Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l5cavsuH2XJTVdmsiL-AVDktGY4.roa
File: l5cavsuH2XJTVdmsiL-AVDktGY4.roa (raw, json)
Hash identifier: qoOp4bewwOjWdgNsVNNLaWruPMVnRizefygefK8jX/k=
Subject key identifier: 97:97:1A:BE:CB:87:D9:72:53:55:D9:AC:88:BF:80:54:39:2D:19:8E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189FCBC0674D3D9B0B532DDD19BA224F5E7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l5cavsuH2XJTVdmsiL-AVDktGY4.roa
Signing time: Wed 16 Aug 2023 05:05:28 +0000
ROA not before: Wed 16 Aug 2023 05:05:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:fcbb:3d85/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fc:bc:06:74:d3:d9:b0:b5:32:dd:d1:9b:a2:24:f5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 05:05:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97971abecb87d9725355d9ac88bf8054392d198e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1d:66:58:d7:61:13:c0:03:54:ac:35:02:69:
06:35:ac:d7:c4:2d:f9:4f:d8:4b:4e:99:18:f8:58:
cd:e5:31:35:38:b8:f4:1f:f6:5e:e9:04:0e:33:9c:
ba:b7:f8:6c:45:88:eb:6c:ff:74:a1:af:3b:4e:8c:
fb:df:66:cf:0f:85:24:75:e1:02:3d:99:67:1f:b3:
ae:d1:b4:ad:9b:8d:8c:4e:52:06:20:a8:52:28:33:
e3:06:4f:6f:3b:32:f5:f5:93:98:61:9c:1d:af:d5:
39:b8:73:ea:74:56:38:fb:2a:d9:52:ba:02:df:d8:
fd:c6:b6:40:65:4e:c5:1f:44:75:56:0e:2b:6e:f0:
78:f7:1b:bf:13:1f:c4:4b:7d:c3:0a:f8:56:0e:25:
6b:d1:88:12:92:60:56:65:2a:16:a6:47:93:a7:25:
a6:54:f7:63:2b:a5:c2:37:61:76:7a:e7:1e:47:cd:
86:55:35:1f:e3:ab:54:11:16:36:c3:75:99:7d:64:
e8:23:e8:b1:c7:ae:8e:af:09:fe:8e:d7:57:ec:82:
c6:1e:5f:69:6b:28:2f:f0:a3:1f:34:05:86:5d:97:
76:79:36:03:42:f4:99:13:95:85:8d:a2:19:c8:65:
46:26:75:37:56:36:2a:96:e1:16:32:32:7b:1b:3e:
6c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:97:1A:BE:CB:87:D9:72:53:55:D9:AC:88:BF:80:54:39:2D:19:8E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l5cavsuH2XJTVdmsiL-AVDktGY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:14:9e:b2:48:a4:f4:b0:30:ca:58:dd:05:70:96:70:60:04:
a2:23:db:bf:05:21:ad:af:39:c1:e0:34:53:16:10:e5:f5:ff:
a4:6c:b8:de:4f:bc:1a:39:ab:a5:80:6a:a9:c1:73:3a:d9:a2:
cf:45:98:53:ed:da:7a:f2:6f:f5:20:cd:59:53:2e:78:9c:3c:
48:60:6b:1c:34:e9:48:bf:1e:74:08:b4:19:5f:9e:8b:09:3c:
8d:0f:7b:7a:26:51:97:e3:c1:e4:72:3e:d3:f6:92:85:2a:5f:
3c:b9:a7:3e:4d:a1:d2:66:68:6f:34:20:d9:e6:cc:fc:cd:a6:
c6:98:96:fd:9f:80:8a:de:35:b2:80:81:a3:a5:f8:12:44:4b:
19:c5:9b:44:74:4e:f1:66:c0:cb:f1:9a:5c:5c:85:d5:4c:26:
04:29:bd:b4:0e:7e:db:6e:14:04:25:e9:33:1a:95:2f:d6:e0:
f6:e6:6c:21:6b:d6:98:1a:18:1c:e8:8e:32:20:1e:00:72:68:
47:5c:28:bc:55:82:ea:50:ee:ac:c0:5e:03:3a:d2:30:bf:37:
8e:ac:94:ea:81:98:9b:c7:7f:48:6f:1b:a4:11:3f:a3:5c:bb:
c2:26:d8:25:6d:9a:75:fc:8e:e8:f5:13:a5:53:e1:38:90:0b:
4c:64:d8:6e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYn8vAZ009mwtTLd0ZuiJPXnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODE2MDUwNTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Nzk3MWFiZWNiODdkOTcyNTM1NWQ5YWM4OGJmODA1NDM5MmQxOThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB1mWNdhE8ADVKw1AmkGNazXxC35
T9hLTpkY+FjN5TE1OLj0H/Ze6QQOM5y6t/hsRYjrbP90oa87Toz732bPD4UkdeEC
PZlnH7Ou0bStm42MTlIGIKhSKDPjBk9vOzL19ZOYYZwdr9U5uHPqdFY4+yrZUroC
39j9xrZAZU7FH0R1Vg4rbvB49xu/Ex/ES33DCvhWDiVr0YgSkmBWZSoWpkeTpyWm
VPdjK6XCN2F2euceR82GVTUf46tUERY2w3WZfWToI+ixx66Orwn+jtdX7ILGHl9p
aygv8KMfNAWGXZd2eTYDQvSZE5WFjaIZyGVGJnU3VjYqluEWMjJ7Gz5shwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJeXGr7Lh9lyU1XZrIi/gFQ5LRmOMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbDVjYXZzdUgyWEpUVmRtc2lMLUFWRGt0R1k0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJUUnrJIpPSwMMpY3QVw
lnBgBKIj278FIa2vOcHgNFMWEOX1/6RsuN5PvBo5q6WAaqnBczrZos9FmFPt2nry
b/UgzVlTLnicPEhgaxw06Ui/HnQItBlfnosJPI0Pe3omUZfjweRyPtP2koUqXzy5
pz5NodJmaG80INnmzPzNpsaYlv2fgIreNbKAgaOl+BJESxnFm0R0TvFmwMvxmlxc
hdVMJgQpvbQOfttuFAQl6TMalS/W4PbmbCFr1pgaGBzojjIgHgByaEdcKLxVgupQ
7qzAXgM60jC/N46slOqBmJvHf0hvG6QRP6Ncu8Im2CVtmnX8juj1E6VT4TiQC0xk
2G4=
-----END CERTIFICATE-----
Generated at Mon Jun 9 19:05:25 2025 by rpki-client