Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H5zPqn90JP5d9qV3TGVtTzOS9RE.roa
File: H5zPqn90JP5d9qV3TGVtTzOS9RE.roa (raw, json)
Hash identifier: 0G7uSMDaj3POg7EtaK5ivpWKnQj3YVpQq/1jZittS0o=
Subject key identifier: 1F:9C:CF:AA:7F:74:24:FE:5D:F6:A5:77:4C:65:6D:4F:33:92:F5:11
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185FE81A8AA4D9749A108FD1C8493A7157E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H5zPqn90JP5d9qV3TGVtTzOS9RE.roa
Signing time: Sun 29 Jan 2023 17:09:48 +0000
ROA not before: Sun 29 Jan 2023 17:09:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:fe:81:a8:aa:4d:97:49:a1:08:fd:1c:84:93:a7:15:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 29 17:09:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f9ccfaa7f7424fe5df6a5774c656d4f3392f511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:19:66:c0:09:8d:83:8a:3f:7d:b3:9d:84:9c:
22:be:0d:a0:19:34:62:6d:b1:d8:b8:6f:ee:a9:29:
3b:8e:f1:11:41:2f:67:9d:ca:73:2a:ef:0f:a5:fb:
34:25:9a:12:69:3b:59:96:e9:b8:f7:39:85:f8:25:
d4:0b:4d:ff:b5:93:07:b9:5c:d1:de:a1:c1:bc:96:
f0:f5:4e:4f:89:09:4f:5f:6a:4e:5f:27:fa:60:a1:
2e:18:8e:2b:ca:c9:c2:22:d2:e5:4e:72:43:df:15:
ed:44:6c:af:e3:2f:3b:56:bd:7c:46:c1:9a:cb:a7:
45:cd:e5:19:1a:74:7b:65:c1:ec:e5:f6:a2:f1:5e:
7b:b7:9a:36:53:8f:70:db:82:22:34:06:bd:2c:b9:
d4:85:9c:4e:5c:3e:65:9f:44:65:21:52:0a:aa:51:
ca:7d:af:2e:13:9b:62:89:ed:75:7a:63:78:e7:75:
a8:c4:55:48:82:04:8c:9d:7b:f3:f9:a7:72:c3:b2:
b4:77:a4:19:53:46:e5:51:29:94:68:5b:eb:09:68:
94:a1:50:dd:24:cf:c1:56:d7:55:03:7c:35:6c:78:
31:4d:3c:b5:3b:a5:d0:1d:07:d0:a5:14:fa:dc:b0:
73:6f:97:4a:05:36:b9:35:da:77:99:8e:ee:ef:47:
74:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9C:CF:AA:7F:74:24:FE:5D:F6:A5:77:4C:65:6D:4F:33:92:F5:11
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H5zPqn90JP5d9qV3TGVtTzOS9RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:b1:9a:58:3c:ad:0f:ff:2d:9d:bc:20:59:29:8f:97:5e:63:
b9:53:6a:0a:23:22:e7:dc:f5:e3:a0:30:46:1b:0c:2a:65:03:
d9:19:74:ad:73:52:5e:17:3e:74:51:5b:5e:ec:bf:21:c1:32:
87:29:9a:bb:6f:f1:79:46:0e:02:38:3d:d1:88:a5:14:c5:d8:
2c:fe:df:78:73:f2:d7:f6:fe:9b:e4:cb:9e:5c:cb:4d:c2:df:
c5:fd:7c:15:c1:12:09:f1:5b:a5:f7:91:59:9c:33:15:b9:98:
b6:d1:0d:97:f2:59:82:ca:2d:75:b1:da:c6:94:01:4d:8f:d2:
18:65:2f:22:45:16:da:9f:6c:e6:a2:cf:c5:c0:3d:94:a2:76:
b3:5e:86:fe:53:96:49:74:0c:a1:41:e4:df:fe:3a:71:0b:32:
f8:24:3d:a7:f2:26:08:04:f3:7b:66:4c:c6:3b:5c:12:fe:8e:
8f:e8:36:42:02:71:0a:ee:d0:b4:9b:4e:f3:8c:3a:0f:9f:5d:
d7:75:01:23:bb:34:07:48:28:8b:1a:c2:14:e0:ad:ec:14:0f:
d9:1e:4d:41:42:c2:5a:f8:4e:60:99:d1:ab:5f:15:8a:78:f7:
e2:6c:ab:25:bc:2e:16:26:d7:f7:ba:3e:65:e6:c0:a4:74:3e:
d2:3b:3b:04
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYX+gaiqTZdJoQj9HISTpxV+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTI5MTcwOTQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjljY2ZhYTdmNzQyNGZlNWRmNmE1Nzc0YzY1NmQ0ZjMzOTJmNTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghlmwAmNg4o/fbOdhJwivg2gGTRi
bbHYuG/uqSk7jvERQS9nncpzKu8Ppfs0JZoSaTtZlum49zmF+CXUC03/tZMHuVzR
3qHBvJbw9U5PiQlPX2pOXyf6YKEuGI4rysnCItLlTnJD3xXtRGyv4y87Vr18RsGa
y6dFzeUZGnR7ZcHs5fai8V57t5o2U49w24IiNAa9LLnUhZxOXD5ln0RlIVIKqlHK
fa8uE5tiie11emN453WoxFVIggSMnXvz+adyw7K0d6QZU0blUSmUaFvrCWiUoVDd
JM/BVtdVA3w1bHgxTTy1O6XQHQfQpRT63LBzb5dKBTa5Ndp3mY7u70d0rQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFB+cz6p/dCT+Xfald0xlbU8zkvURMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSDV6UHFuOTBKUDVkOXFWM1RHVnRUek9TOVJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABexmlg8rQ//LZ28IFkp
j5deY7lTagojIufc9eOgMEYbDCplA9kZdK1zUl4XPnRRW17svyHBMocpmrtv8XlG
DgI4PdGIpRTF2Cz+33hz8tf2/pvky55cy03C38X9fBXBEgnxW6X3kVmcMxW5mLbR
DZfyWYLKLXWx2saUAU2P0hhlLyJFFtqfbOaiz8XAPZSidrNehv5Tlkl0DKFB5N/+
OnELMvgkPafyJggE83tmTMY7XBL+jo/oNkICcQru0LSbTvOMOg+fXdd1ASO7NAdI
KIsawhTgrewUD9keTUFCwlr4TmCZ0atfFYp49+JsqyW8LhYm1/e6PmXmwKR0PtI7
OwQ=
-----END CERTIFICATE-----
Generated at Thu Jun 12 14:10:08 2025 by rpki-client