Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w42D8lEYNrhfHqfc0JnEvDKPNQc.roa
File: w42D8lEYNrhfHqfc0JnEvDKPNQc.roa (raw, json)
Hash identifier: xGreAtK0njyFFOV6MDjFiLyUx9+yQbH1YIbDrvix6TE=
Subject key identifier: C3:8D:83:F2:51:18:36:B8:5F:1E:A7:DC:D0:99:C4:BC:32:8F:35:07
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851318D7FA3711AFAC5C31B3CA27D05446
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w42D8lEYNrhfHqfc0JnEvDKPNQc.roa
Signing time: Thu 15 Dec 2022 00:04:33 +0000
ROA not before: Thu 15 Dec 2022 00:04:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:1318:8612/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:13:18:d7:fa:37:11:af:ac:5c:31:b3:ca:27:d0:54:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 15 00:04:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c38d83f2511836b85f1ea7dcd099c4bc328f3507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b4:5c:bc:be:4e:46:03:7c:72:19:8c:7f:82:
b0:40:2e:0d:12:77:22:8f:01:86:c5:6f:ef:44:0d:
da:76:5f:1a:35:c4:b3:50:a4:54:d0:b6:db:f8:47:
f5:05:93:63:21:9d:57:1e:3d:17:c0:7d:be:31:d9:
e1:d5:36:b7:4e:ad:8d:69:d6:55:b6:12:19:10:3e:
d8:a3:8f:df:71:4b:48:2b:1c:30:51:f3:4f:fd:9e:
48:32:40:e4:b6:e6:42:a5:36:76:d6:38:c8:75:e8:
0c:e4:bd:61:44:5f:db:9f:1d:d3:14:fb:02:ac:cb:
09:ad:7c:e4:f5:aa:f8:26:a6:8e:62:1f:8e:e1:70:
4f:df:51:5f:44:d9:16:8a:cc:96:dd:cc:fc:ff:bd:
02:34:5a:16:0e:ca:bb:75:1a:b4:45:5b:76:12:cb:
2e:56:40:cd:64:86:c8:69:74:8b:de:72:6c:a9:c9:
c4:fe:89:98:d1:8d:7f:8c:4c:1a:f3:b3:0b:f6:b6:
3f:6e:a9:0b:1e:00:c8:49:29:6e:c5:94:93:fa:59:
a7:4b:20:d1:14:07:23:99:ca:5e:1a:14:9a:19:26:
05:fe:ba:66:98:f4:4f:2a:06:ce:20:0d:dc:26:88:
ae:57:aa:b5:bd:aa:77:5d:5b:80:44:83:ee:1c:0b:
63:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8D:83:F2:51:18:36:B8:5F:1E:A7:DC:D0:99:C4:BC:32:8F:35:07
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w42D8lEYNrhfHqfc0JnEvDKPNQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:90:c6:c5:74:45:71:94:a0:3d:81:e5:b7:d6:f2:84:db:76:
83:99:12:83:c0:82:a5:0a:9a:79:f0:4b:a7:8f:2a:13:36:5b:
1d:87:18:76:39:28:b3:b7:32:71:6b:28:30:06:6a:e2:8c:49:
f4:96:31:26:71:05:37:c8:a4:56:30:45:d7:a1:bf:ba:68:c1:
f2:f5:f7:dc:86:db:57:5e:bb:fa:7e:d6:64:58:5e:d1:10:c8:
69:c0:da:8c:1c:a3:78:e9:cb:dc:b0:45:de:38:9f:18:5a:d0:
66:2d:58:07:ef:5f:cc:e6:ac:5d:ca:f8:ed:d4:63:9c:72:21:
96:4d:80:b7:f3:ca:22:7e:62:20:8a:5e:28:72:04:22:19:24:
0a:b5:6c:df:70:81:94:3b:93:28:22:2b:a9:b3:1a:bc:a1:fa:
fe:d1:c0:73:0e:3d:64:e1:83:de:d9:66:75:5a:79:de:c4:b2:
91:26:a8:00:4e:5f:99:a7:f0:70:57:a7:fe:3e:30:d6:69:87:
82:3a:e2:38:86:94:6d:67:79:7f:44:fa:87:7d:59:ac:c9:93:
09:64:eb:aa:e5:cc:97:87:6b:c0:cf:04:01:aa:4b:ee:fc:19:
ee:af:43:00:b1:1f:74:e4:d9:33:37:c3:6a:0a:78:71:12:89:
1a:6d:de:e3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUTGNf6NxGvrFwxs8on0FRGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjE1MDAwNDMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzhkODNmMjUxMTgzNmI4NWYxZWE3ZGNkMDk5YzRiYzMyOGYzNTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrRcvL5ORgN8chmMf4KwQC4NEnci
jwGGxW/vRA3adl8aNcSzUKRU0Lbb+Ef1BZNjIZ1XHj0XwH2+Mdnh1Ta3Tq2NadZV
thIZED7Yo4/fcUtIKxwwUfNP/Z5IMkDktuZCpTZ21jjIdegM5L1hRF/bnx3TFPsC
rMsJrXzk9ar4JqaOYh+O4XBP31FfRNkWisyW3cz8/70CNFoWDsq7dRq0RVt2Essu
VkDNZIbIaXSL3nJsqcnE/omY0Y1/jEwa87ML9rY/bqkLHgDISSluxZST+lmnSyDR
FAcjmcpeGhSaGSYF/rpmmPRPKgbOIA3cJoiuV6q1vap3XVuARIPuHAtjwwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMONg/JRGDa4Xx6n3NCZxLwyjzUHMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdzQyRDhsRVlOcmhmSHFmYzBKbkV2REtQTlFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIGQxsV0RXGUoD2B5bfW
8oTbdoOZEoPAgqUKmnnwS6ePKhM2Wx2HGHY5KLO3MnFrKDAGauKMSfSWMSZxBTfI
pFYwRdehv7powfL199yG21deu/p+1mRYXtEQyGnA2owco3jpy9ywRd44nxha0GYt
WAfvX8zmrF3K+O3UY5xyIZZNgLfzyiJ+YiCKXihyBCIZJAq1bN9wgZQ7kygiK6mz
Gryh+v7RwHMOPWThg97ZZnVaed7EspEmqABOX5mn8HBXp/4+MNZph4I64jiGlG1n
eX9E+od9WazJkwlk66rlzJeHa8DPBAGqS+78Ge6vQwCxH3Tk2TM3w2oKeHESiRpt
3uM=
-----END CERTIFICATE-----
Generated at Fri May 2 05:45:25 2025 by rpki-client