Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IWBj4BhX1RcJjiWdmzdY8kPz1II.roa
File: IWBj4BhX1RcJjiWdmzdY8kPz1II.roa (raw, json)
Hash identifier: gl95FvB2oM8FewMrz+QUnq/rDf9u1VP55GGKoUqA3H8=
Subject key identifier: 21:60:63:E0:18:57:D5:17:09:8E:25:9D:9B:37:58:F2:43:F3:D4:82
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183AB4ADD796546CB0ED5B45D1C48A8C79A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IWBj4BhX1RcJjiWdmzdY8kPz1II.roa
Signing time: Thu 06 Oct 2022 03:15:53 +0000
ROA not before: Thu 06 Oct 2022 03:15:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ab:4a:dd:79:65:46:cb:0e:d5:b4:5d:1c:48:a8:c7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 6 03:15:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=216063e01857d517098e259d9b3758f243f3d482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:05:2f:2d:b1:72:d2:42:f6:f2:aa:ca:c1:90:
51:7d:78:5f:c7:33:69:fc:97:4f:fb:bc:cd:61:b3:
55:6f:4a:b3:fb:1d:cf:9d:ec:ee:a4:40:8e:ce:e2:
d1:1e:d9:5d:54:ea:96:70:ab:b0:78:99:b2:df:11:
ed:c0:bf:fc:5c:bf:b3:98:b2:31:da:a8:37:75:9b:
01:07:69:d3:7a:a2:3b:87:7f:74:08:f1:ba:51:32:
d6:5b:9e:4b:a4:77:8a:c7:a8:9c:2a:13:8d:8b:62:
35:8f:7f:7d:83:82:b0:53:8e:b2:fa:24:b9:51:ce:
20:0d:13:3c:a1:0d:e4:40:a0:83:74:0b:52:7a:d4:
cb:14:f7:fd:6f:f9:56:28:0c:88:6b:21:89:72:63:
5d:10:3d:c6:c6:89:64:c1:98:b5:25:c6:7c:3b:f3:
0a:c5:64:4b:1e:56:bd:c0:9a:87:92:4a:b2:2f:6b:
86:86:00:6e:64:34:ad:68:e6:22:ef:5d:60:15:79:
d0:82:bd:a6:8b:df:9e:71:36:b1:04:11:13:6f:84:
12:17:75:39:04:ff:13:5a:4d:97:28:95:89:ba:3f:
36:79:99:6a:80:56:c1:b8:f1:02:98:ec:eb:f6:b4:
43:84:62:a0:dc:69:cf:d7:aa:4d:e9:3d:13:6c:cd:
fc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:60:63:E0:18:57:D5:17:09:8E:25:9D:9B:37:58:F2:43:F3:D4:82
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IWBj4BhX1RcJjiWdmzdY8kPz1II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:c5:58:23:7e:f3:ee:0a:e0:f7:ea:f8:4c:c0:63:19:50:0c:
15:c4:bd:f2:a8:1e:fc:a2:fa:cd:6e:52:70:a5:f7:08:b9:7e:
27:18:cd:80:12:a6:b5:58:de:70:fa:83:fc:1b:93:69:56:69:
1f:23:c7:f2:9f:bf:e7:5e:ec:35:1c:7c:e2:3a:79:d3:5a:d0:
a7:c3:a7:53:42:99:37:ef:3d:6c:7f:05:87:41:b3:20:82:53:
db:9c:51:36:b8:f7:29:e1:47:be:d8:42:0e:7d:88:f9:99:52:
9d:dd:c2:64:36:f1:aa:66:68:fd:a8:20:ce:0a:ed:2a:25:0b:
87:dd:86:08:d8:1e:c7:4b:6f:68:d6:ec:86:ba:5b:3c:b4:6e:
d4:f1:d2:34:1d:1e:e9:a6:c7:54:ac:79:5c:1b:fe:74:f2:f8:
03:77:a0:3e:07:52:6e:7f:58:c5:7f:c4:3b:7d:7e:66:2d:4a:
b0:dc:ad:2c:b3:b7:3f:bd:8f:03:3f:ff:0e:74:f4:45:6f:b8:
e7:37:d6:c1:9a:fb:61:2d:aa:b0:3e:ad:5e:1e:5f:ea:4d:fc:
ee:6f:57:1a:f5:44:cd:1f:41:25:c3:f8:7c:c8:44:d4:33:7d:
67:15:ed:ae:50:18:61:be:8b:bc:55:6c:a6:b6:da:24:14:02:
06:e6:27:51
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYOrSt15ZUbLDtW0XRxIqMeaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDA2MDMxNTUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTYwNjNlMDE4NTdkNTE3MDk4ZTI1OWQ5YjM3NThmMjQzZjNkNDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwUvLbFy0kL28qrKwZBRfXhfxzNp
/JdP+7zNYbNVb0qz+x3PnezupECOzuLRHtldVOqWcKuweJmy3xHtwL/8XL+zmLIx
2qg3dZsBB2nTeqI7h390CPG6UTLWW55LpHeKx6icKhONi2I1j399g4KwU46y+iS5
Uc4gDRM8oQ3kQKCDdAtSetTLFPf9b/lWKAyIayGJcmNdED3GxolkwZi1JcZ8O/MK
xWRLHla9wJqHkkqyL2uGhgBuZDStaOYi711gFXnQgr2mi9+ecTaxBBETb4QSF3U5
BP8TWk2XKJWJuj82eZlqgFbBuPECmOzr9rRDhGKg3GnP16pN6T0TbM38kwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCFgY+AYV9UXCY4lnZs3WPJD89SCMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSVdCajRCaFgxUmNKamlXZG16ZFk4a1B6MUlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABHFWCN+8+4K4Pfq+EzA
YxlQDBXEvfKoHvyi+s1uUnCl9wi5ficYzYASprVY3nD6g/wbk2lWaR8jx/Kfv+de
7DUcfOI6edNa0KfDp1NCmTfvPWx/BYdBsyCCU9ucUTa49ynhR77YQg59iPmZUp3d
wmQ28apmaP2oIM4K7SolC4fdhgjYHsdLb2jW7Ia6Wzy0btTx0jQdHummx1SseVwb
/nTy+AN3oD4HUm5/WMV/xDt9fmYtSrDcrSyztz+9jwM//w509EVvuOc31sGa+2Et
qrA+rV4eX+pN/O5vVxr1RM0fQSXD+HzIRNQzfWcV7a5QGGG+i7xVbKa22iQUAgbm
J1E=
-----END CERTIFICATE-----
Generated at Mon Jun 9 10:49:39 2025 by rpki-client