Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ijLt9Ff7SdNK5g1FXW22CvOCfS0.roa
File: ijLt9Ff7SdNK5g1FXW22CvOCfS0.roa (raw, json)
Hash identifier: vi4gwIil0iDABpv2ejPs5KjfKd5EonSXQsVOwYMA2+U=
Subject key identifier: 8A:32:ED:F4:57:FB:49:D3:4A:E6:0D:45:5D:6D:B6:0A:F3:82:7D:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7271A3C2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ijLt9Ff7SdNK5g1FXW22CvOCfS0.roa
Signing time: Mon 14 Mar 2022 14:13:26 +0000
ROA not before: Mon 14 Mar 2022 14:13:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1920050114 (0x7271a3c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 14 14:13:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a32edf457fb49d34ae60d455d6db60af3827d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:2c:da:90:37:bb:9a:e9:cf:2d:74:7d:fe:
64:0f:53:52:6b:ae:95:89:b2:5e:79:6e:20:53:42:
bc:04:d9:e9:02:85:80:b1:53:e7:d4:bc:0c:f8:e7:
f6:8d:64:e0:17:e0:f2:4f:b7:f1:3c:af:42:50:83:
e4:8f:df:f4:1a:80:e4:26:c6:f4:a1:85:b5:72:81:
13:61:3c:69:fd:4d:c6:40:33:7a:b4:e5:4d:6f:18:
fe:8f:c1:29:c0:fd:7d:ad:51:c2:f9:fe:fc:74:8e:
f6:68:4b:d0:df:92:07:68:d2:3d:97:d4:f3:9a:da:
8b:e4:a3:7b:28:3f:14:a8:07:50:b2:c0:39:30:fd:
e4:8b:14:cd:8d:55:2b:03:52:6e:d9:a2:e0:80:65:
0b:5c:58:6c:ff:fb:dd:cd:54:51:1b:73:7b:f9:d9:
51:cf:b4:75:44:cd:b7:d2:c0:08:25:3f:c7:5a:0c:
a5:95:1e:89:58:99:aa:cd:6f:39:3f:f6:3e:db:c3:
22:9e:30:b6:88:79:d7:7b:43:fb:b8:d9:7f:2d:87:
80:e4:b8:b9:60:1a:33:00:f6:44:07:94:a1:d1:c6:
91:da:b3:6c:4d:f8:5b:e4:db:d2:c9:93:77:d9:2e:
1f:d0:79:22:e7:20:e0:d4:66:d8:40:a9:77:e0:27:
b4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:32:ED:F4:57:FB:49:D3:4A:E6:0D:45:5D:6D:B6:0A:F3:82:7D:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ijLt9Ff7SdNK5g1FXW22CvOCfS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:17:c9:32:71:24:2e:3d:93:3e:21:60:03:a8:2c:2b:78:80:
2c:fe:90:10:80:ec:f0:b7:85:b2:4a:0c:a0:cd:1a:70:71:a3:
d6:5c:0d:0c:81:5b:cb:7d:e6:f6:33:83:60:aa:65:bb:7b:e4:
cf:7c:99:a5:d7:57:41:89:d4:24:00:0a:6f:33:e9:f8:4e:43:
c9:40:da:fe:23:3e:c7:6b:a4:be:f6:22:d0:a8:3f:8c:68:14:
b6:cb:7a:c0:97:f2:78:d2:4a:2f:cc:a9:06:75:3e:28:78:50:
0c:a3:62:7d:7b:5e:3f:52:68:54:71:03:7f:fb:83:7f:85:8b:
5c:ae:a6:cf:ce:2e:17:d2:9b:bd:b8:d9:09:c0:dd:62:c9:f3:
fc:5d:24:93:9a:e7:18:c3:6d:5b:02:72:ba:17:79:68:dd:76:
af:c7:71:92:cf:f6:63:e6:7a:64:b0:f1:b3:5e:86:37:10:9c:
44:9b:78:74:fd:c8:8b:e6:ee:ca:c1:31:d5:ce:05:a9:7c:73:
0c:ca:08:bd:95:26:85:89:00:fb:b5:57:56:1c:84:15:71:5e:
b4:a8:69:82:0b:dc:7a:cd:c0:45:03:30:a6:b6:9d:ed:4a:f8:
01:39:79:8b:4b:e4:62:21:6e:02:d9:4f:fa:9c:64:11:6c:c1:
76:18:64:12
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEcnGjwjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMx
NDE0MTMyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGEzMmVkZjQ1N2Zi
NDlkMzRhZTYwZDQ1NWQ2ZGI2MGFmMzgyN2QyZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK+wLNqQN7ua6c8tdH3+ZA9TUmuulYmyXnluIFNCvATZ6QKF
gLFT59S8DPjn9o1k4Bfg8k+38TyvQlCD5I/f9BqA5CbG9KGFtXKBE2E8af1NxkAz
erTlTW8Y/o/BKcD9fa1Rwvn+/HSO9mhL0N+SB2jSPZfU85rai+Sjeyg/FKgHULLA
OTD95IsUzY1VKwNSbtmi4IBlC1xYbP/73c1UURtze/nZUc+0dUTNt9LACCU/x1oM
pZUeiViZqs1vOT/2PtvDIp4wtoh513tD+7jZfy2HgOS4uWAaMwD2RAeUodHGkdqz
bE34W+Tb0smTd9kuH9B5Iucg4NRm2ECpd+AntKsCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSKMu30V/tJ00rmDUVdbbYK84J9LTAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L2lqTHQ5RmY3U2ROSzVnMUZYVzIyQ3ZPQ2ZTMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAvF8kycSQuPZM+IWADqCwreIAs/pAQgOzwt4Wy
SgygzRpwcaPWXA0MgVvLfeb2M4NgqmW7e+TPfJml11dBidQkAApvM+n4TkPJQNr+
Iz7Ha6S+9iLQqD+MaBS2y3rAl/J40kovzKkGdT4oeFAMo2J9e14/UmhUcQN/+4N/
hYtcrqbPzi4X0pu9uNkJwN1iyfP8XSSTmucYw21bAnK6F3lo3Xavx3GSz/Zj5npk
sPGzXoY3EJxEm3h0/ciL5u7KwTHVzgWpfHMMygi9lSaFiQD7tVdWHIQVcV60qGmC
C9x6zcBFAzCmtp3tSvgBOXmLS+RiIW4C2U/6nGQRbMF2GGQS
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:09:29 2025 by rpki-client