Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/894u18XLX2Rnfj-Xl-FLEjZ5Cn8.roa
File: 894u18XLX2Rnfj-Xl-FLEjZ5Cn8.roa (raw, json)
Hash identifier: LWk4pCtW97Mgqavq7RdKiWOzi47rWxyKX4QCzOWtKeo=
Subject key identifier: F3:DE:2E:D7:C5:CB:5F:64:67:7E:3F:97:97:E1:4B:12:36:79:0A:7F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018576E3DEF07B49721E1318D1CE25F51CD7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/894u18XLX2Rnfj-Xl-FLEjZ5Cn8.roa
Signing time: Tue 03 Jan 2023 09:08:43 +0000
ROA not before: Tue 03 Jan 2023 09:08:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:76:e3:de:f0:7b:49:72:1e:13:18:d1:ce:25:f5:1c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 3 09:08:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3de2ed7c5cb5f64677e3f9797e14b1236790a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:5e:27:f8:1f:57:8e:3b:ce:2b:0c:88:c9:
49:74:3e:34:15:c6:69:70:c5:1c:ba:3e:94:f8:03:
9b:ca:85:5e:d9:79:64:b1:5d:7f:c7:3e:6d:f0:1d:
b6:4c:25:41:31:91:54:14:0a:f5:24:61:f8:13:40:
33:89:60:a6:f3:f4:cd:d0:44:41:48:53:b3:63:8e:
c4:e2:00:3f:5e:26:ba:68:ad:bb:8f:98:b0:ad:15:
39:9b:4c:cb:67:9f:cd:31:64:d1:58:32:98:e2:62:
01:52:08:c3:7e:0e:7a:bf:ab:ba:fc:64:2d:cd:7a:
a9:34:17:36:50:6e:f9:43:9d:5c:e2:0f:c3:3a:41:
f9:89:57:7b:3d:d2:0d:b7:5e:11:46:29:38:25:b9:
76:36:4e:e3:e4:35:d3:31:26:1b:b4:89:bf:76:f4:
79:8b:b2:19:89:1c:68:9b:0c:03:be:75:2e:38:36:
cb:1f:b6:58:8d:d0:2f:f3:fd:10:ec:ae:8b:e7:76:
d3:2e:cd:f9:91:dd:90:11:71:51:35:94:73:e0:69:
d6:fb:02:dc:4c:97:78:03:2c:8e:1d:71:66:1f:c1:
4a:c1:b1:99:25:04:11:05:b3:a0:c4:48:ed:c1:93:
fd:c7:8c:7d:7f:5e:5e:c9:2f:9d:40:11:ee:03:71:
1e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DE:2E:D7:C5:CB:5F:64:67:7E:3F:97:97:E1:4B:12:36:79:0A:7F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/894u18XLX2Rnfj-Xl-FLEjZ5Cn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:f3:d3:c3:ba:bb:f0:86:d8:bd:12:9b:f9:7e:ef:15:a5:e1:
67:f7:f2:48:f5:c0:08:a9:2b:a4:fc:1c:ea:f4:2f:6b:85:4e:
41:76:02:f8:cf:3a:7e:3b:7a:fa:07:e9:e9:9d:76:1c:d1:86:
c9:1e:78:54:03:f8:b1:f5:f2:76:de:ec:33:d3:52:d7:8a:ad:
28:f1:9e:8b:6e:d8:80:35:64:14:0b:50:6e:b2:12:9d:3e:11:
48:32:46:0c:dd:76:78:e9:e1:72:d3:7c:a7:40:25:6b:a6:c4:
d7:a3:e7:d7:76:7c:87:c8:18:a8:ac:03:ef:e0:52:96:d1:2e:
1c:3f:6b:fe:fe:4e:49:c3:2a:b5:b4:0d:1e:64:ab:85:a1:2b:
26:94:26:c6:19:27:7c:72:e2:d5:4a:b2:2c:b4:7d:97:06:09:
ce:b5:ee:d9:84:8e:57:d5:98:54:7c:8c:05:4e:02:46:5f:c4:
e8:33:09:1a:3f:66:e1:0a:8d:e6:5e:e1:ac:bc:3f:74:08:f4:
9f:b7:f4:d9:3f:d1:da:d3:2b:b8:be:2c:f9:d3:ec:6e:cc:8a:
1b:9d:6b:64:be:77:47:6c:82:08:72:97:9b:e6:07:c9:c8:b5:
18:e9:02:20:44:13:15:47:3e:39:84:56:ac:12:b5:49:9c:a0:
fb:f0:e7:bb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYV2497we0lyHhMY0c4l9RzXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTAzMDkwODQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2RlMmVkN2M1Y2I1ZjY0Njc3ZTNmOTc5N2UxNGIxMjM2NzkwYTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYBeJ/gfV447zisMiMlJdD40FcZp
cMUcuj6U+AObyoVe2XlksV1/xz5t8B22TCVBMZFUFAr1JGH4E0AziWCm8/TN0ERB
SFOzY47E4gA/Xia6aK27j5iwrRU5m0zLZ5/NMWTRWDKY4mIBUgjDfg56v6u6/GQt
zXqpNBc2UG75Q51c4g/DOkH5iVd7PdINt14RRik4Jbl2Nk7j5DXTMSYbtIm/dvR5
i7IZiRxomwwDvnUuODbLH7ZYjdAv8/0Q7K6L53bTLs35kd2QEXFRNZRz4GnW+wLc
TJd4AyyOHXFmH8FKwbGZJQQRBbOgxEjtwZP9x4x9f15eyS+dQBHuA3EeNwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPPeLtfFy19kZ34/l5fhSxI2eQp/MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvODk0dTE4WExYMlJuZmotWGwtRkxFalo1Q244LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALXz08O6u/CG2L0Sm/l+
7xWl4Wf38kj1wAipK6T8HOr0L2uFTkF2AvjPOn47evoH6emddhzRhskeeFQD+LH1
8nbe7DPTUteKrSjxnotu2IA1ZBQLUG6yEp0+EUgyRgzddnjp4XLTfKdAJWumxNej
59d2fIfIGKisA+/gUpbRLhw/a/7+TknDKrW0DR5kq4WhKyaUJsYZJ3xy4tVKsiy0
fZcGCc617tmEjlfVmFR8jAVOAkZfxOgzCRo/ZuEKjeZe4ay8P3QI9J+39Nk/0drT
K7i+LPnT7G7Mihuda2S+d0dsgghyl5vmB8nItRjpAiBEExVHPjmEVqwStUmcoPvw
57s=
-----END CERTIFICATE-----
Generated at Tue Jun 10 22:21:21 2025 by rpki-client