Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/csfZHAfnD97zljuVjHyrpRxL3ek.roa
File: csfZHAfnD97zljuVjHyrpRxL3ek.roa (raw, json)
Hash identifier: ruO9k0PwdjXd65hPy14bIYNWbzH4Med378JxO+eAShQ=
Subject key identifier: 72:C7:D9:1C:07:E7:0F:DE:F3:96:3B:95:8C:7C:AB:A5:1C:4B:DD:E9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 70B5B5ED
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/csfZHAfnD97zljuVjHyrpRxL3ek.roa
Signing time: Tue 08 Mar 2022 06:10:30 +0000
ROA not before: Tue 08 Mar 2022 06:10:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1890956781 (0x70b5b5ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 8 06:10:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72c7d91c07e70fdef3963b958c7caba51c4bdde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:49:e2:b0:15:cf:95:0f:ab:8d:19:b3:bc:
c5:e3:f4:fb:2d:11:70:80:86:fd:50:a4:84:a6:20:
ed:e7:dd:e3:52:e2:13:b9:f6:5a:e8:75:69:2d:a3:
fd:4a:17:f3:e1:3f:c9:78:dd:9a:93:f6:3b:bc:60:
1d:c4:cb:99:bb:2c:1e:a1:eb:3b:0a:ab:32:fa:41:
6e:df:e9:c2:0d:fa:80:d7:a2:3b:74:39:7a:4f:df:
a3:94:05:0d:c1:6c:1b:3a:0e:63:c6:98:d9:7f:0e:
bf:fb:74:e7:f3:45:61:2d:19:7f:0e:b3:1a:83:01:
84:c3:bc:e3:50:65:b4:54:63:79:ef:b3:d1:ba:60:
2c:8e:39:76:9b:54:88:a7:86:a0:c3:47:07:51:7a:
bc:0f:fa:b4:30:82:18:85:fb:b0:87:78:0a:d0:ed:
74:4e:e0:2e:3b:f5:31:4a:67:bd:6b:73:c0:16:b9:
33:cd:04:fc:04:5a:bd:dc:1a:cb:87:b7:7c:62:7e:
fb:ec:22:b9:f1:03:a3:28:2f:82:42:f9:21:c2:10:
d3:a8:8e:69:75:27:3a:7f:63:0e:9b:b8:6a:a8:c2:
88:b7:ed:31:76:ec:b5:e0:88:e6:20:ce:e8:93:f4:
da:30:8c:1c:7a:7d:3b:57:de:b7:4c:ac:10:9f:3d:
8e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C7:D9:1C:07:E7:0F:DE:F3:96:3B:95:8C:7C:AB:A5:1C:4B:DD:E9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/csfZHAfnD97zljuVjHyrpRxL3ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:98:34:9c:7a:26:62:80:cd:a7:e4:e3:e0:de:33:b6:6d:56:
d4:e6:d9:77:9b:a1:a8:3e:ec:24:14:da:9f:fd:87:b1:54:e4:
1a:fc:3a:b6:31:87:25:4e:48:d0:a4:27:30:42:a4:08:41:1e:
7c:c0:ef:e5:c4:48:50:e6:5a:39:d3:4b:cf:dd:eb:de:4c:2e:
d4:95:75:b2:b8:d3:5e:4c:5b:3f:2f:36:f7:75:63:43:8b:e8:
2a:02:1f:d8:2a:c7:90:83:42:a4:92:c2:00:38:84:42:05:4b:
86:e4:c3:ab:26:59:22:b9:54:44:0d:9c:fa:34:4b:0c:1f:82:
85:6f:87:d4:26:62:44:73:fc:b7:46:d5:93:06:71:07:fd:67:
24:b1:fe:b0:87:31:eb:28:20:f9:f5:9a:3f:98:65:4c:ab:f4:
9c:c6:60:f5:e2:46:83:d6:f2:33:27:e6:52:9a:b4:94:38:c3:
be:13:6e:2c:55:77:79:99:04:91:6a:09:5c:ac:b5:7b:02:be:
13:8a:09:aa:49:4a:11:b7:b2:a5:da:f7:2e:6f:a3:a8:92:6a:
10:a1:ba:d6:47:70:88:16:fe:69:c6:83:a2:61:13:64:46:1e:
62:a7:27:af:05:7b:91:fa:d5:0f:08:b6:3b:62:1e:5e:c9:cd:
9f:a6:64:82
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEcLW17TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMw
ODA2MTAzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzJjN2Q5MWMwN2U3
MGZkZWYzOTYzYjk1OGM3Y2FiYTUxYzRiZGRlOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL+vSeKwFc+VD6uNGbO8xeP0+y0RcICG/VCkhKYg7efd41Li
E7n2Wuh1aS2j/UoX8+E/yXjdmpP2O7xgHcTLmbssHqHrOwqrMvpBbt/pwg36gNei
O3Q5ek/fo5QFDcFsGzoOY8aY2X8Ov/t05/NFYS0Zfw6zGoMBhMO841BltFRjee+z
0bpgLI45dptUiKeGoMNHB1F6vA/6tDCCGIX7sId4CtDtdE7gLjv1MUpnvWtzwBa5
M80E/ARavdway4e3fGJ+++wiufEDoygvgkL5IcIQ06iOaXUnOn9jDpu4aqjCiLft
MXbsteCI5iDO6JP02jCMHHp9O1fet0ysEJ89jhcCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRyx9kcB+cP3vOWO5WMfKulHEvd6TAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L2NzZlpIQWZuRDk3emxqdVZqSHlycFJ4TDNlay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQABmDSceiZigM2n5OPg3jO2bVbU5tl3m6GoPuwk
FNqf/YexVOQa/Dq2MYclTkjQpCcwQqQIQR58wO/lxEhQ5lo500vP3eveTC7UlXWy
uNNeTFs/Lzb3dWNDi+gqAh/YKseQg0KkksIAOIRCBUuG5MOrJlkiuVREDZz6NEsM
H4KFb4fUJmJEc/y3RtWTBnEH/Wcksf6whzHrKCD59Zo/mGVMq/ScxmD14kaD1vIz
J+ZSmrSUOMO+E24sVXd5mQSRaglcrLV7Ar4TigmqSUoRt7Kl2vcub6OokmoQobrW
R3CIFv5pxoOiYRNkRh5ipyevBXuR+tUPCLY7Yh5eyc2fpmSC
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:13:05 2025 by rpki-client