Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S8Bk5QIwZJdgZOp15PH0RLk2RuM.roa
File: S8Bk5QIwZJdgZOp15PH0RLk2RuM.roa (raw, json)
Hash identifier: ESNB3zYJ0iCE5rOUNomtEMSo9sV5EyVy9BmhRXoajiA=
Subject key identifier: 4B:C0:64:E5:02:30:64:97:60:64:EA:75:E4:F1:F4:44:B9:36:46:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0F9D0AEAAEB820B034D6DAC0DBAE29DE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S8Bk5QIwZJdgZOp15PH0RLk2RuM.roa
Signing time: Sat 19 Aug 2023 21:04:24 +0000
ROA not before: Sat 19 Aug 2023 21:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:18a:f9c:f648/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0f:9d:0a:ea:ae:b8:20:b0:34:d6:da:c0:db:ae:29:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 21:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bc064e5023064976064ea75e4f1f444b93646e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8f:1a:1b:4c:ef:fc:3e:b8:c2:66:08:5e:9a:
f0:1d:c6:0a:91:60:af:b1:af:8e:53:d3:e1:2f:c1:
62:8d:95:da:8e:59:99:d4:e2:f9:2d:25:f5:11:9d:
db:22:79:08:72:2b:3a:2d:41:c4:b1:81:b9:d3:9e:
52:13:82:63:b4:8a:d0:c4:51:75:7a:b5:93:fc:80:
a1:33:05:20:d6:fc:14:3e:f4:6b:d7:2a:e5:a4:d3:
57:e7:80:b4:94:8a:2c:9d:87:4d:7f:36:50:a6:cd:
e4:b1:58:af:fe:a9:60:29:68:ae:21:be:c8:3a:6a:
69:b7:7b:d9:87:4a:d2:f3:e2:70:84:cc:b9:73:0d:
3a:be:cb:01:2e:bf:7c:f1:07:f9:29:79:8a:a2:7f:
98:d1:3f:1c:fa:51:cd:57:57:cb:75:55:8b:e1:52:
53:f7:9c:58:0e:05:23:db:cf:aa:58:c0:8f:c4:0b:
d6:9d:35:fc:9e:ce:62:e1:10:b4:f2:eb:59:8a:ad:
16:2d:17:54:29:48:d8:be:c5:8a:76:89:bd:08:41:
3b:68:1a:d0:62:12:c8:27:ea:e0:62:7d:40:86:2f:
d9:38:19:a0:cb:71:cd:7c:99:cd:00:1a:00:66:9d:
bc:d9:be:65:8b:1e:ad:ee:15:88:c5:80:32:8b:51:
9c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C0:64:E5:02:30:64:97:60:64:EA:75:E4:F1:F4:44:B9:36:46:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S8Bk5QIwZJdgZOp15PH0RLk2RuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:2a:a0:af:34:e3:d5:f9:de:34:75:06:6a:ba:cf:04:bb:35:
0f:09:a5:87:34:05:94:45:3e:96:dd:dd:99:e2:81:3c:42:d1:
5e:10:ee:0b:d8:c7:84:ef:0f:71:e0:9b:3a:ae:b7:00:ef:d5:
1c:a0:85:7b:7c:7e:dc:70:f8:4d:1a:c7:6e:d2:51:3f:99:ab:
50:41:0e:73:10:0d:e6:29:52:92:e5:73:b1:83:dd:83:9c:52:
57:d7:24:b9:89:5d:0e:60:45:ff:bc:4d:f0:e2:23:ef:60:46:
57:d6:26:d0:2d:5e:52:2e:de:11:97:d1:ce:a0:87:42:6b:a5:
9f:00:e6:40:18:bf:5b:57:de:06:bc:09:2f:21:21:7c:6b:54:
29:49:24:ee:c5:ae:9c:78:9e:23:c1:28:fd:10:79:94:fa:a3:
e3:52:86:80:ee:94:e2:b5:b1:15:2d:55:62:9c:9b:e7:3e:cc:
37:90:c6:49:e4:06:1b:c6:1a:c8:4c:6b:2c:d4:b6:eb:47:ef:
9f:fb:4a:6e:04:d1:54:5c:da:47:56:0e:71:ac:95:85:c0:59:
51:39:f3:88:ef:ee:ca:b3:1c:de:53:2b:97:bc:29:37:ee:9d:
37:66:c1:cd:06:41:7c:bb:c2:f6:22:4d:24:5f:73:c4:9d:e2:
44:4b:86:2b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoPnQrqrrggsDTW2sDbrineMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODE5MjEwNDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmMwNjRlNTAyMzA2NDk3NjA2NGVhNzVlNGYxZjQ0NGI5MzY0NmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI8aG0zv/D64wmYIXprwHcYKkWCv
sa+OU9PhL8FijZXajlmZ1OL5LSX1EZ3bInkIcis6LUHEsYG5055SE4JjtIrQxFF1
erWT/IChMwUg1vwUPvRr1yrlpNNX54C0lIosnYdNfzZQps3ksViv/qlgKWiuIb7I
Omppt3vZh0rS8+JwhMy5cw06vssBLr988Qf5KXmKon+Y0T8c+lHNV1fLdVWL4VJT
95xYDgUj28+qWMCPxAvWnTX8ns5i4RC08utZiq0WLRdUKUjYvsWKdom9CEE7aBrQ
YhLIJ+rgYn1Ahi/ZOBmgy3HNfJnNABoAZp282b5lix6t7hWIxYAyi1GctQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEvAZOUCMGSXYGTqdeTx9ES5NkbjMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUzhCazVRSXdaSmRnWk9wMTVQSDBSTGsyUnVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEYqoK8049X53jR1Bmq6
zwS7NQ8JpYc0BZRFPpbd3ZnigTxC0V4Q7gvYx4TvD3HgmzqutwDv1RyghXt8ftxw
+E0ax27SUT+Zq1BBDnMQDeYpUpLlc7GD3YOcUlfXJLmJXQ5gRf+8TfDiI+9gRlfW
JtAtXlIu3hGX0c6gh0JrpZ8A5kAYv1tX3ga8CS8hIXxrVClJJO7Frpx4niPBKP0Q
eZT6o+NShoDulOK1sRUtVWKcm+c+zDeQxknkBhvGGshMayzUtutH75/7Sm4E0VRc
2kdWDnGslYXAWVE584jv7sqzHN5TK5e8KTfunTdmwc0GQXy7wvYiTSRfc8Sd4kRL
his=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:16:19 2025 by rpki-client