Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rreUFKCVTUtWO4Ucda3Y8hNnj_U.roa
File: rreUFKCVTUtWO4Ucda3Y8hNnj_U.roa (raw, json)
Hash identifier: p248MjtpzIk/tI87MsFZmHlK4J5ERrPqnILFaUioz/k=
Subject key identifier: AE:B7:94:14:A0:95:4D:4B:56:3B:85:1C:75:AD:D8:F2:13:67:8F:F5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185108A3D0E787EC536AB9582063E00D528
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rreUFKCVTUtWO4Ucda3Y8hNnj_U.roa
Signing time: Wed 14 Dec 2022 12:09:33 +0000
ROA not before: Wed 14 Dec 2022 12:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:10:8a:3d:0e:78:7e:c5:36:ab:95:82:06:3e:00:d5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 14 12:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aeb79414a0954d4b563b851c75add8f213678ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cd:78:5a:74:21:69:4a:1a:d1:b0:cb:bb:39:
33:72:7d:17:db:f4:09:de:7d:85:5f:62:7c:4a:a8:
f6:60:b4:a4:f5:9d:61:70:11:1a:c5:9b:bc:db:a3:
33:10:ac:c6:70:43:ce:e7:34:25:24:ab:0d:65:1e:
fe:a7:d1:c3:68:fb:f8:94:c8:c7:d1:03:49:23:a7:
da:ab:b3:95:a0:c4:79:43:33:09:f9:2b:6e:37:82:
59:f5:87:6e:4c:63:37:49:9e:d2:fa:4a:df:59:ef:
28:6d:42:fb:9a:66:6b:e2:a3:5f:4e:67:d5:cd:af:
c9:40:3f:14:5c:65:1a:a8:a3:28:26:a6:5a:38:f0:
a6:0a:4f:82:c5:83:7d:bd:96:d1:e1:26:3e:6d:74:
76:90:6c:15:3d:f1:9e:d1:fc:45:3c:8d:e2:68:16:
a0:f0:cc:d0:22:fb:86:98:9e:bb:9b:ff:7a:33:0f:
41:a3:2d:b4:58:a6:7e:f3:17:7e:e5:a5:41:4d:59:
8c:8c:40:34:82:43:4b:e9:13:13:2b:95:5d:fb:7c:
8e:0e:bb:23:b8:1f:c7:d3:e3:49:f2:b5:d0:08:bb:
3b:d0:14:51:1e:36:2d:e5:c9:33:35:8b:0a:cf:31:
03:3c:11:26:74:f6:e8:5b:31:b3:8c:7b:34:0a:1d:
ef:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B7:94:14:A0:95:4D:4B:56:3B:85:1C:75:AD:D8:F2:13:67:8F:F5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rreUFKCVTUtWO4Ucda3Y8hNnj_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:e4:13:55:9b:b2:8f:a2:dd:74:de:4f:56:fe:d6:2a:ab:df:
9e:d7:96:ad:b7:76:c0:3f:85:78:5d:26:60:05:1d:4a:9c:be:
e5:8d:87:db:5d:86:49:a2:8c:cf:f1:ea:68:6b:5a:d1:a3:f4:
85:65:cd:5b:d3:79:a9:d3:0a:bd:8b:54:2c:2e:1c:b0:0a:d8:
b9:8a:96:64:e8:16:75:86:73:e6:95:0c:10:8c:da:1e:d6:b8:
96:2b:46:08:c7:46:84:60:dc:47:1b:62:98:a0:01:af:5f:c5:
e8:f6:80:98:81:d4:a4:69:53:34:67:74:44:b2:86:42:fb:ee:
94:5e:c4:f4:c8:87:ab:53:7c:82:42:f9:05:b5:d9:85:64:29:
8d:8d:92:00:61:fd:e0:6f:2c:ab:18:8f:96:32:5c:e5:fa:f5:
e3:e7:99:7b:3b:c9:ff:d6:09:85:32:a6:4d:9b:71:fd:7d:8d:
62:a8:5f:da:2d:39:e4:8e:c5:ad:0d:55:7d:27:47:aa:36:34:
97:be:e3:89:39:03:fd:8f:07:75:e3:8a:d7:1c:90:81:f3:5c:
91:a4:ff:a1:1c:b0:5d:41:39:55:90:8e:97:98:c4:b5:f2:e8:
c6:80:71:14:29:6e:b9:b1:d7:79:47:3d:94:c4:91:f7:bb:c2:
3b:60:af:1e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUQij0OeH7FNquVggY+ANUoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjE0MTIwOTMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWI3OTQxNGEwOTU0ZDRiNTYzYjg1MWM3NWFkZDhmMjEzNjc4ZmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM14WnQhaUoa0bDLuzkzcn0X2/QJ
3n2FX2J8Sqj2YLSk9Z1hcBEaxZu826MzEKzGcEPO5zQlJKsNZR7+p9HDaPv4lMjH
0QNJI6faq7OVoMR5QzMJ+StuN4JZ9YduTGM3SZ7S+krfWe8obUL7mmZr4qNfTmfV
za/JQD8UXGUaqKMoJqZaOPCmCk+CxYN9vZbR4SY+bXR2kGwVPfGe0fxFPI3iaBag
8MzQIvuGmJ67m/96Mw9Boy20WKZ+8xd+5aVBTVmMjEA0gkNL6RMTK5Vd+3yODrsj
uB/H0+NJ8rXQCLs70BRRHjYt5ckzNYsKzzEDPBEmdPboWzGzjHs0Ch3vTQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFK63lBSglU1LVjuFHHWt2PITZ4/1MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcnJlVUZLQ1ZUVXRXTzRVY2RhM1k4aE5ual9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADfkE1Wbso+i3XTeT1b+
1iqr357Xlq23dsA/hXhdJmAFHUqcvuWNh9tdhkmijM/x6mhrWtGj9IVlzVvTeanT
Cr2LVCwuHLAK2LmKlmToFnWGc+aVDBCM2h7WuJYrRgjHRoRg3EcbYpigAa9fxej2
gJiB1KRpUzRndESyhkL77pRexPTIh6tTfIJC+QW12YVkKY2NkgBh/eBvLKsYj5Yy
XOX69ePnmXs7yf/WCYUypk2bcf19jWKoX9otOeSOxa0NVX0nR6o2NJe+44k5A/2P
B3XjitcckIHzXJGk/6EcsF1BOVWQjpeYxLXy6MaAcRQpbrmx13lHPZTEkfe7wjtg
rx4=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:51 2025 by rpki-client