Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4PkjDs5o_459KKD8R_26jeKOWtg.roa
File: 4PkjDs5o_459KKD8R_26jeKOWtg.roa (raw, json)
Hash identifier: 9MO7A8cxeUf94oSO8BcSCZQraX1JqH4LqPxuVim3rHY=
Subject key identifier: E0:F9:23:0E:CE:68:FF:8E:7D:28:A0:FC:47:FD:BA:8D:E2:8E:5A:D8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01883A5B0A9478A5C7C60A13C95FF08E514C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4PkjDs5o_459KKD8R_26jeKOWtg.roa
Signing time: Sat 20 May 2023 18:10:24 +0000
ROA not before: Sat 20 May 2023 18:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3a:5b:0a:94:78:a5:c7:c6:0a:13:c9:5f:f0:8e:51:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 20 18:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0f9230ece68ff8e7d28a0fc47fdba8de28e5ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:f2:6c:b2:5c:5d:9f:97:9b:9b:f0:d6:d3:
52:98:3c:ba:46:55:68:4c:ef:f7:d3:01:75:d4:1b:
24:19:87:b2:15:2a:61:4d:0c:f4:8c:e1:4c:e2:a4:
f3:c0:63:03:c5:81:14:c4:60:37:59:54:95:63:e2:
74:3a:84:3f:f7:bd:2f:b7:b2:66:ab:7b:69:e5:3e:
59:17:81:5e:aa:47:de:49:cb:ec:db:f6:83:55:f2:
b8:4d:b8:a8:ba:60:bf:12:4d:37:9a:18:cb:fb:ba:
f2:ba:17:e0:6b:60:04:ea:08:9b:6b:7f:e6:00:1e:
dc:d0:f0:e0:5a:e7:a1:01:dc:45:cb:99:70:57:73:
33:48:f5:e3:89:d5:f9:4c:af:00:dc:ff:ac:19:32:
aa:97:cf:5e:66:07:2e:52:35:87:76:b0:00:e8:0d:
0e:e7:3c:68:2b:2c:49:ad:d0:72:7a:ad:67:fb:17:
65:1b:be:ba:3a:48:ee:ec:d4:a3:23:f7:8b:76:4d:
04:a6:3b:54:ea:a0:0f:5f:6f:f8:0a:99:98:77:04:
50:71:a9:75:88:79:cd:d9:fe:4c:00:a7:9a:70:c1:
82:b9:bf:3a:bf:81:63:fe:0d:3f:c3:84:5a:7a:3f:
df:25:ec:fd:e6:29:23:b0:07:e9:c5:ff:6b:63:94:
80:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F9:23:0E:CE:68:FF:8E:7D:28:A0:FC:47:FD:BA:8D:E2:8E:5A:D8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4PkjDs5o_459KKD8R_26jeKOWtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:8e:b0:33:18:c2:01:dd:eb:71:5d:c5:14:30:d8:df:b4:8c:
df:be:64:d7:1f:4e:a7:16:84:7e:5d:52:3a:64:b8:1d:d3:e0:
fc:55:a4:06:9d:3e:39:81:0c:6a:1b:76:1e:05:e0:0e:90:f0:
96:d7:61:d7:9c:8c:e5:11:ff:0e:49:0a:99:61:2d:a9:23:c4:
e5:f3:8c:2f:05:88:8b:04:3a:01:56:05:44:84:94:33:76:29:
f5:6f:ed:c0:e3:e6:cc:7f:05:4a:70:e2:9a:36:42:2c:1a:92:
bf:26:79:13:a7:0e:e3:4a:25:9b:77:98:76:03:15:73:10:43:
70:69:e9:0e:ad:36:ca:b0:c4:6e:1d:20:4e:18:00:88:06:a2:
3b:33:7d:12:15:5a:b0:19:d8:2e:43:ab:14:97:22:06:94:23:
94:27:4d:4b:f1:48:cc:10:cf:4c:7f:20:51:96:86:96:47:f0:
d7:e3:86:5d:0e:c3:a1:7d:2e:77:e2:71:45:9b:f2:b7:79:df:
b8:01:9e:26:2d:88:f0:7a:7c:7f:da:d5:b6:24:1f:61:5d:a4:
99:3f:0a:1b:75:a3:13:43:b2:cc:e6:a9:2d:3f:96:e5:91:cf:
4a:a9:fa:88:4d:32:04:e1:d4:9f:30:b7:b3:38:76:20:d7:97:
52:52:5c:9d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYg6WwqUeKXHxgoTyV/wjlFMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTIwMTgxMDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGY5MjMwZWNlNjhmZjhlN2QyOGEwZmM0N2ZkYmE4ZGUyOGU1YWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlDybLJcXZ+Xm5vw1tNSmDy6RlVo
TO/30wF11BskGYeyFSphTQz0jOFM4qTzwGMDxYEUxGA3WVSVY+J0OoQ/970vt7Jm
q3tp5T5ZF4FeqkfeScvs2/aDVfK4TbioumC/Ek03mhjL+7ryuhfga2AE6giba3/m
AB7c0PDgWuehAdxFy5lwV3MzSPXjidX5TK8A3P+sGTKql89eZgcuUjWHdrAA6A0O
5zxoKyxJrdByeq1n+xdlG766Okju7NSjI/eLdk0EpjtU6qAPX2/4CpmYdwRQcal1
iHnN2f5MAKeacMGCub86v4Fj/g0/w4Raej/fJez95ikjsAfpxf9rY5SAIwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOD5Iw7OaP+OfSig/Ef9uo3ijlrYMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNFBrakRzNW9fNDU5S0tEOFJfMjZqZUtPV3RnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKuOsDMYwgHd63FdxRQw
2N+0jN++ZNcfTqcWhH5dUjpkuB3T4PxVpAadPjmBDGobdh4F4A6Q8JbXYdecjOUR
/w5JCplhLakjxOXzjC8FiIsEOgFWBUSElDN2KfVv7cDj5sx/BUpw4po2Qiwakr8m
eROnDuNKJZt3mHYDFXMQQ3Bp6Q6tNsqwxG4dIE4YAIgGojszfRIVWrAZ2C5DqxSX
IgaUI5QnTUvxSMwQz0x/IFGWhpZH8Nfjhl0Ow6F9LnficUWb8rd537gBniYtiPB6
fH/a1bYkH2FdpJk/Cht1oxNDsszmqS0/luWRz0qp+ohNMgTh1J8wt7M4diDXl1JS
XJ0=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:21:54 2025 by rpki-client