Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y9-LDp33lzK3WWv5pj4ZsqCBtQk.roa
File: y9-LDp33lzK3WWv5pj4ZsqCBtQk.roa (raw, json)
Hash identifier: Hf2J6yRpY6REhIyUgHnFBG7coOztxQFd9Zol/HWvkCQ=
Subject key identifier: CB:DF:8B:0E:9D:F7:97:32:B7:59:6B:F9:A6:3E:19:B2:A0:81:B5:09
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018245967062297E9DEA9306A2F227CEE992
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y9-LDp33lzK3WWv5pj4ZsqCBtQk.roa
Signing time: Thu 28 Jul 2022 16:14:23 +0000
ROA not before: Thu 28 Jul 2022 16:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:45:96:70:62:29:7e:9d:ea:93:06:a2:f2:27:ce:e9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 16:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbdf8b0e9df79732b7596bf9a63e19b2a081b509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8e:81:36:82:a9:eb:5e:80:92:a2:0f:8b:2d:
df:cd:97:f7:5b:14:de:d0:eb:81:e1:f2:79:d6:43:
d0:56:82:d4:73:92:db:80:01:ff:a6:d0:01:4a:6a:
51:84:27:30:3b:d7:14:3d:f3:44:0f:d6:06:98:d0:
23:0b:f7:e7:ec:97:3b:26:8b:fd:6e:dd:78:b5:37:
ad:63:e5:00:d9:c4:a9:5f:2c:4c:e2:bb:7a:10:62:
b1:4b:76:16:cb:1b:3b:51:f8:39:a9:ef:9b:c7:31:
84:47:2c:20:99:a7:99:af:b7:fb:19:15:ec:8f:da:
4d:a6:78:c8:09:78:e8:f4:4d:3d:9f:bc:85:89:35:
a6:d6:01:0d:de:c3:f7:cc:bc:8c:92:e3:10:6f:a9:
c0:c7:54:08:40:30:23:92:16:eb:fc:62:ca:73:3e:
3c:90:f1:ed:af:87:56:27:88:77:c9:4c:05:c8:b0:
66:e3:74:8e:39:b8:bb:a0:75:bd:a5:2e:b0:60:e6:
e6:40:7a:6e:cf:7e:c0:5e:0e:82:01:ac:c3:82:89:
70:2c:28:14:05:18:74:57:12:d6:bc:4e:d0:b8:3e:
9f:51:a1:80:a3:6e:e7:25:3b:cd:a7:6f:15:97:f9:
ff:e0:4b:26:47:a7:2d:57:b5:b4:5f:bf:e5:dc:a0:
c3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DF:8B:0E:9D:F7:97:32:B7:59:6B:F9:A6:3E:19:B2:A0:81:B5:09
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y9-LDp33lzK3WWv5pj4ZsqCBtQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:c7:55:27:04:ee:34:1b:ec:72:e1:42:26:16:71:a9:5c:d8:
a9:ee:a2:45:79:52:1c:77:d3:c2:0f:63:5e:f9:27:27:b7:97:
a1:66:c8:50:5d:9a:82:9f:53:84:b4:27:41:47:df:3c:ad:59:
6d:b9:cf:5d:96:c8:c2:2d:ee:eb:2d:67:07:db:2d:cd:e7:eb:
38:98:92:03:b5:9f:d1:bb:4b:2f:a2:32:5b:eb:91:e4:c0:64:
11:f6:ad:64:dc:4d:33:b7:4b:b2:bb:c9:82:9f:d1:a3:cf:9e:
2a:07:b8:95:9e:c3:c1:b3:35:0e:41:7b:2c:17:56:b4:b8:4c:
0f:00:fe:ca:6d:e6:e9:6f:7f:4d:36:7e:55:49:7f:ba:4d:0c:
d7:12:20:ae:4c:aa:7c:eb:36:a1:b7:ce:0d:72:77:5e:59:12:
9d:0c:d1:fe:0d:37:81:f4:cb:a3:ef:45:81:81:a3:95:78:bb:
c3:cd:80:d5:9e:ea:6b:57:09:e1:99:c2:18:ae:56:bf:6d:a4:
dc:6f:f7:7e:ee:b8:2b:99:14:16:29:03:0f:2d:7f:aa:80:af:
c4:c9:a0:7c:9f:1f:53:9d:8e:b9:4e:be:2b:8d:f6:f4:37:2f:
21:e9:69:f6:56:70:38:40:9a:e5:52:47:d0:6b:65:dc:3c:21:
a6:bd:b5:83
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYJFlnBiKX6d6pMGovInzumSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzI4MTYxNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmRmOGIwZTlkZjc5NzMyYjc1OTZiZjlhNjNlMTliMmEwODFiNTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY6BNoKp616AkqIPiy3fzZf3WxTe
0OuB4fJ51kPQVoLUc5LbgAH/ptABSmpRhCcwO9cUPfNED9YGmNAjC/fn7Jc7Jov9
bt14tTetY+UA2cSpXyxM4rt6EGKxS3YWyxs7Ufg5qe+bxzGERywgmaeZr7f7GRXs
j9pNpnjICXjo9E09n7yFiTWm1gEN3sP3zLyMkuMQb6nAx1QIQDAjkhbr/GLKcz48
kPHtr4dWJ4h3yUwFyLBm43SOObi7oHW9pS6wYObmQHpuz37AXg6CAazDgolwLCgU
BRh0VxLWvE7QuD6fUaGAo27nJTvNp28Vl/n/4EsmR6ctV7W0X7/l3KDDuQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMvfiw6d95cyt1lr+aY+GbKggbUJMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveTktTERwMzNsekszV1d2NXBqNFpzcUNCdFFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA7HVScE7jQb7HLhQiYW
calc2KnuokV5Uhx308IPY175Jye3l6FmyFBdmoKfU4S0J0FH3zytWW25z12WyMIt
7ustZwfbLc3n6ziYkgO1n9G7Sy+iMlvrkeTAZBH2rWTcTTO3S7K7yYKf0aPPnioH
uJWew8GzNQ5BeywXVrS4TA8A/spt5ulvf002flVJf7pNDNcSIK5MqnzrNqG3zg1y
d15ZEp0M0f4NN4H0y6PvRYGBo5V4u8PNgNWe6mtXCeGZwhiuVr9tpNxv937uuCuZ
FBYpAw8tf6qAr8TJoHyfH1OdjrlOviuN9vQ3LyHpafZWcDhAmuVSR9BrZdw8Iaa9
tYM=
-----END CERTIFICATE-----
Generated at Thu May 1 11:15:27 2025 by rpki-client