Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1F2fiNlpnomoINg-qVc8lImPvcM.roa
File: 1F2fiNlpnomoINg-qVc8lImPvcM.roa (raw, json)
Hash identifier: Mj6/YL5kqPghtTZtXy74+nzZfjvZlA8GU/wYWlmWbOc=
Subject key identifier: D4:5D:9F:88:D9:69:9E:89:A8:20:D8:3E:A9:57:3C:94:89:8F:BD:C3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7ECE61DE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1F2fiNlpnomoINg-qVc8lImPvcM.roa
Signing time: Wed 27 Apr 2022 01:09:41 +0000
ROA not before: Wed 27 Apr 2022 01:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2127454686 (0x7ece61de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 27 01:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d45d9f88d9699e89a820d83ea9573c94898fbdc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3d:ff:6e:9e:f3:e9:8f:20:c3:fe:20:7b:70:
f7:01:94:3e:1c:56:63:f9:2f:b0:e8:9d:b0:a8:20:
a9:fa:38:b5:86:12:41:9e:60:76:ac:c9:11:c6:e9:
db:0d:e8:8d:84:dd:a6:51:f4:a2:34:48:15:32:af:
02:0d:39:5b:dc:c9:84:6c:3d:a6:14:23:74:c6:d3:
9a:09:20:f4:f3:df:38:d9:e0:ba:fb:82:46:4b:5e:
f4:0a:43:12:eb:0c:e3:d5:0a:57:dc:70:6b:87:1e:
de:4d:6e:9a:b2:58:9f:ca:4d:46:1b:63:c3:95:06:
d5:b3:e0:89:b2:a6:b0:47:47:16:92:73:c1:12:56:
42:e8:98:58:ae:c5:57:49:6b:9c:af:a4:f4:48:83:
ca:91:3e:65:ff:08:b3:95:52:1e:44:eb:05:33:e2:
b5:ee:5f:b8:28:6b:1f:c8:47:f9:b0:de:2b:8d:1d:
65:e5:1b:0d:85:af:24:25:7d:2d:46:7d:bf:09:1d:
50:0f:46:8d:0c:b1:f3:4e:3d:e7:57:41:23:0d:04:
e8:df:81:79:99:97:22:0b:4b:a6:2f:6a:76:ab:73:
33:47:da:dd:b4:7b:f1:21:29:92:49:ee:07:4d:97:
43:05:14:6a:71:b3:28:83:c5:43:10:80:55:c0:4b:
0b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5D:9F:88:D9:69:9E:89:A8:20:D8:3E:A9:57:3C:94:89:8F:BD:C3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1F2fiNlpnomoINg-qVc8lImPvcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:14:56:9a:4f:fe:8a:32:98:5f:df:61:8b:b3:a3:ec:9e:56:
c1:3a:67:5f:f8:3b:38:3d:60:50:cf:14:27:6e:c0:89:de:c4:
3b:71:e8:6a:6d:74:39:fa:d1:62:4e:f3:aa:75:d7:ef:02:ab:
a7:10:3a:8c:44:41:4e:79:a8:c6:bc:39:e2:62:6c:74:23:fb:
e1:b2:f1:03:b5:69:0d:b9:6e:5a:4f:eb:6c:78:0e:7b:21:ed:
c2:c2:5f:d7:f3:77:0f:ac:0c:46:41:86:e2:8a:3b:2f:93:3c:
dc:23:65:63:e5:cf:3b:fb:90:0c:6a:49:e4:dc:c1:77:35:52:
b1:0a:e0:fd:4b:b5:c0:80:99:9f:ee:13:a1:81:a2:d0:47:d0:
9c:ec:35:71:19:ca:fc:36:e0:38:ac:d9:b3:ae:15:5f:5a:6a:
92:fe:34:b4:40:88:e3:b2:80:45:83:1a:ed:59:c2:0c:85:03:
5b:d0:88:e4:a4:eb:2d:c5:d8:9f:15:54:dc:31:5b:71:cd:92:
37:e9:83:43:08:93:d1:a3:86:18:f1:8f:20:ee:98:e0:5f:d5:
d0:5f:6f:49:0c:fa:4a:c0:0e:9d:c8:22:17:d9:f2:79:b2:70:
4d:57:2c:b4:0b:6f:1e:2a:39:83:80:3f:4a:2c:ec:8a:9d:ec:
7c:86:d5:ff
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEfs5h3jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDQy
NzAxMDk0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDQ1ZDlmODhkOTY5
OWU4OWE4MjBkODNlYTk1NzNjOTQ4OThmYmRjMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIk9/26e8+mPIMP+IHtw9wGUPhxWY/kvsOidsKggqfo4tYYS
QZ5gdqzJEcbp2w3ojYTdplH0ojRIFTKvAg05W9zJhGw9phQjdMbTmgkg9PPfONng
uvuCRkte9ApDEusM49UKV9xwa4ce3k1umrJYn8pNRhtjw5UG1bPgibKmsEdHFpJz
wRJWQuiYWK7FV0lrnK+k9EiDypE+Zf8Is5VSHkTrBTPite5fuChrH8hH+bDeK40d
ZeUbDYWvJCV9LUZ9vwkdUA9GjQyx804951dBIw0E6N+BeZmXIgtLpi9qdqtzM0fa
3bR78SEpkknuB02XQwUUanGzKIPFQxCAVcBLC2UCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTUXZ+I2Wmeiagg2D6pVzyUiY+9wzAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
LzFGMmZpTmxwbm9tb0lOZy1xVmM4bEltUHZjTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCuFFaaT/6KMphf32GLs6PsnlbBOmdf+Ds4PWBQ
zxQnbsCJ3sQ7cehqbXQ5+tFiTvOqddfvAqunEDqMREFOeajGvDniYmx0I/vhsvED
tWkNuW5aT+tseA57Ie3Cwl/X83cPrAxGQYbiijsvkzzcI2Vj5c87+5AMaknk3MF3
NVKxCuD9S7XAgJmf7hOhgaLQR9Cc7DVxGcr8NuA4rNmzrhVfWmqS/jS0QIjjsoBF
gxrtWcIMhQNb0IjkpOstxdifFVTcMVtxzZI36YNDCJPRo4YY8Y8g7pjgX9XQX29J
DPpKwA6dyCIX2fJ5snBNVyy0C28eKjmDgD9KLOyKnex8htX/
-----END CERTIFICATE-----
Generated at Thu May 1 04:37:15 2025 by rpki-client