Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/59zAhuzkwAuX5IqyEr9w1XQCRtE.roa
File: 59zAhuzkwAuX5IqyEr9w1XQCRtE.roa (raw, json)
Hash identifier: WVx9jlVu5BswpngwBobkOKaFVp82uXWwyzOAT1O4G6E=
Subject key identifier: E7:DC:C0:86:EC:E4:C0:0B:97:E4:8A:B2:12:BF:70:D5:74:02:46:D1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182C4D69F50AF018C5529E6E8BA35A72100
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/59zAhuzkwAuX5IqyEr9w1XQCRtE.roa
Signing time: Mon 22 Aug 2022 09:16:15 +0000
ROA not before: Mon 22 Aug 2022 09:16:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c4:d6:9f:50:af:01:8c:55:29:e6:e8:ba:35:a7:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 22 09:16:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7dcc086ece4c00b97e48ab212bf70d5740246d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c3:6c:80:00:54:7e:ce:7a:50:df:51:1c:f1:
42:8a:e6:0d:0a:cb:f6:2f:c5:82:8c:fc:e0:ae:aa:
6d:9f:77:fb:07:70:0b:db:b1:cc:de:82:d2:42:be:
18:6f:ce:c4:07:1e:18:0f:82:d7:d2:87:2a:ab:6c:
74:24:75:59:ac:16:ad:d7:7d:2e:3b:b4:22:8f:fb:
ed:27:39:a1:2e:db:6b:e9:a9:58:c7:9f:db:88:92:
a7:e7:6a:35:fd:7c:08:94:76:a8:a3:d2:a4:15:63:
ca:0c:a8:e7:12:d4:95:0e:25:61:7e:98:d5:9e:c2:
35:e6:44:d1:75:45:00:a4:7e:0a:01:cb:58:56:4f:
ff:39:c0:0b:36:e0:a1:ca:43:da:78:d2:27:d9:ba:
54:43:b5:c2:85:09:ec:3e:45:7c:90:d8:9e:f9:42:
35:6a:46:9c:e8:fe:f8:11:54:5a:45:d1:ce:73:d5:
fb:ab:df:9d:f5:09:14:35:0a:6a:1f:46:c3:9e:b9:
17:71:db:22:f4:3d:14:10:de:5d:3a:62:53:99:ce:
fb:a0:8d:50:e3:c2:50:9b:7b:c5:b7:4a:51:f3:10:
f4:25:60:66:70:38:63:bd:44:fb:f2:73:39:82:d1:
c1:20:fb:6b:3d:60:20:a2:6b:2e:9f:57:33:cf:f7:
75:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DC:C0:86:EC:E4:C0:0B:97:E4:8A:B2:12:BF:70:D5:74:02:46:D1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/59zAhuzkwAuX5IqyEr9w1XQCRtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:b0:08:8c:5c:fc:e7:e2:46:e8:b5:02:a0:5c:4f:f2:9f:46:
b4:5a:b2:17:77:05:88:bb:bb:53:25:19:59:3f:24:40:fc:27:
cc:29:98:c9:b7:d8:b9:2a:c3:84:9f:b7:11:83:b0:ef:7b:be:
3c:ff:81:8f:11:93:8c:15:72:0a:ce:e0:44:c6:ce:97:ff:bf:
10:21:ba:9c:71:34:c8:f2:df:cf:92:47:1d:e4:af:2c:9e:88:
cc:33:26:77:7f:c8:d1:38:9a:6d:12:16:66:2d:2d:d6:91:96:
12:71:f7:78:6c:6a:21:cb:ce:87:2c:99:d7:89:83:01:52:54:
34:c2:20:41:05:93:5c:c6:c9:c4:9e:15:e4:04:ca:d6:b3:1b:
14:b6:87:86:cd:91:96:64:26:44:ce:ce:84:d9:79:fb:8f:a3:
c4:d1:0d:e4:ea:63:a5:35:86:7e:6d:34:1f:d8:0e:8e:e3:65:
57:8e:69:89:7d:ec:ec:0f:a8:33:5a:c6:3b:3d:20:09:1d:b1:
53:02:9b:f9:a0:ee:64:07:87:70:7c:cf:d9:ad:6a:50:6e:0c:
41:49:1e:9c:90:b3:9d:96:44:14:de:eb:c8:16:aa:55:63:11:
c1:23:57:93:94:33:5c:cd:32:a5:d3:47:2e:20:d1:df:1f:f1:
b1:bb:b0:08
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYLE1p9QrwGMVSnm6Lo1pyEAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODIyMDkxNjE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2RjYzA4NmVjZTRjMDBiOTdlNDhhYjIxMmJmNzBkNTc0MDI0NmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsNsgABUfs56UN9RHPFCiuYNCsv2
L8WCjPzgrqptn3f7B3AL27HM3oLSQr4Yb87EBx4YD4LX0ocqq2x0JHVZrBat130u
O7Qij/vtJzmhLttr6alYx5/biJKn52o1/XwIlHaoo9KkFWPKDKjnEtSVDiVhfpjV
nsI15kTRdUUApH4KActYVk//OcALNuChykPaeNIn2bpUQ7XChQnsPkV8kNie+UI1
akac6P74EVRaRdHOc9X7q9+d9QkUNQpqH0bDnrkXcdsi9D0UEN5dOmJTmc77oI1Q
48JQm3vFt0pR8xD0JWBmcDhjvUT78nM5gtHBIPtrPWAgomsun1czz/d1gQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOfcwIbs5MALl+SKshK/cNV0AkbRMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNTl6QWh1emt3QXVYNUlxeUVyOXcxWFFDUnRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAWwCIxc/OfiRui1AqBc
T/KfRrRashd3BYi7u1MlGVk/JED8J8wpmMm32Lkqw4SftxGDsO97vjz/gY8Rk4wV
cgrO4ETGzpf/vxAhupxxNMjy38+SRx3kryyeiMwzJnd/yNE4mm0SFmYtLdaRlhJx
93hsaiHLzocsmdeJgwFSVDTCIEEFk1zGycSeFeQEytazGxS2h4bNkZZkJkTOzoTZ
efuPo8TRDeTqY6U1hn5tNB/YDo7jZVeOaYl97OwPqDNaxjs9IAkdsVMCm/mg7mQH
h3B8z9mtalBuDEFJHpyQs52WRBTe68gWqlVjEcEjV5OUM1zNMqXTRy4g0d8f8bG7
sAg=
-----END CERTIFICATE-----
Generated at Fri Jun 13 09:58:13 2025 by rpki-client