Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rid2t4t1YApZxL2Uu77yvGnvcz4.roa
File: Rid2t4t1YApZxL2Uu77yvGnvcz4.roa (raw, json)
Hash identifier: Fy4lVSibff4LARPPRvPepLqmsx0pu0aB65pNcjUTBNs=
Subject key identifier: 46:27:76:B7:8B:75:60:0A:59:C4:BD:94:BB:BE:F2:BC:69:EF:73:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 90BB3140
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rid2t4t1YApZxL2Uu77yvGnvcz4.roa
Signing time: Wed 29 Jun 2022 00:05:02 +0000
ROA not before: Wed 29 Jun 2022 00:05:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:acc6:6d5/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2428186944 (0x90bb3140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 29 00:05:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=462776b78b75600a59c4bd94bbbef2bc69ef733e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7c:f3:2b:11:1f:d9:d3:7a:8e:eb:8f:04:75:
79:ea:66:5e:48:1c:25:f1:97:5c:43:11:00:40:cf:
6e:92:54:3f:78:d8:db:e9:25:a7:25:5d:f3:ce:a1:
2e:67:21:19:c5:f7:d8:da:29:1e:a9:17:14:e4:6a:
9f:09:52:0d:c4:9d:b3:9e:7d:f8:b8:c5:a5:1a:ed:
f8:c5:52:42:df:25:ca:51:2c:36:6f:a5:db:63:5b:
14:59:bf:6e:0d:90:0a:0e:10:ce:0b:15:9d:ec:49:
fd:14:2f:c0:6d:57:af:1e:6c:9b:32:3a:82:31:c9:
64:0f:b4:d9:4a:70:47:cc:5c:1e:05:29:f2:23:aa:
18:52:5e:98:f6:f6:f0:f2:cf:81:93:3d:9d:4f:e8:
ff:69:b9:47:ac:95:9b:cb:9e:89:95:3c:90:08:19:
9f:73:6d:8a:a7:7c:29:96:29:16:28:83:34:1b:61:
d9:a6:c3:e0:fd:b2:04:4e:b8:14:03:8c:8d:4d:f2:
28:b1:d4:6b:d4:d9:16:17:38:cc:52:57:80:5d:17:
b8:75:81:64:0e:5f:1a:ec:72:dd:a9:54:3a:bf:8c:
a2:15:ef:87:fa:fc:97:00:52:45:84:29:e4:42:8f:
dc:ae:e8:c4:73:12:22:ce:35:2c:e8:e2:34:1c:f4:
a7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:27:76:B7:8B:75:60:0A:59:C4:BD:94:BB:BE:F2:BC:69:EF:73:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rid2t4t1YApZxL2Uu77yvGnvcz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:3e:b5:c6:4d:c4:46:ee:96:aa:f0:c1:1b:5e:97:f4:8b:fa:
8e:0c:56:38:b1:cc:be:85:a4:ba:ca:3d:58:fb:f8:54:59:96:
f3:f3:57:22:0d:b0:b1:4d:0a:f0:4e:a1:cc:c9:d1:6f:0e:6f:
69:79:82:94:78:2b:9d:15:6d:3f:6a:b5:34:e7:62:4c:21:a3:
91:f2:40:ed:b2:b0:e1:ad:0f:1e:13:be:97:87:a1:1d:44:7c:
98:e5:9a:3f:b1:0a:81:b1:23:fd:a6:aa:fd:95:53:df:9f:84:
71:08:ce:3c:c6:86:41:4b:f7:17:ed:f6:12:66:c4:36:38:e6:
6b:55:d2:b6:24:a2:d2:da:74:88:94:32:af:48:af:d0:ed:35:
6a:70:85:f6:36:b4:ca:12:14:f1:99:75:3a:79:b1:ed:ae:ce:
ea:0a:13:a1:7c:d8:e6:81:03:91:d0:55:38:67:af:e5:ba:ce:
09:7b:23:16:18:a5:76:7e:56:8f:6e:b4:54:6c:ee:36:60:69:
dc:9f:d5:a6:c2:a0:60:db:70:16:b1:d5:5b:15:22:f7:b0:15:
43:97:b7:33:d6:9d:a9:28:17:3a:9c:f2:61:b7:7c:f2:2b:c3:
6e:2b:41:b6:eb:1c:87:d7:65:b0:59:69:66:86:64:d7:4a:fd:
bb:5e:d5:c0
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAJC7MUAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MjkwMDA1MDJaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDQ2Mjc3NmI3OGI3
NTYwMGE1OWM0YmQ5NGJiYmVmMmJjNjllZjczM2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCEfPMrER/Z03qO648EdXnqZl5IHCXxl1xDEQBAz26SVD94
2NvpJaclXfPOoS5nIRnF99jaKR6pFxTkap8JUg3EnbOeffi4xaUa7fjFUkLfJcpR
LDZvpdtjWxRZv24NkAoOEM4LFZ3sSf0UL8BtV68ebJsyOoIxyWQPtNlKcEfMXB4F
KfIjqhhSXpj29vDyz4GTPZ1P6P9puUeslZvLnomVPJAIGZ9zbYqnfCmWKRYogzQb
Ydmmw+D9sgROuBQDjI1N8iix1GvU2RYXOMxSV4BdF7h1gWQOXxrsct2pVDq/jKIV
74f6/JcAUkWEKeRCj9yu6MRzEiLONSzo4jQc9Kf3AgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQURid2t4t1YApZxL2Uu77yvGnvcz4wHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9SaWQydDR0MVlBcFp4TDJVdTc3eXZHbnZjejQucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAPj61xk3ERu6WqvDBG16X9Iv6jgxWOLHMvoWk
uso9WPv4VFmW8/NXIg2wsU0K8E6hzMnRbw5vaXmClHgrnRVtP2q1NOdiTCGjkfJA
7bKw4a0PHhO+l4ehHUR8mOWaP7EKgbEj/aaq/ZVT35+EcQjOPMaGQUv3F+32EmbE
Njjma1XStiSi0tp0iJQyr0iv0O01anCF9ja0yhIU8Zl1Onmx7a7O6goToXzY5oED
kdBVOGev5brOCXsjFhildn5Wj260VGzuNmBp3J/VpsKgYNtwFrHVWxUi97AVQ5e3
M9adqSgXOpzyYbd88ivDbitBtusch9dlsFlpZoZk10r9u17VwA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:04:44 2025 by rpki-client