Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xF0rHXsyLXd9JK-tC3GrI2AI5LA.roa
File: xF0rHXsyLXd9JK-tC3GrI2AI5LA.roa (raw, json)
Hash identifier: FrxVA7ia/OTynGQ5/oE0DyfrbrSiDBEviYhO9uu+Ty0=
Subject key identifier: C4:5D:2B:1D:7B:32:2D:77:7D:24:AF:AD:0B:71:AB:23:60:08:E4:B0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D577168D74B5AD755FF896C0367F69E4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xF0rHXsyLXd9JK-tC3GrI2AI5LA.roa
Signing time: Tue 08 Aug 2023 14:04:58 +0000
ROA not before: Tue 08 Aug 2023 14:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:189:d576:6492/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:77:16:8d:74:b5:ad:75:5f:f8:96:c0:36:7f:69:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 14:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c45d2b1d7b322d777d24afad0b71ab236008e4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:98:10:0d:b2:93:a9:40:88:9e:a4:39:ab:01:
bc:b6:e2:a7:ed:38:b1:41:35:7d:fe:b7:4b:b7:e9:
5e:fd:0b:51:19:52:96:f2:2c:62:1e:a8:c9:92:85:
5f:75:b1:10:f5:02:05:29:14:85:81:c2:ec:5b:9f:
2e:7b:9f:aa:8a:2d:98:57:f3:5c:d9:84:9b:a3:13:
0a:77:3f:f0:0c:ac:9e:4f:7b:75:50:6a:c3:01:62:
f9:f3:14:d3:ae:6c:a0:86:c2:8b:ab:db:5a:5d:17:
52:d4:62:73:78:ef:36:7a:0f:9d:d2:eb:e2:fc:56:
5a:34:3e:44:26:79:a2:cb:f2:11:c4:11:67:04:b9:
bb:da:67:af:18:65:9a:a0:7d:2c:c8:af:fd:3b:ad:
8a:03:89:60:e4:f0:96:53:eb:a6:77:4d:2f:21:5f:
cd:b5:a3:b5:08:7f:b5:c1:2b:f7:04:e1:a2:35:e9:
bd:11:59:ea:c1:1e:65:83:1a:10:51:15:59:aa:01:
ce:98:e6:bc:6e:f2:f2:61:bd:77:e3:b1:5c:b3:21:
ed:11:2b:76:e8:24:0a:95:81:8a:8f:10:02:0c:72:
ef:0c:7e:b6:8a:cf:fd:91:de:71:14:d7:19:d6:ec:
69:9c:47:2d:16:57:24:ff:11:c1:92:47:95:5a:6b:
08:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5D:2B:1D:7B:32:2D:77:7D:24:AF:AD:0B:71:AB:23:60:08:E4:B0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xF0rHXsyLXd9JK-tC3GrI2AI5LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:fb:96:81:73:cf:fa:66:7c:41:88:c6:e1:c2:37:82:8e:ab:
9f:f1:9f:b8:68:6b:15:ba:e4:5d:97:2d:8b:17:a0:3b:9c:ea:
5f:a2:ca:86:3b:13:b8:3c:a9:bb:29:c8:85:fd:18:9f:92:54:
60:d0:e9:a8:91:be:03:e2:a1:13:82:18:51:0d:88:8a:db:47:
34:43:42:33:59:d1:a8:ff:01:48:a7:ee:38:6d:ad:2f:ec:53:
19:0c:e9:b8:9a:a8:f9:c6:01:d6:16:1f:58:2d:11:4d:c8:b1:
d1:42:c9:db:79:fb:e9:26:56:57:21:aa:67:88:a9:2b:f5:08:
f1:1f:29:8b:67:3c:be:fd:3e:22:17:80:c9:b2:7e:56:bf:9a:
40:38:6b:81:74:40:62:52:6e:98:62:e3:39:a0:d2:3b:45:ba:
c1:d4:f8:a4:0d:99:04:5a:98:21:8b:5b:d8:e4:9c:21:1e:4b:
e8:3b:db:fc:a1:31:9e:c2:20:c3:68:48:0d:30:ae:66:19:f4:
6a:e6:7e:ce:c7:5c:80:78:75:7c:fc:fa:04:4f:db:68:50:72:
a0:67:8b:ff:c8:c4:da:4a:c3:49:3b:4f:87:07:0c:45:bc:51:
10:af:8e:d8:45:c4:e3:25:5a:ff:18:20:69:27:2c:14:ec:97:
17:af:81:98
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnVdxaNdLWtdV/4lsA2f2nkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODA4MTQwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDVkMmIxZDdiMzIyZDc3N2QyNGFmYWQwYjcxYWIyMzYwMDhlNGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5gQDbKTqUCInqQ5qwG8tuKn7Tix
QTV9/rdLt+le/QtRGVKW8ixiHqjJkoVfdbEQ9QIFKRSFgcLsW58ue5+qii2YV/Nc
2YSboxMKdz/wDKyeT3t1UGrDAWL58xTTrmyghsKLq9taXRdS1GJzeO82eg+d0uvi
/FZaND5EJnmiy/IRxBFnBLm72mevGGWaoH0syK/9O62KA4lg5PCWU+umd00vIV/N
taO1CH+1wSv3BOGiNem9EVnqwR5lgxoQURVZqgHOmOa8bvLyYb1347FcsyHtESt2
6CQKlYGKjxACDHLvDH62is/9kd5xFNcZ1uxpnEctFlck/xHBkkeVWmsIiQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMRdKx17Mi13fSSvrQtxqyNgCOSwMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveEYwckhYc3lMWGQ5SkstdEMzR3JJMkFJNUxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADv7loFzz/pmfEGIxuHC
N4KOq5/xn7hoaxW65F2XLYsXoDuc6l+iyoY7E7g8qbspyIX9GJ+SVGDQ6aiRvgPi
oROCGFENiIrbRzRDQjNZ0aj/AUin7jhtrS/sUxkM6biaqPnGAdYWH1gtEU3IsdFC
ydt5++kmVlchqmeIqSv1CPEfKYtnPL79PiIXgMmyfla/mkA4a4F0QGJSbphi4zmg
0jtFusHU+KQNmQRamCGLW9jknCEeS+g72/yhMZ7CIMNoSA0wrmYZ9Grmfs7HXIB4
dXz8+gRP22hQcqBni//IxNpKw0k7T4cHDEW8URCvjthFxOMlWv8YIGknLBTslxev
gZg=
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:01:31 2025 by rpki-client