Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/22t2mi2YoGsbOizvZoAyU6BWfTI.roa
File: 22t2mi2YoGsbOizvZoAyU6BWfTI.roa (raw, json)
Hash identifier: 3+ZWKAF5aswT8NgW9N5ClJkYqfEP0qIu2ACLPByanTg=
Subject key identifier: DB:6B:76:9A:2D:98:A0:6B:1B:3A:2C:EF:66:80:32:53:A0:56:7D:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182542CE041C0672B06D734E014C993D781
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/22t2mi2YoGsbOizvZoAyU6BWfTI.roa
Signing time: Sun 31 Jul 2022 12:13:23 +0000
ROA not before: Sun 31 Jul 2022 12:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:54:2c:e0:41:c0:67:2b:06:d7:34:e0:14:c9:93:d7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 31 12:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db6b769a2d98a06b1b3a2cef66803253a0567d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:41:92:f6:c9:ac:fd:67:a8:23:53:69:29:0d:
ae:d5:86:c2:32:24:6a:d5:2f:e6:d3:2e:1c:f5:0a:
f1:07:96:f5:51:1a:cf:87:73:72:d7:a6:72:e2:b5:
57:44:cb:9a:54:2c:56:04:65:b8:99:58:f6:3a:e1:
ca:dd:5e:56:81:6d:f4:63:9e:cf:0c:6b:a6:e6:4f:
a0:42:7e:f2:e5:05:51:8d:58:1f:d6:0d:f9:ae:26:
8a:c1:2f:34:82:40:d0:48:2d:9b:42:a0:7a:cc:68:
4f:52:cb:95:16:f5:4c:51:4e:ae:97:b4:2c:52:15:
97:ba:90:34:9f:f6:92:4b:19:54:12:56:02:6b:1a:
14:4d:de:59:fe:74:bc:ed:94:f9:ef:b8:78:c5:a1:
1b:3b:55:bb:3d:41:8c:a1:15:55:16:14:d4:46:e7:
8a:5d:ef:f8:91:f6:74:f4:5d:50:5c:d8:76:2a:0c:
f9:66:af:1e:0c:4d:a1:9d:44:48:92:c0:f7:43:d3:
2c:17:2e:23:20:a8:92:51:c0:52:fe:02:42:6f:82:
4a:b9:3c:2b:df:d2:08:7d:08:be:a4:4b:d0:b1:64:
6e:6c:ce:86:ab:6e:eb:ec:09:a8:95:b9:da:57:ad:
b4:68:95:c1:0f:ed:1f:03:ab:f8:97:2d:6d:c2:dd:
e5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6B:76:9A:2D:98:A0:6B:1B:3A:2C:EF:66:80:32:53:A0:56:7D:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/22t2mi2YoGsbOizvZoAyU6BWfTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:36:da:55:88:90:a6:7e:e3:a0:0e:ed:b7:e7:98:27:19:50:
04:76:9b:ad:e7:f0:9f:44:0b:82:23:b3:31:9c:6d:f6:77:aa:
b1:dc:74:1e:98:dc:24:e1:b2:7e:57:2f:76:ef:bb:27:e0:66:
21:7e:fa:a8:5b:e4:81:9e:60:7e:de:07:55:73:a5:a1:2c:d0:
aa:80:95:6a:2f:56:fd:94:3b:06:75:bd:8e:60:bc:ed:68:e8:
ae:2b:6e:f8:ad:71:3d:90:4c:71:5d:12:9c:cc:f4:96:13:1b:
f5:2a:e4:5e:c1:7a:28:e1:04:a8:86:6e:11:cb:41:3a:5a:0b:
44:26:b5:d3:b8:8c:c7:90:7a:38:d8:3b:ca:b5:7b:b7:99:12:
cc:3e:bb:4f:45:2e:d7:4b:37:ea:76:d6:26:a4:6f:35:ac:d0:
cd:1a:a1:ae:4c:16:b7:6c:ea:f8:41:18:b3:ad:42:81:e6:a2:
91:a5:c0:f0:bc:1c:d4:3f:dd:62:20:d4:32:d5:1c:aa:7c:57:
33:c6:43:dd:69:b6:ee:16:91:2b:76:ea:19:12:7e:31:71:5f:
f1:81:0f:76:9e:0b:ee:a6:8a:f8:07:1a:91:8f:5c:69:fc:d8:
5c:82:aa:89:27:7f:ae:96:8a:fd:b0:d5:a9:5c:5a:6b:3a:35:
10:5f:ec:09
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYJULOBBwGcrBtc04BTJk9eBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzMxMTIxMzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjZiNzY5YTJkOThhMDZiMWIzYTJjZWY2NjgwMzI1M2EwNTY3ZDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUGS9sms/WeoI1NpKQ2u1YbCMiRq
1S/m0y4c9QrxB5b1URrPh3Ny16Zy4rVXRMuaVCxWBGW4mVj2OuHK3V5WgW30Y57P
DGum5k+gQn7y5QVRjVgf1g35riaKwS80gkDQSC2bQqB6zGhPUsuVFvVMUU6ul7Qs
UhWXupA0n/aSSxlUElYCaxoUTd5Z/nS87ZT577h4xaEbO1W7PUGMoRVVFhTURueK
Xe/4kfZ09F1QXNh2Kgz5Zq8eDE2hnURIksD3Q9MsFy4jIKiSUcBS/gJCb4JKuTwr
39IIfQi+pEvQsWRubM6Gq27r7AmolbnaV620aJXBD+0fA6v4ly1twt3lrwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNtrdpotmKBrGzos72aAMlOgVn0yMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMjJ0Mm1pMllvR3NiT2l6dlpvQXlVNkJXZlRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABE22lWIkKZ+46AO7bfn
mCcZUAR2m63n8J9EC4IjszGcbfZ3qrHcdB6Y3CThsn5XL3bvuyfgZiF++qhb5IGe
YH7eB1VzpaEs0KqAlWovVv2UOwZ1vY5gvO1o6K4rbvitcT2QTHFdEpzM9JYTG/Uq
5F7BeijhBKiGbhHLQTpaC0QmtdO4jMeQejjYO8q1e7eZEsw+u09FLtdLN+p21iak
bzWs0M0aoa5MFrds6vhBGLOtQoHmopGlwPC8HNQ/3WIg1DLVHKp8VzPGQ91ptu4W
kSt26hkSfjFxX/GBD3aeC+6mivgHGpGPXGn82FyCqoknf66Wiv2w1alcWms6NRBf
7Ak=
-----END CERTIFICATE-----
Generated at Thu May 1 07:22:07 2025 by rpki-client