Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4YN78SJGQWTbke5XRahslG7ZWeg.roa
File: 4YN78SJGQWTbke5XRahslG7ZWeg.roa (raw, json)
Hash identifier: IOjP7HtScx220pysTEO7/jFWOBsEHPKbSqPGjR/hLCE=
Subject key identifier: E1:83:7B:F1:22:46:41:64:DB:91:EE:57:45:A8:6C:94:6E:D9:59:E8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186394E25914344BC22C8BF77AF544574DD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4YN78SJGQWTbke5XRahslG7ZWeg.roa
Signing time: Fri 10 Feb 2023 03:11:08 +0000
ROA not before: Fri 10 Feb 2023 03:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:39:4e:25:91:43:44:bc:22:c8:bf:77:af:54:45:74:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 10 03:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1837bf122464164db91ee5745a86c946ed959e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:95:56:67:73:fe:66:14:2a:a3:3a:37:06:49:
2a:a6:ba:c9:37:b1:f6:7a:ce:1a:34:2a:fe:13:c9:
32:76:75:2e:f6:6c:41:35:45:13:13:34:67:a4:c7:
e6:03:a9:a0:ba:27:54:40:59:ab:3f:ab:f7:21:d8:
7c:f6:92:3b:ff:d6:4a:bf:54:8c:da:f3:56:a9:e0:
1e:bf:40:13:6d:20:0a:90:bd:3c:ca:a7:73:15:6b:
dc:82:1e:34:87:87:11:87:e5:99:cc:c9:c8:7e:54:
02:58:df:b3:27:d7:15:31:9c:e2:d7:77:96:82:74:
1b:dc:cb:71:67:a5:96:38:ee:69:90:4f:f2:49:71:
23:8d:c8:cc:15:8a:fc:0c:dc:79:21:ec:81:6c:0d:
1f:20:87:8c:ee:b2:23:35:1d:5f:ea:8d:b0:77:94:
35:ed:0b:3e:e6:29:d6:38:d5:a6:97:aa:5f:94:38:
92:18:91:03:17:bf:04:6f:d8:bc:3d:94:8d:6d:ab:
ba:4b:4f:58:80:a6:e0:5e:c1:b2:4f:e0:a1:c9:ce:
d0:39:51:3e:97:7e:3d:6a:30:37:29:43:6f:ff:11:
c8:c6:8b:e4:69:63:49:e8:5f:23:da:91:ff:3b:0e:
9e:cd:4d:4a:95:28:31:63:98:dc:62:cb:24:dc:9b:
7a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:83:7B:F1:22:46:41:64:DB:91:EE:57:45:A8:6C:94:6E:D9:59:E8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4YN78SJGQWTbke5XRahslG7ZWeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:78:84:9a:e1:e6:6f:d8:03:64:a7:ad:b5:74:c4:37:29:c8:
3d:15:17:2d:c3:48:9f:03:26:45:c4:c1:f8:ac:d3:dc:68:4c:
17:64:d7:99:d8:91:bb:d0:72:f0:93:9c:a1:0f:93:20:cd:a0:
10:fd:64:05:61:f6:9e:87:32:47:47:72:58:62:86:6d:08:12:
2b:a6:82:42:7d:60:8e:18:0d:93:8f:94:ad:79:a0:6e:23:43:
6c:c1:ff:b3:cf:60:da:2a:07:5b:c7:a8:c7:e7:c3:90:cd:8f:
8f:1b:46:dd:6c:4f:17:fc:b2:ef:17:de:d4:a3:b4:f2:3d:ff:
c7:c3:5d:60:65:e5:b7:e7:c8:4c:21:58:8f:2f:09:9c:f6:3c:
dc:7f:82:49:f0:1f:0e:82:47:0b:6a:c7:6c:c9:e4:5b:71:dc:
7b:12:8d:cd:f5:af:f7:ae:e1:7c:ea:30:10:79:8b:0f:1e:de:
12:35:b7:10:6c:4b:c2:09:20:64:4e:77:fa:ca:df:8a:cc:0a:
20:ed:69:81:ea:9c:4d:f9:42:90:b8:bf:13:d4:fd:ef:cb:91:
9f:2c:22:66:8b:51:43:98:26:4f:42:c9:f8:2f:ba:cd:e2:9a:
7d:12:84:04:25:6d:12:91:91:3f:c0:44:e0:5f:fc:b5:49:bf:
19:79:93:bc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYY5TiWRQ0S8Isi/d69URXTdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjEwMDMxMTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTgzN2JmMTIyNDY0MTY0ZGI5MWVlNTc0NWE4NmM5NDZlZDk1OWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpVWZ3P+ZhQqozo3BkkqprrJN7H2
es4aNCr+E8kydnUu9mxBNUUTEzRnpMfmA6mguidUQFmrP6v3Idh89pI7/9ZKv1SM
2vNWqeAev0ATbSAKkL08yqdzFWvcgh40h4cRh+WZzMnIflQCWN+zJ9cVMZzi13eW
gnQb3MtxZ6WWOO5pkE/ySXEjjcjMFYr8DNx5IeyBbA0fIIeM7rIjNR1f6o2wd5Q1
7Qs+5inWONWml6pflDiSGJEDF78Eb9i8PZSNbau6S09YgKbgXsGyT+Chyc7QOVE+
l349ajA3KUNv/xHIxovkaWNJ6F8j2pH/Ow6ezU1KlSgxY5jcYssk3Jt6TQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOGDe/EiRkFk25HuV0WobJRu2VnoMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNFlONzhTSkdRV1Ria2U1WFJhaHNsRzdaV2VnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF54hJrh5m/YA2SnrbV0
xDcpyD0VFy3DSJ8DJkXEwfis09xoTBdk15nYkbvQcvCTnKEPkyDNoBD9ZAVh9p6H
MkdHclhihm0IEiumgkJ9YI4YDZOPlK15oG4jQ2zB/7PPYNoqB1vHqMfnw5DNj48b
Rt1sTxf8su8X3tSjtPI9/8fDXWBl5bfnyEwhWI8vCZz2PNx/gknwHw6CRwtqx2zJ
5Ftx3HsSjc31r/eu4XzqMBB5iw8e3hI1txBsS8IJIGROd/rK34rMCiDtaYHqnE35
QpC4vxPU/e/LkZ8sImaLUUOYJk9Cyfgvus3imn0ShAQlbRKRkT/AROBf/LVJvxl5
k7w=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:14:43 2025 by rpki-client