Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hCq7Iv6CClq0uF1hotUZKBWwwPw.roa
File: hCq7Iv6CClq0uF1hotUZKBWwwPw.roa (raw, json)
Hash identifier: FLjWHYO8UtN21QhQBrud2lkSkQsIQ9tnDk5q9XZNpSw=
Subject key identifier: 84:2A:BB:22:FE:82:0A:5A:B4:B8:5D:61:A2:D5:19:28:15:B0:C0:FC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864DE8D8E5EB91416344840E2953788A67
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hCq7Iv6CClq0uF1hotUZKBWwwPw.roa
Signing time: Tue 14 Feb 2023 03:12:30 +0000
ROA not before: Tue 14 Feb 2023 03:12:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4d:e8:d8:e5:eb:91:41:63:44:84:0e:29:53:78:8a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 14 03:12:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=842abb22fe820a5ab4b85d61a2d5192815b0c0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:21:1e:57:26:02:b0:34:4d:ec:23:47:3a:02:
06:68:4a:11:d0:98:eb:b3:e5:96:1f:1a:3a:15:d8:
d9:41:dd:6f:5d:27:b5:2b:10:f2:5d:84:15:6c:9d:
66:ec:9b:3e:f4:3e:4a:0c:49:e0:cb:f4:7c:c5:85:
fb:84:27:87:b8:83:f3:ee:3a:10:54:7f:9d:41:43:
38:4d:36:34:aa:4e:14:fd:ab:da:4f:f6:a7:a7:90:
3b:5a:bd:a8:f3:29:a8:19:99:65:0b:f2:0f:62:55:
af:b5:7d:db:27:de:e6:ff:7f:77:77:bd:f5:db:25:
1a:25:99:ab:2e:10:63:71:93:19:83:e4:83:d2:8a:
f7:8d:b3:19:79:a6:82:94:ba:b7:47:5e:a1:a4:a8:
0b:08:77:58:f1:ee:85:93:68:18:6b:dd:08:1a:c3:
2a:57:88:fe:5b:23:f3:65:1e:ff:b6:56:11:de:f1:
5a:fa:c7:38:6d:57:bf:d2:47:17:11:43:b6:58:c6:
fa:d9:6c:2c:bf:1c:72:90:3c:18:80:af:92:6c:af:
ad:93:19:6e:69:c9:e3:c3:df:fa:8d:27:50:c3:ce:
ce:d9:25:2d:19:ee:ae:9a:bd:9c:59:62:26:e5:85:
aa:8e:d9:6e:cf:b4:59:95:40:45:f0:ce:75:2d:9a:
1b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2A:BB:22:FE:82:0A:5A:B4:B8:5D:61:A2:D5:19:28:15:B0:C0:FC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hCq7Iv6CClq0uF1hotUZKBWwwPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:75:ec:55:4c:91:60:02:62:bb:6a:9a:48:0f:5c:b5:26:52:
7e:af:02:a3:16:a1:0e:70:19:c2:93:92:be:de:98:e2:3f:40:
f9:fc:a9:37:a6:6e:e2:13:31:79:66:f0:2e:df:4b:3d:9f:db:
c2:85:8c:a3:76:2f:9c:c9:6f:e2:4a:80:25:45:56:3a:d4:d7:
74:d9:e1:b6:49:93:69:2b:f7:1f:75:f7:1a:df:07:7b:7c:56:
2a:dd:66:54:4c:0b:1c:46:a6:c0:68:19:1c:e1:76:5f:e0:eb:
6d:27:91:02:71:29:3d:4f:65:5e:83:3d:34:93:1c:f9:08:4f:
9f:3b:19:62:a5:7a:54:49:ad:4b:cc:2a:bb:f3:74:11:f5:49:
0b:98:f7:74:df:9e:70:58:96:4e:84:4f:3c:32:d7:5e:96:fd:
b1:c8:ef:4f:0f:58:cd:61:71:60:76:d1:5d:1c:cc:c8:22:28:
e7:7a:9a:f9:12:07:65:ef:df:4a:8f:10:3c:dc:b2:66:15:1b:
33:9a:9d:7c:dd:d5:f8:6a:0b:e9:bc:e4:43:bd:b6:11:f8:83:
d2:51:15:57:19:4b:3e:54:59:94:b8:09:a7:65:8a:6a:2a:94:
a8:26:ae:93:cd:40:b5:b7:4a:14:67:51:54:7c:06:af:04:1e:
45:71:e1:9b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZN6Njl65FBY0SEDilTeIpnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjE0MDMxMjMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDJhYmIyMmZlODIwYTVhYjRiODVkNjFhMmQ1MTkyODE1YjBjMGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/iEeVyYCsDRN7CNHOgIGaEoR0Jjr
s+WWHxo6FdjZQd1vXSe1KxDyXYQVbJ1m7Js+9D5KDEngy/R8xYX7hCeHuIPz7joQ
VH+dQUM4TTY0qk4U/avaT/anp5A7Wr2o8ymoGZllC/IPYlWvtX3bJ97m/393d731
2yUaJZmrLhBjcZMZg+SD0or3jbMZeaaClLq3R16hpKgLCHdY8e6Fk2gYa90IGsMq
V4j+WyPzZR7/tlYR3vFa+sc4bVe/0kcXEUO2WMb62WwsvxxykDwYgK+SbK+tkxlu
acnjw9/6jSdQw87O2SUtGe6umr2cWWIm5YWqjtluz7RZlUBF8M51LZobVQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIQquyL+ggpatLhdYaLVGSgVsMD8MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvaENxN0l2NkNDbHEwdUYxaG90VVpLQld3d1B3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF917FVMkWACYrtqmkgP
XLUmUn6vAqMWoQ5wGcKTkr7emOI/QPn8qTembuITMXlm8C7fSz2f28KFjKN2L5zJ
b+JKgCVFVjrU13TZ4bZJk2kr9x919xrfB3t8VirdZlRMCxxGpsBoGRzhdl/g620n
kQJxKT1PZV6DPTSTHPkIT587GWKlelRJrUvMKrvzdBH1SQuY93TfnnBYlk6ETzwy
116W/bHI708PWM1hcWB20V0czMgiKOd6mvkSB2Xv30qPEDzcsmYVGzOanXzd1fhq
C+m85EO9thH4g9JRFVcZSz5UWZS4CadlimoqlKgmrpPNQLW3ShRnUVR8Bq8EHkVx
4Zs=
-----END CERTIFICATE-----
Generated at Mon Jun 9 04:53:56 2025 by rpki-client