Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xAWo16Q05YR35qCbmiOF7Ujsnb8.roa
File: xAWo16Q05YR35qCbmiOF7Ujsnb8.roa (raw, json)
Hash identifier: 21P/y5P8FP4jGnUOFFAPhoVV0u5QNaIJ7aBiBy7Fp1I=
Subject key identifier: C4:05:A8:D7:A4:34:E5:84:77:E6:A0:9B:9A:23:85:ED:48:EC:9D:BF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7DC87072
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xAWo16Q05YR35qCbmiOF7Ujsnb8.roa
Signing time: Sat 23 Apr 2022 09:10:32 +0000
ROA not before: Sat 23 Apr 2022 09:10:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2110287986 (0x7dc87072)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 23 09:10:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c405a8d7a434e58477e6a09b9a2385ed48ec9dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e1:cf:90:d0:d1:c8:07:59:ee:5b:d3:37:fb:
24:1b:33:06:c4:0d:cb:05:57:33:0c:c4:df:f6:12:
3e:97:ea:00:5b:87:76:e6:d8:24:bb:b5:ed:ae:73:
33:cb:11:88:5b:a1:c3:f2:9a:1c:2d:33:b7:db:19:
1e:7d:9e:c3:fb:8a:fd:be:b6:ec:c2:f7:ee:8b:f1:
8f:48:89:9c:1d:93:eb:a5:63:50:03:5b:b9:49:48:
51:6f:84:62:2b:ab:c0:48:ff:b2:4e:0b:5f:a6:57:
f3:84:8c:a1:79:c2:6c:ef:5a:ef:f5:ec:b9:98:f9:
4d:50:40:93:96:18:11:9b:e4:d1:97:e8:2a:95:41:
95:e9:ab:7a:47:a7:30:19:0b:f5:37:01:b9:42:78:
bb:eb:74:15:90:1f:56:96:20:12:95:99:88:e8:dc:
80:4a:08:35:88:e1:13:11:fe:9c:64:6c:e9:20:b4:
37:a1:ae:1f:eb:c7:7f:d6:8e:c4:62:08:25:0c:f5:
db:67:1a:75:16:40:80:b8:c6:23:28:e7:cb:88:3e:
cb:28:05:af:7c:4a:fa:9c:05:57:eb:a7:26:74:f5:
cf:95:58:48:f2:97:34:67:d8:7a:00:db:57:c9:ff:
2e:28:37:ab:fa:15:ec:a5:63:ee:50:c5:40:f5:3a:
2f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:05:A8:D7:A4:34:E5:84:77:E6:A0:9B:9A:23:85:ED:48:EC:9D:BF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xAWo16Q05YR35qCbmiOF7Ujsnb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:0d:0c:bd:ab:c8:4d:04:70:2a:5a:2f:c5:72:dd:a7:dc:a6:
c4:96:1a:06:12:a8:04:aa:2b:b6:20:69:19:bf:26:f2:1a:a2:
eb:62:ed:66:28:8f:be:f9:c3:b0:3b:c7:44:c8:30:c3:10:56:
5f:60:65:d0:6f:c7:af:d5:15:42:e6:5d:84:61:4f:d8:f6:e2:
fc:86:33:43:eb:7d:3d:0c:b5:69:e2:22:ac:3c:7b:bf:0f:2c:
9e:35:a2:56:cd:b7:48:c6:fa:eb:98:b3:90:93:69:ab:dd:26:
74:71:f7:d7:78:94:9f:35:b3:2e:88:5b:ea:0a:c3:48:ee:6b:
75:8a:93:5a:87:a9:35:16:24:3f:a4:11:a3:4d:df:08:a0:a5:
d5:a4:e8:09:45:c5:0e:39:e7:2b:1b:91:d5:9c:ed:49:ce:c4:
3c:aa:a2:e9:06:01:4e:5e:40:de:4a:bc:91:c2:87:62:13:97:
3c:8f:5e:cb:b5:94:c7:1e:3a:8d:59:32:21:fa:47:7a:12:cb:
cc:06:29:4e:6a:11:fb:6d:a8:fd:61:7e:5e:89:77:a5:fe:f2:
05:47:62:7a:f5:c1:4f:74:9a:a3:cf:3e:80:1a:38:8a:39:ee:
5d:c5:fa:43:66:bf:9a:2e:47:fc:32:c8:71:c4:4f:b7:74:13:
a4:0b:75:80
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEfchwcjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDQy
MzA5MTAzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzQwNWE4ZDdhNDM0
ZTU4NDc3ZTZhMDliOWEyMzg1ZWQ0OGVjOWRiZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN3hz5DQ0cgHWe5b0zf7JBszBsQNywVXMwzE3/YSPpfqAFuH
dubYJLu17a5zM8sRiFuhw/KaHC0zt9sZHn2ew/uK/b627ML37ovxj0iJnB2T66Vj
UANbuUlIUW+EYiurwEj/sk4LX6ZX84SMoXnCbO9a7/XsuZj5TVBAk5YYEZvk0Zfo
KpVBlemrekenMBkL9TcBuUJ4u+t0FZAfVpYgEpWZiOjcgEoINYjhExH+nGRs6SC0
N6GuH+vHf9aOxGIIJQz122cadRZAgLjGIyjny4g+yygFr3xK+pwFV+unJnT1z5VY
SPKXNGfYegDbV8n/Lig3q/oV7KVj7lDFQPU6L6sCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTEBajXpDTlhHfmoJuaI4XtSOydvzAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L3hBV28xNlEwNVlSMzVxQ2JtaU9GN1Vqc25iOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQA5DQy9q8hNBHAqWi/Fct2n3KbElhoGEqgEqiu2
IGkZvybyGqLrYu1mKI+++cOwO8dEyDDDEFZfYGXQb8ev1RVC5l2EYU/Y9uL8hjND
6309DLVp4iKsPHu/DyyeNaJWzbdIxvrrmLOQk2mr3SZ0cffXeJSfNbMuiFvqCsNI
7mt1ipNah6k1FiQ/pBGjTd8IoKXVpOgJRcUOOecrG5HVnO1JzsQ8qqLpBgFOXkDe
SryRwodiE5c8j17LtZTHHjqNWTIh+kd6EsvMBilOahH7baj9YX5eiXel/vIFR2J6
9cFPdJqjzz6AGjiKOe5dxfpDZr+aLkf8MshxxE+3dBOkC3WA
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:14:55 2025 by rpki-client