Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7F-RcszgHb5zbJ45BNC4w-Q8zU0.roa
File: 7F-RcszgHb5zbJ45BNC4w-Q8zU0.roa (raw, json)
Hash identifier: qS/mWoHLpZB9E/i9+NGubpexLHyW5XdLuYtJgbcY1Ro=
Subject key identifier: EC:5F:91:72:CC:E0:1D:BE:73:6C:9E:39:04:D0:B8:C3:E4:3C:CD:4D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0B5AA6B807147A2EE68B82F21C324706
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7F-RcszgHb5zbJ45BNC4w-Q8zU0.roa
Signing time: Sat 19 Aug 2023 01:13:24 +0000
ROA not before: Sat 19 Aug 2023 01:13:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0b:5a:a6:b8:07:14:7a:2e:e6:8b:82:f2:1c:32:47:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 01:13:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec5f9172cce01dbe736c9e3904d0b8c3e43ccd4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:77:df:fc:66:61:9f:be:46:b9:f2:60:6c:ba:
d7:da:8f:d7:79:b6:53:89:67:24:54:51:ef:78:20:
7c:54:a8:b7:ff:14:65:cb:80:3f:3a:b5:de:67:cb:
a2:cc:e4:eb:98:66:18:24:33:5b:45:f5:45:8b:12:
b7:83:51:e0:0f:07:fc:e3:6d:1b:0d:c6:25:55:29:
37:cf:c2:3c:d6:db:37:80:45:de:a4:e4:f7:64:da:
e3:61:9a:77:6f:9e:bd:ac:91:83:fd:b6:7b:a2:8e:
4a:fa:70:0f:72:08:45:21:4b:32:c9:3b:4c:c1:70:
91:e0:4f:ec:9a:64:23:f3:38:74:65:53:4a:da:26:
8a:ea:3a:72:b3:0e:f7:df:51:51:ae:79:79:a5:d6:
6a:87:31:e9:7f:30:d1:bf:db:72:cd:22:56:6f:be:
c8:69:67:c5:2f:bb:5f:a5:61:0e:a7:a2:36:c6:4f:
f9:db:64:f5:01:da:c7:df:8f:3d:2c:b9:4c:f2:13:
b9:99:5f:8f:da:39:37:45:a1:60:fd:b9:f0:be:75:
b0:d3:a0:d6:b5:63:dd:2a:dd:f6:eb:59:52:0d:00:
ed:d3:38:fc:f7:f8:b3:1a:f5:81:d4:0c:65:5c:90:
b3:37:78:ed:82:fc:b3:7c:f5:12:8b:fb:b6:d1:5c:
74:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5F:91:72:CC:E0:1D:BE:73:6C:9E:39:04:D0:B8:C3:E4:3C:CD:4D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7F-RcszgHb5zbJ45BNC4w-Q8zU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:5a:35:52:4d:df:47:0f:8a:56:79:57:32:4e:c0:28:f8:9d:
1e:3a:c6:53:62:1c:a5:f4:e8:ce:59:25:7b:5e:37:cc:4d:28:
2b:d2:23:97:9f:b8:7a:09:96:9c:8f:db:05:68:7d:bd:90:7a:
39:e9:e0:9f:30:58:3b:4b:49:8a:56:24:c8:08:c3:ef:57:b6:
2a:26:db:d9:82:22:29:ea:e2:1d:4b:37:de:db:70:7b:14:82:
7e:48:d1:12:58:46:ca:14:0f:d0:f8:f4:2a:27:fc:bd:be:67:
df:63:b1:a4:68:9c:1e:14:fa:fb:79:2e:00:a2:f7:12:3c:d1:
9b:6f:22:3e:fd:38:af:6d:f2:6a:a5:5c:22:c1:8d:46:11:a9:
4e:61:0e:b1:8f:67:15:9c:c4:e2:62:14:4e:4b:85:94:0e:e6:
3b:96:19:e0:5d:85:71:23:1d:ac:ae:cb:cc:f6:58:3c:47:22:
8d:cf:08:87:f8:4e:a5:dd:66:c5:63:0d:5a:67:d5:62:fa:ac:
9f:38:45:6b:fb:02:a8:0c:8d:05:ee:7b:29:f3:ba:e6:a4:a7:
fb:92:4d:0c:80:d6:78:f4:cf:6e:54:88:5e:de:07:36:c2:39:
20:04:79:46:c5:5b:77:d9:67:24:df:bc:f1:7e:3b:79:61:09:
58:c8:d7:8c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoLWqa4BxR6LuaLgvIcMkcGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODE5MDExMzI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzVmOTE3MmNjZTAxZGJlNzM2YzllMzkwNGQwYjhjM2U0M2NjZDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHff/GZhn75GufJgbLrX2o/XebZT
iWckVFHveCB8VKi3/xRly4A/OrXeZ8uizOTrmGYYJDNbRfVFixK3g1HgDwf8420b
DcYlVSk3z8I81ts3gEXepOT3ZNrjYZp3b569rJGD/bZ7oo5K+nAPcghFIUsyyTtM
wXCR4E/smmQj8zh0ZVNK2iaK6jpysw7331FRrnl5pdZqhzHpfzDRv9tyzSJWb77I
aWfFL7tfpWEOp6I2xk/522T1AdrH3489LLlM8hO5mV+P2jk3RaFg/bnwvnWw06DW
tWPdKt3261lSDQDt0zj89/izGvWB1AxlXJCzN3jtgvyzfPUSi/u20Vx0pwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOxfkXLM4B2+c2yeOQTQuMPkPM1NMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvN0YtUmNzemdIYjV6Yko0NUJOQzR3LVE4elUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAVaNVJN30cPilZ5VzJO
wCj4nR46xlNiHKX06M5ZJXteN8xNKCvSI5efuHoJlpyP2wVofb2Qejnp4J8wWDtL
SYpWJMgIw+9Xtiom29mCIinq4h1LN97bcHsUgn5I0RJYRsoUD9D49Con/L2+Z99j
saRonB4U+vt5LgCi9xI80ZtvIj79OK9t8mqlXCLBjUYRqU5hDrGPZxWcxOJiFE5L
hZQO5juWGeBdhXEjHayuy8z2WDxHIo3PCIf4TqXdZsVjDVpn1WL6rJ84RWv7AqgM
jQXueynzuuakp/uSTQyA1nj0z25UiF7eBzbCOSAEeUbFW3fZZyTfvPF+O3lhCVjI
14w=
-----END CERTIFICATE-----
Generated at Tue Jun 10 20:37:26 2025 by rpki-client