Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5QhOnh2pNk77y6o3nwWMPFxVcOM.roa
File: 5QhOnh2pNk77y6o3nwWMPFxVcOM.roa (raw, json)
Hash identifier: gvQtlu+PDowMNEWA2ANUTa71svIL4s27NCFvQ42dKo4=
Subject key identifier: E5:08:4E:9E:1D:A9:36:4E:FB:CB:AA:37:9F:05:8C:3C:5C:55:70:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855F45B39F72434986641BF7E5D15306CF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5QhOnh2pNk77y6o3nwWMPFxVcOM.roa
Signing time: Thu 29 Dec 2022 19:04:41 +0000
ROA not before: Thu 29 Dec 2022 19:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:5f45:43be/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5f:45:b3:9f:72:43:49:86:64:1b:f7:e5:d1:53:06:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 29 19:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5084e9e1da9364efbcbaa379f058c3c5c5570e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:85:aa:95:10:ab:c4:24:4f:17:61:5f:a4:e5:
60:84:bb:58:e2:4d:0f:dd:74:49:eb:38:3d:a3:74:
17:6b:a4:88:d2:9c:ab:99:7c:b3:d2:7d:bc:8b:35:
17:08:3f:c4:31:e0:d9:be:ed:65:35:8e:28:23:7e:
c5:25:f2:61:1d:b7:c1:1a:35:ed:89:ae:da:6c:ca:
ca:93:a9:b0:19:75:a7:ca:eb:63:75:88:74:91:d3:
a1:cc:6f:73:44:03:49:11:e7:d5:06:48:d7:38:99:
c3:9d:40:b8:fc:36:a5:06:32:a6:52:a1:a1:6d:2c:
51:ca:6e:91:a1:46:f6:43:46:d0:6b:21:ce:74:02:
f9:e8:13:6f:95:72:f0:e8:20:d2:74:b2:64:12:d3:
89:f2:6b:17:b5:66:b1:6c:28:03:bc:81:ea:f8:28:
db:ab:c0:90:2d:ff:b5:19:83:2e:44:eb:11:ee:e8:
a0:fb:3e:05:11:d9:72:d2:92:02:84:2f:fb:6c:66:
83:8b:e4:a1:e0:14:9e:66:29:9c:b2:15:bd:8c:3e:
00:40:6c:58:2f:b8:1f:45:4a:b6:40:8c:ec:cf:5f:
ea:5a:a9:66:db:8a:86:87:36:9a:9d:95:4f:23:2e:
ca:8b:72:6a:7d:82:36:70:47:e1:ad:6e:fc:34:eb:
67:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:08:4E:9E:1D:A9:36:4E:FB:CB:AA:37:9F:05:8C:3C:5C:55:70:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5QhOnh2pNk77y6o3nwWMPFxVcOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:2b:c8:a5:56:17:0f:f1:5b:1d:fe:0f:8b:10:cf:ad:cc:36:
3a:99:bf:bf:40:6f:f5:fe:ac:5a:ed:b7:14:1f:1c:4d:fa:70:
af:a1:01:73:24:4b:ee:22:25:79:fc:5c:16:2a:ae:ee:39:d3:
81:3d:72:c8:09:87:f2:12:f8:f9:16:62:89:d4:7f:11:10:6c:
94:6a:24:1d:b4:c7:95:ba:ad:0a:a6:59:b7:47:b9:e6:2c:ea:
31:f1:e0:8b:2d:0d:df:4e:92:a4:1e:a3:0f:50:fc:b0:b1:b6:
1f:b8:d1:3d:33:33:bc:4b:ea:37:a7:07:a8:3c:7b:a2:4f:80:
e2:5f:52:91:9a:15:0a:ec:a5:a6:d9:86:f6:d5:36:9b:52:5c:
ef:db:08:8f:92:81:05:6d:81:c6:e6:b1:f2:45:e2:3a:6e:18:
fc:20:8c:e0:2d:c6:df:e3:0a:e4:5f:c2:c4:d5:94:2f:df:36:
f1:d0:9d:6f:1a:be:47:0d:04:7c:34:d2:34:30:d9:05:59:77:
17:65:d9:59:fe:7d:cd:19:a5:1c:27:66:7c:7c:e5:15:97:e1:
94:9b:0f:e9:82:42:68:6d:44:53:3d:53:2e:16:09:7a:44:32:
fc:5b:3e:7b:67:67:3d:45:45:c6:10:3a:9c:ca:06:3c:de:9e:
35:2c:cd:9f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVfRbOfckNJhmQb9+XRUwbPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjI5MTkwNDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTA4NGU5ZTFkYTkzNjRlZmJjYmFhMzc5ZjA1OGMzYzVjNTU3MGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIWqlRCrxCRPF2FfpOVghLtY4k0P
3XRJ6zg9o3QXa6SI0pyrmXyz0n28izUXCD/EMeDZvu1lNY4oI37FJfJhHbfBGjXt
ia7abMrKk6mwGXWnyutjdYh0kdOhzG9zRANJEefVBkjXOJnDnUC4/DalBjKmUqGh
bSxRym6RoUb2Q0bQayHOdAL56BNvlXLw6CDSdLJkEtOJ8msXtWaxbCgDvIHq+Cjb
q8CQLf+1GYMuROsR7uig+z4FEdly0pIChC/7bGaDi+Sh4BSeZimcshW9jD4AQGxY
L7gfRUq2QIzsz1/qWqlm24qGhzaanZVPIy7Ki3JqfYI2cEfhrW78NOtndQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOUITp4dqTZO+8uqN58FjDxcVXDjMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNVFoT25oMnBOazc3eTZvM253V01QRnhWY09NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADcryKVWFw/xWx3+D4sQ
z63MNjqZv79Ab/X+rFrttxQfHE36cK+hAXMkS+4iJXn8XBYqru4504E9csgJh/IS
+PkWYonUfxEQbJRqJB20x5W6rQqmWbdHueYs6jHx4IstDd9OkqQeow9Q/LCxth+4
0T0zM7xL6jenB6g8e6JPgOJfUpGaFQrspabZhvbVNptSXO/bCI+SgQVtgcbmsfJF
4jpuGPwgjOAtxt/jCuRfwsTVlC/fNvHQnW8avkcNBHw00jQw2QVZdxdl2Vn+fc0Z
pRwnZnx85RWX4ZSbD+mCQmhtRFM9Uy4WCXpEMvxbPntnZz1FRcYQOpzKBjzenjUs
zZ8=
-----END CERTIFICATE-----
Generated at Mon Jun 9 12:02:15 2025 by rpki-client