Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fNmMxuuLTFVzQ9ddYdhk44gWS-M.roa
File: fNmMxuuLTFVzQ9ddYdhk44gWS-M.roa (raw, json)
Hash identifier: 9QXZl+hFAaiB/jb9QGtgycLJl2Uh/kjz6Y4dsHG6KHo=
Subject key identifier: 7C:D9:8C:C6:EB:8B:4C:55:73:43:D7:5D:61:D8:64:E3:88:16:4B:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3124F2EB233B73FF7A8D1A36EA57B7BA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fNmMxuuLTFVzQ9ddYdhk44gWS-M.roa
Signing time: Sat 26 Aug 2023 09:20:19 +0000
ROA not before: Sat 26 Aug 2023 09:20:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:31:24:f2:eb:23:3b:73:ff:7a:8d:1a:36:ea:57:b7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 09:20:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cd98cc6eb8b4c557343d75d61d864e388164be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:32:3b:9c:61:cb:17:71:00:d2:df:d9:47:41:
44:ce:28:c6:5d:49:53:c8:86:0d:2a:46:27:52:24:
8e:26:b2:61:13:de:cd:37:eb:19:67:29:7f:ed:6e:
da:67:4a:1d:dd:9b:9f:81:4b:d1:a1:6b:74:54:d9:
15:33:28:f3:7a:d6:63:67:30:df:5a:57:a5:15:bf:
0e:e7:a7:e0:ba:68:c1:f8:3e:b2:18:6d:a2:54:38:
81:8c:c5:61:d3:f8:28:e9:b1:80:c0:cb:1c:c1:c2:
e8:61:7c:85:a0:ec:69:32:5e:81:78:1c:b4:93:7a:
29:27:df:cf:0a:8f:74:6b:cc:3a:e5:cd:ee:2a:21:
17:f7:19:7f:dd:12:47:8b:c6:be:41:09:fb:9e:cb:
1c:35:76:aa:05:06:e0:7a:0b:e6:e3:65:9d:72:3b:
90:59:9b:c5:a8:b0:9b:4d:2b:57:07:19:98:1b:c7:
ee:15:44:7b:8f:67:d2:94:a0:d4:b6:61:1b:1e:28:
17:9e:ab:eb:8b:a9:c6:df:3a:d2:68:3b:cd:ca:7c:
33:35:33:5b:14:8a:24:65:1f:ad:bc:3c:c6:7c:99:
a9:c5:36:6f:5f:20:09:b5:b3:51:97:7e:4a:6f:1a:
22:06:8e:c8:71:cd:66:4d:11:1b:8f:f7:be:37:fd:
3d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D9:8C:C6:EB:8B:4C:55:73:43:D7:5D:61:D8:64:E3:88:16:4B:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fNmMxuuLTFVzQ9ddYdhk44gWS-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:13:b5:81:0c:51:04:6a:1b:09:11:73:3a:96:fa:37:c2:32:
f3:cd:6b:bf:f2:6d:47:7e:29:15:9e:a4:97:1c:77:db:1f:7e:
cb:88:9b:56:0b:4e:fe:e2:94:ac:b4:f3:56:5c:13:b1:b4:f5:
91:40:c4:9a:d6:16:90:d8:5c:f5:c4:8c:5f:da:2c:f4:3b:e0:
01:c2:d5:d2:6c:3b:9a:99:87:10:f6:27:d0:04:65:ad:10:45:
a4:93:4c:d6:fb:53:3c:ba:a0:3a:41:00:c4:87:c0:27:da:71:
74:7d:57:31:14:0d:2c:e0:be:42:8f:5d:73:bb:cb:f0:39:a9:
c2:79:00:3d:91:48:ae:4d:26:95:10:90:57:6f:e4:d8:e8:fc:
c8:3c:a5:ca:f1:32:56:24:17:93:ca:24:3d:79:1f:96:5e:08:
67:bb:12:24:15:56:96:94:f5:dc:5c:14:e3:26:ef:41:16:8e:
c8:87:64:1d:ea:d2:f1:66:33:fc:f1:f9:2d:f2:d6:9b:7e:c2:
9a:90:e5:8a:ab:89:70:63:b5:88:11:32:ab:54:53:14:df:5b:
6b:f6:a2:c1:4e:ad:be:40:3c:f9:ce:12:bf:c1:e3:b3:99:6e:
69:59:aa:26:ea:fa:a0:50:91:0e:8d:c8:66:9a:50:b7:0e:73:
ec:bc:bf:25
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoxJPLrIztz/3qNGjbqV7e6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODI2MDkyMDE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2Q5OGNjNmViOGI0YzU1NzM0M2Q3NWQ2MWQ4NjRlMzg4MTY0YmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTI7nGHLF3EA0t/ZR0FEzijGXUlT
yIYNKkYnUiSOJrJhE97NN+sZZyl/7W7aZ0od3ZufgUvRoWt0VNkVMyjzetZjZzDf
WlelFb8O56fgumjB+D6yGG2iVDiBjMVh0/go6bGAwMscwcLoYXyFoOxpMl6BeBy0
k3opJ9/PCo90a8w65c3uKiEX9xl/3RJHi8a+QQn7nsscNXaqBQbgegvm42WdcjuQ
WZvFqLCbTStXBxmYG8fuFUR7j2fSlKDUtmEbHigXnqvri6nG3zrSaDvNynwzNTNb
FIokZR+tvDzGfJmpxTZvXyAJtbNRl35KbxoiBo7Icc1mTREbj/e+N/09KwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHzZjMbri0xVc0PXXWHYZOOIFkvjMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZk5tTXh1dUxURlZ6UTlkZFlkaGs0NGdXUy1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEsTtYEMUQRqGwkRczqW
+jfCMvPNa7/ybUd+KRWepJccd9sffsuIm1YLTv7ilKy081ZcE7G09ZFAxJrWFpDY
XPXEjF/aLPQ74AHC1dJsO5qZhxD2J9AEZa0QRaSTTNb7Uzy6oDpBAMSHwCfacXR9
VzEUDSzgvkKPXXO7y/A5qcJ5AD2RSK5NJpUQkFdv5Njo/Mg8pcrxMlYkF5PKJD15
H5ZeCGe7EiQVVpaU9dxcFOMm70EWjsiHZB3q0vFmM/zx+S3y1pt+wpqQ5YqriXBj
tYgRMqtUUxTfW2v2osFOrb5APPnOEr/B47OZbmlZqibq+qBQkQ6NyGaaULcOc+y8
vyU=
-----END CERTIFICATE-----
Generated at Thu Jun 12 06:27:39 2025 by rpki-client