66:25:ca:91:cb:f8:57:a2:8c:00:86:89:fb:b1:21:85:
3f:45:13:e1:ee:9d:84:96:7e:12:6b:80:8b:04:8d:61:09:c2:
aa:57:31:80:0d:d0:fa:ee:e1:cd:52:b6:0e:88:74:55:c0:cf:
df:16:84:21:b8:68:19:62:0f:3d:e9:39:c5:61:0d:ab:56:5a:
51:ed:4f:51:25:95:7b:5d:c7:96:b6:ad:20:e4:45:aa:5d:a6:
80:33:f0:b0:e1:54:39:b1:dc:a4:77:82:57:40:2e:f6:9c:3a:
4c:6a:45:bf:4e:72:0d:d0:2a:90:41:d1:0a:c8:a5:11:63:39:
3f:40:41:33:18:56:d8:4a:e7:86:4d:56:e6:1e:a2:8a:4f:20:
f1:2b:07:bc:7a:f6:00:a1:bf:0b:3c:e4:21:d2:38:0f:e0:7c:
56:5f:ab:22
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbkwNVKXcWgiGn4Bk/KpPUhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzE1MTAxMTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDE3Mzk0MzI2ODUwZGUyZTA4ZjFiZTFjY2YyMDMwYWNlNWYxNmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrfQlRTLHL2gHFJVcW6exxIbjFng
NrdSL8u/yg+MNTLA0BaTsXa2nSkg+o/NDh5mAj7OEe/oK6QBaeUqMSYd2piS7jQa
/Ax+qREis2FFSFAO752fshoYmkxvRwNuqdUq6hCSPmhnul1nNjdHBs2jfDElj879
YkGii1k/Cywz8hBqNnRd1Ju9F0s5m5ZUMtkW1AeYSdGF1Op3sy4rKbAQZ023kUqf
UY8vNkP55DgkXYc6KRpExp4JK2K60BFptEGTXXwy2h13NObbKPrtp/9cyacCjdHO
AXLFPFUoTOLTniJzY8Iefs5G4vDAM5DHXgAUjMjmQd9hXgeLHN3ewjTGFQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFL0XOUMmhQ3i4I8b4czyAwrOXxbeMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdlJjNVF5YUZEZUxnanh2aHpQSURDczVmRnQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGPFyi88dAqDh3nbUAws
u9Rx44Fgc5t+K5b/SJLbugB/WlhjKEYpVvEwuC+LF7xEFftpN7VBRAW4u04X5WoC
OoHR9AE7/8GBgY3S4ZA/a9iou3GPnKa7MLhQwaSKZiXKkcv4V6KMAIaJ+7EhhT9F
E+HunYSWfhJrgIsEjWEJwqpXMYAN0Pru4c1Stg6IdFXAz98WhCG4aBliDz3pOcVh
DatWWlHtT1EllXtdx5a2rSDkRapdpoAz8LDhVDmx3KR3gldALvacOkxqRb9Ocg3Q
KpBB0QrIpRFjOT9AQTMYVthK54ZNVuYeoopPIPErB7x69gChvws85CHSOA/gfFZf
qyI=
-----END CERTIFICATE-----
Generated at Thu May 1 11:57:01 2025 by rpki-client