Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/26FOly9ywQh6kH9e3Bb8-oK80lg.roa
File: 26FOly9ywQh6kH9e3Bb8-oK80lg.roa (raw, json)
Hash identifier: ZR1RLAQZWaBSvg59IwWnj/s4t/E772/QZgc65sgb7kg=
Subject key identifier: DB:A1:4E:97:2F:72:C1:08:7A:90:7F:5E:DC:16:FC:FA:82:BC:D2:58
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7E51476E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/26FOly9ywQh6kH9e3Bb8-oK80lg.roa
Signing time: Mon 25 Apr 2022 08:09:35 +0000
ROA not before: Mon 25 Apr 2022 08:09:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2119255918 (0x7e51476e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 25 08:09:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dba14e972f72c1087a907f5edc16fcfa82bcd258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:18:69:dc:fb:ae:62:d3:b2:78:9d:56:07:
fa:49:55:4a:03:fd:37:71:65:53:62:c5:ca:a0:f9:
11:6b:b9:ec:3f:53:0b:6b:66:be:15:e3:00:2a:16:
9a:b9:fb:43:63:94:c8:25:26:a6:82:cc:51:d0:1e:
08:9b:3e:f7:52:29:2a:84:8b:1b:96:61:5e:46:be:
fb:a5:1e:cd:4c:05:7e:7e:f5:20:c4:36:a1:25:8d:
6b:bd:30:b2:dc:16:f4:48:b1:7b:0f:1e:93:9b:c2:
25:7e:5a:38:4d:8a:b7:7b:17:76:7a:f7:31:88:31:
18:c4:a9:31:d3:6b:72:14:d0:d6:c3:f5:63:8f:11:
0c:76:51:c4:1c:e5:d2:30:af:be:91:b6:34:2c:e9:
ff:f9:91:fc:aa:c7:45:63:fb:aa:33:13:d7:dd:03:
9c:93:49:22:ac:99:9a:6f:50:7b:ab:af:d9:69:a3:
50:11:a0:4b:73:df:4a:a3:71:19:2c:cd:69:65:c3:
7d:52:78:cc:c6:c0:66:2e:ff:26:c0:c7:9a:96:48:
f1:a6:f6:1b:bb:07:d9:e1:40:ba:4f:a5:bc:e0:b0:
55:cd:da:95:f1:1c:05:64:ae:1d:ee:ec:c4:d9:3e:
2b:d7:ed:cb:0f:3a:3b:7f:08:fe:01:16:b6:46:7b:
2c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A1:4E:97:2F:72:C1:08:7A:90:7F:5E:DC:16:FC:FA:82:BC:D2:58
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/26FOly9ywQh6kH9e3Bb8-oK80lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:52:59:4c:4d:67:57:20:14:ea:ef:e8:d0:cf:cc:7a:f0:b3:
70:fe:66:b5:e4:7f:a3:b8:64:1c:94:6f:77:fe:d0:9c:7d:39:
6d:29:92:65:b1:72:1d:1c:1a:d3:7a:d1:ee:f4:35:51:42:00:
0c:30:6e:78:60:64:ac:aa:bc:4b:fc:24:0d:90:4b:69:91:cf:
89:8e:09:ee:3e:35:bb:59:08:5d:01:4b:d4:9c:79:40:61:78:
bc:e5:cf:81:2b:de:ea:62:4c:f1:0f:44:58:6c:f7:1f:3e:4e:
2a:d2:a3:38:ec:ad:98:b3:25:f9:7e:b5:d0:3b:ae:b2:07:c5:
fa:f5:aa:b3:33:b3:24:61:78:66:18:a9:84:c2:45:0d:16:62:
9d:d7:42:73:e5:0e:28:8d:c9:db:ed:90:a8:2f:6f:51:3e:9f:
ff:65:50:ac:7f:59:14:98:7a:18:f4:75:b6:9a:de:2d:e8:03:
0c:6b:c3:47:c9:72:b2:b2:d9:a5:2a:88:fd:f7:eb:b3:76:a6:
b2:dd:d8:c3:04:e8:38:bf:36:95:59:02:da:7c:e7:e9:e0:61:
e9:75:fd:f2:46:26:9c:dd:72:b2:19:90:56:62:85:dd:44:98:
3e:41:9a:39:3d:33:a1:e2:1a:34:42:3e:4b:63:c6:fd:e1:64:
e9:3f:a7:ea
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEflFHbjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDQy
NTA4MDkzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGJhMTRlOTcyZjcy
YzEwODdhOTA3ZjVlZGMxNmZjZmE4MmJjZDI1ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL0+GGnc+65i07J4nVYH+klVSgP9N3FlU2LFyqD5EWu57D9T
C2tmvhXjACoWmrn7Q2OUyCUmpoLMUdAeCJs+91IpKoSLG5ZhXka++6UezUwFfn71
IMQ2oSWNa70wstwW9Eixew8ek5vCJX5aOE2Kt3sXdnr3MYgxGMSpMdNrchTQ1sP1
Y48RDHZRxBzl0jCvvpG2NCzp//mR/KrHRWP7qjMT190DnJNJIqyZmm9Qe6uv2Wmj
UBGgS3PfSqNxGSzNaWXDfVJ4zMbAZi7/JsDHmpZI8ab2G7sH2eFAuk+lvOCwVc3a
lfEcBWSuHe7sxNk+K9ftyw86O38I/gEWtkZ7LE0CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTboU6XL3LBCHqQf17cFvz6grzSWDAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
LzI2Rk9seTl5d1FoNmtIOWUzQmI4LW9LODBsZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCVUllMTWdXIBTq7+jQz8x68LNw/ma15H+juGQc
lG93/tCcfTltKZJlsXIdHBrTetHu9DVRQgAMMG54YGSsqrxL/CQNkEtpkc+Jjgnu
PjW7WQhdAUvUnHlAYXi85c+BK97qYkzxD0RYbPcfPk4q0qM47K2YsyX5frXQO66y
B8X69aqzM7MkYXhmGKmEwkUNFmKd10Jz5Q4ojcnb7ZCoL29RPp//ZVCsf1kUmHoY
9HW2mt4t6AMMa8NHyXKystmlKoj99+uzdqay3djDBOg4vzaVWQLafOfp4GHpdf3y
Riac3XKyGZBWYoXdRJg+QZo5PTOh4ho0Qj5LY8b94WTpP6fq
-----END CERTIFICATE-----
Generated at Sun May 4 15:53:42 2025 by rpki-client