Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X1KVayiPqP6D1ye-UOwnWtp0rBA.roa
File: X1KVayiPqP6D1ye-UOwnWtp0rBA.roa (raw, json)
Hash identifier: Dstq0UKqZD/T6fcEC8XhFLqTrLOa3jE0etdHvVhls6c=
Subject key identifier: 5F:52:95:6B:28:8F:A8:FE:83:D7:27:BE:50:EC:27:5A:DA:74:AC:10
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018936452D1D910B6C206AE2B764C979806D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X1KVayiPqP6D1ye-UOwnWtp0rBA.roa
Signing time: Sat 08 Jul 2023 16:10:50 +0000
ROA not before: Sat 08 Jul 2023 16:10:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:36:45:2d:1d:91:0b:6c:20:6a:e2:b7:64:c9:79:80:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 8 16:10:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f52956b288fa8fe83d727be50ec275ada74ac10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e7:b7:0f:ba:32:72:8d:6b:c6:35:6e:e7:b1:
f5:d6:d5:44:98:87:f6:fe:c0:31:2f:ab:53:f4:44:
d3:6f:a8:0d:7d:03:7b:45:5f:a0:a7:cf:a5:45:b2:
a6:c7:30:cb:0b:ac:cc:7e:0a:5d:89:ee:53:06:31:
76:67:7a:70:21:a2:9d:8e:eb:30:bc:58:71:89:82:
a1:7d:ed:13:60:09:75:e6:4e:99:36:94:65:ec:5c:
dd:ed:2a:12:11:f5:49:27:7e:45:82:86:40:3d:24:
24:52:8f:da:f5:5c:5c:24:ef:f5:df:50:9a:4f:32:
ba:c8:2b:90:ea:5e:cf:1b:1e:20:3f:6e:7a:0f:4d:
7d:67:21:89:03:4e:bc:10:c1:0c:77:26:23:64:f8:
f1:6d:e4:79:87:9f:1d:61:45:dc:dd:9c:2d:94:04:
fb:01:87:be:bb:51:85:c1:98:6d:4a:d3:39:fa:05:
b0:e8:32:02:6e:4f:d3:58:2f:a5:ce:10:d6:1b:24:
4b:9f:e6:32:0b:58:fe:31:08:0b:89:23:5c:0d:be:
29:87:55:e4:ec:f0:d2:5f:f6:a6:ba:6a:d0:51:91:
8d:11:ca:2b:6f:78:80:96:ca:4e:f5:67:b7:9f:b9:
89:e1:57:52:f2:08:e7:4f:e8:7f:a5:c1:c3:ea:8f:
de:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:52:95:6B:28:8F:A8:FE:83:D7:27:BE:50:EC:27:5A:DA:74:AC:10
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X1KVayiPqP6D1ye-UOwnWtp0rBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:d0:39:22:a3:25:3a:a9:eb:24:fa:77:6b:61:da:ef:50:25:
24:a2:fb:8c:74:13:98:1d:28:78:c6:70:2a:99:5e:e2:87:69:
0b:54:a9:93:70:09:44:b8:c3:78:17:4e:2e:8a:16:ba:0c:53:
49:6a:d4:77:46:b7:14:81:15:45:0f:6e:82:0d:1e:c2:3c:2e:
38:10:07:b5:c7:c2:94:7d:c8:42:d5:2a:f5:cd:8a:2b:e4:9e:
18:c1:8e:57:ee:91:7e:c1:2b:13:92:90:f9:04:73:6a:34:bf:
6e:8d:2f:35:39:93:71:d2:86:6d:a9:dd:e2:fc:7c:f2:ac:0a:
4e:b4:59:71:10:3c:a8:af:69:b4:71:18:cd:a3:80:b2:22:ab:
8a:c9:a4:1c:78:92:f0:45:8e:4b:d5:b6:61:77:f6:47:52:2e:
7b:ee:c4:04:25:c6:b4:f4:c1:c6:41:10:f3:55:e5:e2:1b:e3:
33:f0:33:88:41:ff:75:c5:13:87:2e:40:65:48:e3:c0:df:b5:
e2:86:13:de:12:62:75:76:3b:c9:2e:40:a1:ad:53:4d:e8:5c:
e3:f0:fd:b8:77:cc:e4:30:98:85:6a:0c:b2:42:4a:d7:b1:00:
fd:d9:1f:e8:ae:06:af:d9:73:8c:be:09:f4:11:b1:06:59:ca:
63:bb:9f:59
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYk2RS0dkQtsIGrit2TJeYBtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzA4MTYxMDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjUyOTU2YjI4OGZhOGZlODNkNzI3YmU1MGVjMjc1YWRhNzRhYzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgee3D7oyco1rxjVu57H11tVEmIf2
/sAxL6tT9ETTb6gNfQN7RV+gp8+lRbKmxzDLC6zMfgpdie5TBjF2Z3pwIaKdjusw
vFhxiYKhfe0TYAl15k6ZNpRl7Fzd7SoSEfVJJ35FgoZAPSQkUo/a9VxcJO/131Ca
TzK6yCuQ6l7PGx4gP256D019ZyGJA068EMEMdyYjZPjxbeR5h58dYUXc3ZwtlAT7
AYe+u1GFwZhtStM5+gWw6DICbk/TWC+lzhDWGyRLn+YyC1j+MQgLiSNcDb4ph1Xk
7PDSX/amumrQUZGNEcorb3iAlspO9We3n7mJ4VdS8gjnT+h/pcHD6o/eowIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFF9SlWsoj6j+g9cnvlDsJ1radKwQMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWDFLVmF5aVBxUDZEMXllLVVPd25XdHAwckJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAADQOSKjJTqp6yT6d2th
2u9QJSSi+4x0E5gdKHjGcCqZXuKHaQtUqZNwCUS4w3gXTi6KFroMU0lq1HdGtxSB
FUUPboINHsI8LjgQB7XHwpR9yELVKvXNiivknhjBjlfukX7BKxOSkPkEc2o0v26N
LzU5k3HShm2p3eL8fPKsCk60WXEQPKivabRxGM2jgLIiq4rJpBx4kvBFjkvVtmF3
9kdSLnvuxAQlxrT0wcZBEPNV5eIb4zPwM4hB/3XFE4cuQGVI48DfteKGE94SYnV2
O8kuQKGtU03oXOPw/bh3zOQwmIVqDLJCStexAP3ZH+iuBq/Zc4y+CfQRsQZZymO7
n1k=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:22:34 2025 by rpki-client