Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xmuQsmvrwGmZ4Ly6DM7R9wnuO6Q.roa
File: xmuQsmvrwGmZ4Ly6DM7R9wnuO6Q.roa (raw, json)
Hash identifier: C5ovz/hTrXWb9Dm5yqjG0zq+gdJbhJksmJlRu/Xbtgg=
Subject key identifier: C6:6B:90:B2:6B:EB:C0:69:99:E0:BC:BA:0C:CE:D1:F7:09:EE:3B:A4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B8BF638339EAB66A1764AE612A53F896
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xmuQsmvrwGmZ4Ly6DM7R9wnuO6Q.roa
Signing time: Thu 03 Aug 2023 00:14:57 +0000
ROA not before: Thu 03 Aug 2023 00:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b8:bf:63:83:39:ea:b6:6a:17:64:ae:61:2a:53:f8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 00:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c66b90b26bebc06999e0bcba0cced1f709ee3ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:92:50:ad:c5:1f:63:90:37:1c:bb:c5:52:
2a:4c:40:39:88:99:11:d3:9a:6d:ad:16:49:96:36:
95:7e:8c:6a:e1:7b:89:71:28:a4:04:78:e1:79:1e:
9e:83:56:3f:0f:be:8d:fa:46:e6:5f:21:7c:f4:22:
f7:20:86:81:20:7a:93:23:93:c9:b6:09:30:6f:89:
fd:a1:7f:d9:33:32:d8:00:7b:3e:b1:2e:de:ae:4a:
ac:10:70:cf:5a:ed:dc:dc:11:fe:14:15:4b:67:89:
bc:36:db:9c:15:f2:9a:a5:ee:a6:99:e4:53:02:a5:
a7:a8:ee:d5:fe:80:55:fc:8b:d0:0c:47:7b:ad:47:
07:57:4c:e6:6d:16:52:28:6d:4f:fe:20:2e:6a:40:
b6:91:28:4f:02:ff:3b:46:04:e2:37:b1:85:84:48:
6f:ec:49:cc:0d:0b:67:7b:ec:7f:3b:a8:9c:ae:f9:
c5:1c:e5:fc:fa:a9:7f:81:32:11:61:fe:c5:27:9e:
09:72:2c:87:ca:11:b6:14:71:36:34:1d:7c:65:c1:
5f:19:6a:65:98:79:71:ca:e2:7a:42:0c:57:6d:7e:
9e:fb:d5:a3:0d:ba:f1:d4:ef:39:8b:50:7a:48:9c:
4e:ee:c1:d7:f0:c7:c4:53:20:a3:fa:e4:11:5e:e2:
24:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6B:90:B2:6B:EB:C0:69:99:E0:BC:BA:0C:CE:D1:F7:09:EE:3B:A4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xmuQsmvrwGmZ4Ly6DM7R9wnuO6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:44:31:58:14:00:c0:c3:c4:db:f6:2a:b6:4f:d1:27:14:71:
c4:b6:d1:3e:79:aa:c2:f4:41:41:dd:b8:48:72:a8:e1:4e:4e:
5b:6d:5a:85:01:f3:20:32:7a:c1:eb:56:87:70:59:36:de:6d:
06:f1:8c:b8:a3:df:54:29:ee:bf:f9:d9:e2:5f:47:e8:0f:1f:
62:94:55:e9:03:aa:f6:ef:10:b1:5a:0a:4d:93:a9:7e:36:b9:
53:d8:a6:fb:74:d3:cc:90:a8:b2:ae:68:00:f2:a3:38:d4:fb:
2f:7e:9a:0f:20:1d:bc:04:d8:10:bd:21:f1:49:df:a9:58:ea:
ac:52:06:2e:47:d4:7a:3e:30:9a:7c:b1:b5:18:6e:b1:28:96:
c0:06:70:27:39:af:ca:0e:f9:42:eb:9a:fb:c6:98:08:3a:69:
5e:e9:40:30:2b:3a:17:e0:07:e2:fb:c6:ce:df:53:9f:74:e5:
bc:f9:30:82:47:54:aa:88:39:e9:30:6a:2b:6b:85:58:fa:07:
f5:c1:ce:fd:e2:23:a8:89:7f:07:0c:4d:a7:cf:d2:85:f6:4f:
ea:3b:30:cd:2c:04:e8:3c:a0:e2:42:ac:1e:c2:c9:dc:35:1f:
15:e9:f7:a8:d3:2a:dc:81:5b:c3:28:25:0a:92:91:75:e1:e5:
a9:df:6a:56
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYm4v2ODOeq2ahdkrmEqU/iWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODAzMDAxNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjZiOTBiMjZiZWJjMDY5OTllMGJjYmEwY2NlZDFmNzA5ZWUzYmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLaSUK3FH2OQNxy7xVIqTEA5iJkR
05ptrRZJljaVfoxq4XuJcSikBHjheR6eg1Y/D76N+kbmXyF89CL3IIaBIHqTI5PJ
tgkwb4n9oX/ZMzLYAHs+sS7erkqsEHDPWu3c3BH+FBVLZ4m8NtucFfKape6mmeRT
AqWnqO7V/oBV/IvQDEd7rUcHV0zmbRZSKG1P/iAuakC2kShPAv87RgTiN7GFhEhv
7EnMDQtne+x/O6icrvnFHOX8+ql/gTIRYf7FJ54JciyHyhG2FHE2NB18ZcFfGWpl
mHlxyuJ6QgxXbX6e+9WjDbrx1O85i1B6SJxO7sHX8MfEUyCj+uQRXuIkUwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMZrkLJr68BpmeC8ugzO0fcJ7jukMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveG11UXNtdnJ3R21aNEx5NkRNN1I5d251TzZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFdEMVgUAMDDxNv2KrZP
0ScUccS20T55qsL0QUHduEhyqOFOTlttWoUB8yAyesHrVodwWTbebQbxjLij31Qp
7r/52eJfR+gPH2KUVekDqvbvELFaCk2TqX42uVPYpvt008yQqLKuaADyozjU+y9+
mg8gHbwE2BC9IfFJ36lY6qxSBi5H1Ho+MJp8sbUYbrEolsAGcCc5r8oO+ULrmvvG
mAg6aV7pQDArOhfgB+L7xs7fU5905bz5MIJHVKqIOekwaitrhVj6B/XBzv3iI6iJ
fwcMTafP0oX2T+o7MM0sBOg8oOJCrB7Cydw1HxXp96jTKtyBW8MoJQqSkXXh5anf
alY=
-----END CERTIFICATE-----
Generated at Sat May 3 16:54:24 2025 by rpki-client