Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-purmfBb1b2sAn93oz-8hpZ4ZsY.roa
File: 1-purmfBb1b2sAn93oz-8hpZ4ZsY.roa (raw, json)
Hash identifier: wtg57U6v6f11FDF5BPRFCYKYsFoWKFMA+SL/bnFlJek=
Subject key identifier: FA:9B:AB:99:F0:5B:D5:BD:AC:02:7F:77:A3:3F:BC:86:96:78:66:C6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D436A60212683087DAE83B7CE23B80B8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-purmfBb1b2sAn93oz-8hpZ4ZsY.roa
Signing time: Tue 08 Aug 2023 08:14:58 +0000
ROA not before: Tue 08 Aug 2023 08:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:36:a6:02:12:68:30:87:da:e8:3b:7c:e2:3b:80:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 08:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa9bab99f05bd5bdac027f77a33fbc86967866c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:50:7c:51:71:2f:24:72:1b:c2:52:cc:42:23:
60:3a:d7:ce:79:b0:50:9e:84:52:b9:c3:42:3b:6d:
a0:8c:47:c1:c4:2c:09:71:21:27:ad:17:77:08:de:
4c:d3:0a:0d:aa:64:8f:11:06:28:ae:ba:ce:cd:45:
81:d2:22:c5:6d:b0:a8:41:18:78:75:b9:4c:70:9c:
f1:55:c0:4e:57:9d:b1:1a:cc:ce:ba:2a:e4:e8:42:
6a:b4:72:b2:4c:21:e0:9f:bf:29:ba:26:a8:5d:ef:
23:64:23:69:28:f7:ae:61:1f:a5:a9:b3:7c:27:be:
71:9f:3c:12:55:c6:ce:55:bd:1a:52:fc:a5:54:8e:
d7:66:bd:9f:5e:7c:8e:1d:87:de:da:34:78:9f:45:
2f:6a:14:f6:cc:ee:c3:a5:03:3d:bd:46:df:23:95:
ac:9e:e0:96:fd:74:ea:1e:25:74:53:9a:12:58:b3:
95:da:be:87:58:db:4c:4a:26:d4:d1:61:26:09:8d:
df:44:4c:d3:9b:6f:ac:db:12:1e:55:78:8c:01:9d:
7c:26:92:51:9f:a4:56:a3:1f:9a:31:fa:d1:de:1b:
45:2b:af:a0:79:51:12:12:26:96:d9:c8:49:c2:bb:
ac:7c:2f:e5:4b:da:cb:72:a1:4e:d2:df:6b:06:67:
b1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9B:AB:99:F0:5B:D5:BD:AC:02:7F:77:A3:3F:BC:86:96:78:66:C6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-purmfBb1b2sAn93oz-8hpZ4ZsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:03:5f:ce:0a:9b:fc:41:c2:3d:7b:b8:a4:07:c6:78:09:0a:
ab:6f:3e:89:0d:b6:64:b1:7d:b9:62:8c:5e:f8:20:9c:e9:fc:
27:56:9c:d1:31:90:7d:fa:38:eb:0e:eb:15:d8:de:aa:70:70:
b9:9f:bf:c3:41:f2:c9:c2:3f:70:00:a0:ae:fb:3f:ac:9c:1c:
36:06:b1:94:c9:88:d9:b2:9d:25:15:97:5f:d6:c2:27:42:b3:
ac:99:8d:de:c6:21:71:70:55:c0:08:92:42:bf:3b:9b:a5:56:
74:be:41:4b:da:57:15:76:c3:01:55:47:8d:9d:98:d9:0a:ad:
0f:1b:dd:68:ae:40:7f:8b:71:b5:28:13:e9:d5:5e:dc:5b:05:
49:e8:21:5f:9c:13:32:51:0a:f9:ec:b3:34:e5:f0:15:b2:8b:
c4:3d:82:91:39:34:f3:46:e0:f3:c4:52:a2:0f:02:a0:d2:e7:
4a:49:9f:db:5f:af:51:82:dd:ef:99:2f:50:53:a5:8c:df:87:
f6:c4:ad:b7:bc:17:d2:5b:0e:b2:3f:31:a2:bc:6c:1c:13:4f:
37:1a:d3:e5:b9:33:bd:d1:ec:a2:c8:df:d3:18:41:67:16:b5:
68:7f:85:b6:8d:a9:e4:1f:a7:ab:e0:ed:be:7d:2d:38:1b:1a:
46:0a:67:2f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYnUNqYCEmgwh9roO3ziO4C4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODA4MDgxNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTliYWI5OWYwNWJkNWJkYWMwMjdmNzdhMzNmYmM4Njk2Nzg2NmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1B8UXEvJHIbwlLMQiNgOtfOebBQ
noRSucNCO22gjEfBxCwJcSEnrRd3CN5M0woNqmSPEQYorrrOzUWB0iLFbbCoQRh4
dblMcJzxVcBOV52xGszOuirk6EJqtHKyTCHgn78puiaoXe8jZCNpKPeuYR+lqbN8
J75xnzwSVcbOVb0aUvylVI7XZr2fXnyOHYfe2jR4n0UvahT2zO7DpQM9vUbfI5Ws
nuCW/XTqHiV0U5oSWLOV2r6HWNtMSibU0WEmCY3fREzTm2+s2xIeVXiMAZ18JpJR
n6RWox+aMfrR3htFK6+geVESEiaW2chJwrusfC/lS9rLcqFO0t9rBmexcQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPqbq5nwW9W9rAJ/d6M/vIaWeGbGMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMS1wdXJtZkJiMWIyc0FuOTNvei04aHBaNFpzWS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFh
Ni8xL2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQATA1/OCpv8QcI9e7ik
B8Z4CQqrbz6JDbZksX25Yoxe+CCc6fwnVpzRMZB9+jjrDusV2N6qcHC5n7/DQfLJ
wj9wAKCu+z+snBw2BrGUyYjZsp0lFZdf1sInQrOsmY3exiFxcFXACJJCvzubpVZ0
vkFL2lcVdsMBVUeNnZjZCq0PG91orkB/i3G1KBPp1V7cWwVJ6CFfnBMyUQr57LM0
5fAVsovEPYKROTTzRuDzxFKiDwKg0udKSZ/bX69Rgt3vmS9QU6WM34f2xK23vBfS
Ww6yPzGivGwcE083GtPluTO90eyiyN/TGEFnFrVof4W2jankH6er4O2+fS04GxpG
Cmcv
-----END CERTIFICATE-----
Generated at Tue Jun 10 22:59:25 2025 by rpki-client