Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kY0Gzltawz2zQjp77_Yh9PRc-L0.roa
File: kY0Gzltawz2zQjp77_Yh9PRc-L0.roa (raw, json)
Hash identifier: thXRN9/c4d/EPgrgwQNCZDWu7eC+poa2hr6hKhExbcE=
Subject key identifier: 91:8D:06:CE:5B:5A:C3:3D:B3:42:3A:7B:EF:F6:21:F4:F4:5C:F8:BD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A36E25D852B014A17E1F01345A2C69EBC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kY0Gzltawz2zQjp77_Yh9PRc-L0.roa
Signing time: Sun 27 Aug 2023 12:05:19 +0000
ROA not before: Sun 27 Aug 2023 12:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:36e1:9c69/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:36:e2:5d:85:2b:01:4a:17:e1:f0:13:45:a2:c6:9e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 27 12:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=918d06ce5b5ac33db3423a7beff621f4f45cf8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fc:59:f8:00:3c:53:f8:b0:be:d4:37:53:cb:
ee:b8:44:26:f4:9e:46:4a:de:b0:2d:86:f3:d3:02:
48:fb:0c:5f:5b:34:e2:27:8f:9d:a4:06:70:6a:82:
87:31:ae:eb:81:89:08:cc:2c:d6:2f:fc:08:59:c2:
35:bc:04:4d:71:06:b8:b0:22:c6:ab:02:2b:9b:b5:
38:ca:1c:22:c1:f1:bc:b7:0f:07:bb:fb:c6:e4:e8:
9a:41:80:14:f3:37:0d:ee:98:67:b4:de:64:30:88:
62:2c:fe:c1:fe:2e:0d:e2:29:f0:ba:ec:5a:b9:f4:
28:69:37:43:b2:0d:5a:1e:25:d3:94:8f:d7:54:e4:
f1:2e:56:f0:27:22:34:0f:36:5b:db:24:4e:15:f2:
c7:e0:07:cc:e8:b5:50:5c:67:74:ba:d6:7d:f7:4f:
a3:6f:13:7f:57:41:ac:1f:7f:3d:e6:18:72:23:5d:
cc:bc:76:bb:05:80:0a:f0:b0:53:f3:17:59:43:42:
72:4a:13:50:5a:6e:3e:b6:6f:dc:5c:25:0e:49:5a:
c1:5f:34:87:01:b4:c6:7e:9b:fb:7f:20:e4:93:4b:
a6:ba:01:db:eb:aa:29:13:27:61:50:7f:52:f4:9a:
a4:94:ef:62:c1:81:2b:6c:8d:24:84:0f:84:ba:18:
34:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8D:06:CE:5B:5A:C3:3D:B3:42:3A:7B:EF:F6:21:F4:F4:5C:F8:BD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kY0Gzltawz2zQjp77_Yh9PRc-L0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:66:0d:97:68:ee:68:07:87:a3:3c:ec:eb:b5:16:83:78:b0:
40:05:d4:2a:82:e1:3a:88:5c:75:2f:67:32:0f:54:79:fe:27:
34:f1:b7:db:ef:c4:84:45:d0:2e:62:b2:5b:53:c1:5e:c2:92:
4e:b7:dd:24:b1:af:4a:a7:42:49:80:fe:b2:0d:e7:09:a3:20:
8f:85:15:d5:ff:30:3c:4b:c1:57:9f:2f:ae:a4:fb:c8:29:69:
2f:57:1f:c6:01:23:4b:4d:65:b7:c7:03:01:c1:25:66:76:07:
17:7a:d9:2b:de:18:ce:d0:f4:81:57:9f:f8:e7:81:18:26:7b:
a4:42:73:6b:4e:be:7b:0a:18:1c:c4:95:f8:39:b8:be:88:d7:
08:a3:cd:16:ac:61:7a:35:8a:c6:6a:6d:8b:7f:ef:6f:a7:dc:
04:6d:4c:9e:28:00:38:7e:83:36:9e:14:16:2d:41:99:24:a5:
d3:ad:bc:a8:89:a6:76:ba:92:be:78:4d:fa:7c:fa:2b:dd:c2:
21:0b:00:fd:f5:ec:bf:ca:a0:7b:c2:cc:ad:65:aa:5a:d4:9a:
5c:ad:6a:6e:c5:bf:5c:16:41:aa:88:ce:ef:fe:0c:56:13:51:
13:8f:c5:b4:be:57:fc:cf:75:9b:97:fd:04:cb:14:01:1f:38:
f5:e6:13:75
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYo24l2FKwFKF+HwE0Wixp68MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODI3MTIwNTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MThkMDZjZTViNWFjMzNkYjM0MjNhN2JlZmY2MjFmNGY0NWNmOGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/xZ+AA8U/iwvtQ3U8vuuEQm9J5G
St6wLYbz0wJI+wxfWzTiJ4+dpAZwaoKHMa7rgYkIzCzWL/wIWcI1vARNcQa4sCLG
qwIrm7U4yhwiwfG8tw8Hu/vG5OiaQYAU8zcN7phntN5kMIhiLP7B/i4N4inwuuxa
ufQoaTdDsg1aHiXTlI/XVOTxLlbwJyI0DzZb2yROFfLH4AfM6LVQXGd0utZ990+j
bxN/V0GsH3895hhyI13MvHa7BYAK8LBT8xdZQ0JyShNQWm4+tm/cXCUOSVrBXzSH
AbTGfpv7fyDkk0umugHb66opEydhUH9S9JqklO9iwYErbI0khA+Euhg0JQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJGNBs5bWsM9s0I6e+/2IfT0XPi9MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEva1kwR3psdGF3ejJ6UWpwNzdfWWg5UFJjLUwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAtmDZdo7mgHh6M87Ou1
FoN4sEAF1CqC4TqIXHUvZzIPVHn+JzTxt9vvxIRF0C5isltTwV7Ckk633SSxr0qn
QkmA/rIN5wmjII+FFdX/MDxLwVefL66k+8gpaS9XH8YBI0tNZbfHAwHBJWZ2Bxd6
2SveGM7Q9IFXn/jngRgme6RCc2tOvnsKGBzElfg5uL6I1wijzRasYXo1isZqbYt/
72+n3ARtTJ4oADh+gzaeFBYtQZkkpdOtvKiJpna6kr54Tfp8+ivdwiELAP317L/K
oHvCzK1lqlrUmlytam7Fv1wWQaqIzu/+DFYTUROPxbS+V/zPdZuX/QTLFAEfOPXm
E3U=
-----END CERTIFICATE-----
Generated at Mon Jun 9 20:11:28 2025 by rpki-client