Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yRLV6nmPpXzx_rapt5u1vIA5qC8.roa
File: yRLV6nmPpXzx_rapt5u1vIA5qC8.roa (raw, json)
Hash identifier: xKFekW5aZiUWi6IAaeuHnZZgwgt0eSXxmeZx7+DlBKY=
Subject key identifier: C9:12:D5:EA:79:8F:A5:7C:F1:FE:B6:A9:B7:9B:B5:BC:80:39:A8:2F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1E08FFA86C3075DE153FB17121CBF483
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yRLV6nmPpXzx_rapt5u1vIA5qC8.roa
Signing time: Tue 22 Aug 2023 16:17:00 +0000
ROA not before: Tue 22 Aug 2023 16:17:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1e:08:ff:a8:6c:30:75:de:15:3f:b1:71:21:cb:f4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 22 16:17:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c912d5ea798fa57cf1feb6a9b79bb5bc8039a82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:54:34:e1:47:42:41:ad:6f:0b:14:a2:fb:af:
4b:73:4a:81:ca:18:7c:f2:d2:15:f7:67:b0:c8:06:
e4:97:5c:65:a4:2a:8f:ec:f2:2f:85:f8:63:5d:9d:
43:35:a3:6c:ca:81:bd:77:be:91:40:20:1b:1c:79:
1b:c0:30:24:72:41:77:9b:02:04:db:a0:c8:dd:d5:
2a:33:bd:7b:f7:1e:e3:89:61:9e:4f:ce:f6:07:51:
5e:b6:84:59:57:e9:ea:64:bd:84:4e:48:1d:cb:18:
53:9c:b8:2b:1d:3e:3e:ce:e8:5b:e0:34:d6:0b:4d:
38:73:e2:b3:46:a1:17:7a:44:8c:28:50:af:2b:2d:
49:f2:6b:b4:95:50:60:79:94:08:67:b8:17:b4:48:
89:80:85:8f:50:eb:a9:cd:da:c1:7e:1c:c6:31:ad:
58:1b:a1:29:45:f9:7a:16:93:93:31:5d:cc:52:36:
35:62:5b:31:de:b2:b1:67:17:f5:00:d8:24:d0:8b:
49:2a:b5:66:d7:12:8c:cb:c9:99:b4:9c:a9:2f:c0:
4d:a5:4c:d8:d3:a1:21:64:d5:67:7f:95:10:b8:35:
16:79:d4:f9:31:74:6a:b8:5f:75:19:94:a3:c8:98:
6f:0a:e4:73:fb:5d:b2:26:c2:2c:3e:61:43:84:37:
2b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:12:D5:EA:79:8F:A5:7C:F1:FE:B6:A9:B7:9B:B5:BC:80:39:A8:2F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yRLV6nmPpXzx_rapt5u1vIA5qC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:12:bd:ac:7d:e3:92:52:f7:2f:31:3c:7c:01:e4:a1:d1:da:
36:c9:37:dc:d4:36:6c:15:2d:ea:67:4e:ed:31:1f:5a:94:e6:
9c:1b:f0:02:aa:f8:78:4a:44:e6:c2:9a:00:93:e3:a1:ae:b2:
2c:cf:b5:69:2a:ec:c2:62:02:5a:e1:2e:19:e8:f2:26:8c:9d:
3e:8b:ca:92:e0:dc:7b:11:fb:c2:a5:db:9c:f9:df:53:83:5b:
2d:b5:37:d4:9c:7a:5e:0a:9d:28:c7:95:65:03:2f:b4:d3:1d:
cc:d1:26:12:08:cb:1a:13:53:15:37:7a:d7:e6:f4:f5:81:7f:
bc:14:74:22:b9:5e:8f:4e:42:14:e7:a0:ac:2f:d1:50:9e:2a:
ba:5b:f0:56:44:b0:4d:c9:ef:5c:ce:aa:7d:98:29:1e:de:7c:
d2:cf:5c:0e:7e:5e:a9:b6:c3:11:61:5f:40:a2:8f:84:d5:95:
92:3b:2e:cf:1e:db:fa:6e:dc:53:90:33:36:79:74:df:10:8c:
79:68:90:8c:f8:b3:34:ee:43:b7:cc:0f:bb:69:33:b4:d5:cf:
9d:9c:0d:7d:3f:db:30:18:3b:83:f4:e9:a7:fc:13:d9:58:c0:
21:65:93:7f:3b:ab:60:f1:b7:80:c5:e4:57:56:95:a1:40:93:
c7:27:7e:a0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoeCP+obDB13hU/sXEhy/SDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODIyMTYxNzAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTEyZDVlYTc5OGZhNTdjZjFmZWI2YTliNzliYjViYzgwMzlhODJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFQ04UdCQa1vCxSi+69Lc0qByhh8
8tIV92ewyAbkl1xlpCqP7PIvhfhjXZ1DNaNsyoG9d76RQCAbHHkbwDAkckF3mwIE
26DI3dUqM7179x7jiWGeT872B1FetoRZV+nqZL2ETkgdyxhTnLgrHT4+zuhb4DTW
C004c+KzRqEXekSMKFCvKy1J8mu0lVBgeZQIZ7gXtEiJgIWPUOupzdrBfhzGMa1Y
G6EpRfl6FpOTMV3MUjY1Ylsx3rKxZxf1ANgk0ItJKrVm1xKMy8mZtJypL8BNpUzY
06EhZNVnf5UQuDUWedT5MXRquF91GZSjyJhvCuRz+12yJsIsPmFDhDcrLwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMkS1ep5j6V88f62qbebtbyAOagvMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveVJMVjZubVBwWHp4X3JhcHQ1dTF2SUE1cUM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABwSvax945JS9y8xPHwB
5KHR2jbJN9zUNmwVLepnTu0xH1qU5pwb8AKq+HhKRObCmgCT46GusizPtWkq7MJi
AlrhLhno8iaMnT6LypLg3HsR+8Kl25z531ODWy21N9Scel4KnSjHlWUDL7TTHczR
JhIIyxoTUxU3etfm9PWBf7wUdCK5Xo9OQhTnoKwv0VCeKrpb8FZEsE3J71zOqn2Y
KR7efNLPXA5+Xqm2wxFhX0Cij4TVlZI7Ls8e2/pu3FOQMzZ5dN8QjHlokIz4szTu
Q7fMD7tpM7TVz52cDX0/2zAYO4P06af8E9lYwCFlk387q2Dxt4DF5FdWlaFAk8cn
fqA=
-----END CERTIFICATE-----
Generated at Thu May 1 00:47:19 2025 by rpki-client