Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-7HNMzeUmt0zJymzV39o0o5HT4Y.roa
File: 1-7HNMzeUmt0zJymzV39o0o5HT4Y.roa (raw, json)
Hash identifier: cE54QLp6GtoMjSh8ohSRdc2Kb6atDDTo+Sfm6VeixnM=
Subject key identifier: FB:B1:CD:33:37:94:9A:DD:33:27:29:B3:57:7F:68:D2:8E:47:4F:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8BAEDE2C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-7HNMzeUmt0zJymzV39o0o5HT4Y.roa
Signing time: Fri 10 Jun 2022 23:10:02 +0000
ROA not before: Fri 10 Jun 2022 23:10:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2343493164 (0x8baede2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 10 23:10:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbb1cd3337949add332729b3577f68d28e474f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:50:8c:c9:56:e0:89:ac:80:56:0a:31:d8:c5:
b7:31:3b:4f:b2:70:2b:82:46:61:64:a6:a8:09:df:
f7:58:b1:fd:7b:92:1c:6e:6e:f6:1e:e7:b5:4d:88:
47:7c:79:68:f4:5a:6b:bd:5c:84:ea:83:88:64:62:
77:e1:c8:e0:47:d3:40:7e:ee:1a:50:4e:77:d2:66:
d7:26:42:b8:67:91:2a:63:6c:9c:29:de:68:fd:8d:
6e:d9:5e:41:0c:54:2e:cd:1d:ec:2b:d6:b6:4c:72:
69:4c:d5:cf:e6:64:20:f5:cc:02:07:1d:bc:27:b6:
11:96:d3:40:fc:97:67:a8:dd:32:d1:0c:7f:2d:a9:
82:d0:dd:d2:8d:e1:b7:5d:a8:2d:7f:b6:91:a6:14:
6b:6f:59:3e:25:15:fd:8f:f3:10:2a:8f:59:e5:b6:
12:1c:11:8b:5c:b4:70:83:36:3a:c5:20:21:39:4f:
64:81:27:10:c2:ba:c8:a1:54:02:e3:63:e4:ac:8b:
ef:7b:36:39:c1:c6:7e:c8:40:15:c8:41:8a:64:8b:
4f:7c:fa:12:bd:4c:f7:36:e5:57:cf:62:6c:99:b9:
b5:1c:c2:f3:29:b6:b8:c2:de:a6:ce:f9:97:b9:df:
27:88:15:20:5f:80:da:1d:c8:97:59:63:01:4d:1c:
ac:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B1:CD:33:37:94:9A:DD:33:27:29:B3:57:7F:68:D2:8E:47:4F:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-7HNMzeUmt0zJymzV39o0o5HT4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:36:5f:8a:e1:7e:a1:da:f1:a2:6d:11:31:88:8c:db:06:69:
86:27:ef:52:04:51:44:7b:8b:c1:57:51:ee:3e:34:be:98:23:
0d:ab:85:7e:a9:cd:75:96:2f:c4:e7:e0:98:04:de:8a:7a:15:
ed:e2:be:66:6e:8e:24:00:81:6e:49:5e:3f:9a:c4:cd:50:f3:
e1:5f:05:30:ca:ef:23:c3:a7:e7:3d:3f:75:72:34:47:44:19:
da:99:df:a1:16:12:0f:a4:21:56:df:1f:48:8c:85:f5:71:4e:
bf:e1:c4:0d:ee:86:f5:c9:b6:f0:6c:1d:bd:85:58:a8:7b:ed:
c6:a2:e0:f1:44:55:36:e8:88:a9:d5:a6:07:19:c3:cd:f9:4f:
06:ce:43:93:26:cc:55:1b:e3:11:95:af:9a:79:47:d0:97:52:
87:73:3b:cb:8d:75:53:00:ff:ce:e8:61:5a:54:b8:85:d9:cd:
09:e4:f9:8b:da:96:e0:f5:d2:6d:43:86:e8:26:0a:ef:7c:36:
2a:99:2e:bb:a8:d5:fa:a8:ef:d9:b4:75:00:ba:c7:fb:b8:a0:
44:b2:a3:08:f4:21:2c:15:ad:73:fd:5a:66:0c:4e:68:86:5c:
4d:b7:1b:8e:0f:b9:ce:f4:9d:00:90:8f:97:1b:e9:4b:a0:cb:
52:1b:d2:63
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIFAIuu3iwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MTAyMzEwMDJaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGZiYjFjZDMzMzc5
NDlhZGQzMzI3MjliMzU3N2Y2OGQyOGU0NzRmODYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCVUIzJVuCJrIBWCjHYxbcxO0+ycCuCRmFkpqgJ3/dYsf17
khxubvYe57VNiEd8eWj0Wmu9XITqg4hkYnfhyOBH00B+7hpQTnfSZtcmQrhnkSpj
bJwp3mj9jW7ZXkEMVC7NHewr1rZMcmlM1c/mZCD1zAIHHbwnthGW00D8l2eo3TLR
DH8tqYLQ3dKN4bddqC1/tpGmFGtvWT4lFf2P8xAqj1nlthIcEYtctHCDNjrFICE5
T2SBJxDCusihVALjY+Ssi+97NjnBxn7IQBXIQYpki098+hK9TPc25VfPYmyZubUc
wvMptrjC3qbO+Ze53yeIFSBfgNodyJdZYwFNHKzXAgMBAAGjggIbMIICFzAdBgNV
HQ4EFgQU+7HNMzeUmt0zJymzV39o0o5HT4YwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGOBggrBgEFBQcBCwSB
gTB/MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS8xLTdITk16ZVVtdDB6SnltelYzOW8wbzVIVDRZLnJvYTCBgQYDVR0fBHoweDB2
oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC81
ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2LzEvY2dSNzRWc25X
UUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8EAgACMAkDBwAgAQZ8
AGQwDQYJKoZIhvcNAQELBQADggEBAIE2X4rhfqHa8aJtETGIjNsGaYYn71IEUUR7
i8FXUe4+NL6YIw2rhX6pzXWWL8Tn4JgE3op6Fe3ivmZujiQAgW5JXj+axM1Q8+Ff
BTDK7yPDp+c9P3VyNEdEGdqZ36EWEg+kIVbfH0iMhfVxTr/hxA3uhvXJtvBsHb2F
WKh77cai4PFEVTboiKnVpgcZw835TwbOQ5MmzFUb4xGVr5p5R9CXUodzO8uNdVMA
/87oYVpUuIXZzQnk+YvaluD10m1DhugmCu98NiqZLruo1fqo79m0dQC6x/u4oESy
owj0ISwVrXP9WmYMTmiGXE23G44Puc70nQCQj5cb6Uugy1Ib0mM=
-----END CERTIFICATE-----
Generated at Fri May 2 16:03:31 2025 by rpki-client