Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4RtlRGd0QF0E6YInujPfZGyuXqQ.roa
File: 4RtlRGd0QF0E6YInujPfZGyuXqQ.roa (raw, json)
Hash identifier: 6RUTHJac2h7yjj/6ynjG99OqqJ/cbxNp5Xwr9sknT+8=
Subject key identifier: E1:1B:65:44:67:74:40:5D:04:E9:82:27:BA:33:DF:64:6C:AE:5E:A4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018335EB372E7416E94C501975191D690778
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4RtlRGd0QF0E6YInujPfZGyuXqQ.roa
Signing time: Tue 13 Sep 2022 08:15:51 +0000
ROA not before: Tue 13 Sep 2022 08:15:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:35:eb:37:2e:74:16:e9:4c:50:19:75:19:1d:69:07:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 13 08:15:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e11b65446774405d04e98227ba33df646cae5ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6e:04:30:0f:57:67:5d:32:9c:b9:60:05:8a:
05:52:0f:92:0d:a4:d8:a7:3e:84:ab:6f:02:9b:2d:
0a:ca:22:a6:44:84:d5:b6:61:a2:ae:1b:83:61:45:
79:1f:7e:3c:28:ed:a3:35:53:77:bd:d9:7c:20:0f:
41:81:eb:f4:61:79:de:56:66:25:02:83:80:af:12:
7c:5e:a9:32:c9:44:f4:a2:4e:63:ba:3f:6a:05:93:
5d:3d:ea:6c:7d:5d:00:6b:46:a7:e4:0c:fb:a1:ff:
30:72:c1:49:c3:98:25:02:01:f1:af:35:7d:5a:ce:
27:20:a2:c0:32:f9:36:06:b0:17:03:b0:7a:cc:f4:
78:d6:6b:92:3c:a9:07:0c:e8:35:f7:14:1a:3b:a0:
6d:c2:fa:38:7b:3b:43:92:d3:5e:ef:1b:b4:de:5f:
b5:1f:59:e4:32:da:59:ef:54:dd:f8:5d:5f:3b:21:
e8:59:1f:0f:8d:0f:8a:8f:68:89:08:f4:84:54:3c:
17:7e:37:cd:b1:0b:99:d8:4d:8c:17:39:15:e2:e7:
78:74:88:a6:51:de:c4:b7:ad:75:fa:8d:90:56:cd:
9d:21:b5:78:ad:70:9d:5d:8c:db:35:79:9d:ed:de:
5e:58:f3:0f:9a:e5:02:f2:6a:2b:b1:84:92:08:62:
ca:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1B:65:44:67:74:40:5D:04:E9:82:27:BA:33:DF:64:6C:AE:5E:A4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4RtlRGd0QF0E6YInujPfZGyuXqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:95:d1:26:58:c9:58:23:c3:ca:d4:e7:53:5f:a2:01:63:98:
50:90:e1:f7:25:77:99:60:78:34:cf:ca:95:fd:f7:44:4d:10:
3d:b6:c1:95:b8:5e:dc:4a:3e:92:13:d2:09:26:82:1c:4c:54:
5a:9a:db:05:a0:a3:8a:6a:45:f8:ee:7c:72:bf:a5:c9:38:75:
74:0a:75:95:52:b2:35:05:50:51:ac:ec:ef:4f:43:1b:22:ef:
d3:5b:68:03:ee:98:32:c3:9a:2d:1a:36:22:8e:83:c6:14:84:
cc:4e:da:04:40:f1:87:fd:1f:cd:a0:15:8d:2f:d9:0a:61:dc:
91:05:9b:96:3a:85:cc:d2:f7:05:b3:93:93:5f:3f:2e:61:bd:
37:64:64:b3:0e:86:ed:35:9b:ff:53:d2:58:c1:ac:82:6f:12:
77:7a:d8:7f:44:f9:92:8e:50:bc:25:f5:a0:9f:34:cf:88:1a:
9a:53:1d:ac:2a:1c:4e:6f:9e:25:b6:85:8e:34:75:09:5b:ef:
47:47:02:6f:14:67:21:f8:0f:1b:09:17:db:8b:4f:e3:a7:05:
01:be:90:82:ae:9f:ce:73:a3:f3:cc:81:67:32:7b:8d:c6:b7:
a3:1d:fc:a0:29:13:70:43:7c:46:84:4c:5c:ca:48:b5:c6:55:
0d:1b:4e:a8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYM16zcudBbpTFAZdRkdaQd4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTEzMDgxNTUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTFiNjU0NDY3NzQ0MDVkMDRlOTgyMjdiYTMzZGY2NDZjYWU1ZWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmG4EMA9XZ10ynLlgBYoFUg+SDaTY
pz6Eq28Cmy0KyiKmRITVtmGirhuDYUV5H348KO2jNVN3vdl8IA9Bgev0YXneVmYl
AoOArxJ8XqkyyUT0ok5juj9qBZNdPepsfV0Aa0an5Az7of8wcsFJw5glAgHxrzV9
Ws4nIKLAMvk2BrAXA7B6zPR41muSPKkHDOg19xQaO6Btwvo4eztDktNe7xu03l+1
H1nkMtpZ71Td+F1fOyHoWR8PjQ+Kj2iJCPSEVDwXfjfNsQuZ2E2MFzkV4ud4dIim
Ud7Et611+o2QVs2dIbV4rXCdXYzbNXmd7d5eWPMPmuUC8morsYSSCGLKKwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOEbZURndEBdBOmCJ7oz32Rsrl6kMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNFJ0bFJHZDBRRjBFNllJbnVqUGZaR3l1WHFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKuV0SZYyVgjw8rU51Nf
ogFjmFCQ4fcld5lgeDTPypX990RNED22wZW4XtxKPpIT0gkmghxMVFqa2wWgo4pq
RfjufHK/pck4dXQKdZVSsjUFUFGs7O9PQxsi79NbaAPumDLDmi0aNiKOg8YUhMxO
2gRA8Yf9H82gFY0v2Qph3JEFm5Y6hczS9wWzk5NfPy5hvTdkZLMOhu01m/9T0ljB
rIJvEnd62H9E+ZKOULwl9aCfNM+IGppTHawqHE5vniW2hY40dQlb70dHAm8UZyH4
DxsJF9uLT+OnBQG+kIKun85zo/PMgWcye43Gt6Md/KApE3BDfEaETFzKSLXGVQ0b
Tqg=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:23:05 2025 by rpki-client