Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Ek3UPMRD6YcmMoQJ6tPXKF8pVI.roa
File: 2Ek3UPMRD6YcmMoQJ6tPXKF8pVI.roa (raw, json)
Hash identifier: 5D6CurkzEBy4D4jLH9wg/jWr2HL+C3LaeKrwDVgsVp8=
Subject key identifier: D8:49:37:50:F3:11:0F:A6:1C:98:CA:10:27:AB:4F:5C:A1:7C:A5:52
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 74ED26F3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Ek3UPMRD6YcmMoQJ6tPXKF8pVI.roa
Signing time: Wed 23 Mar 2022 04:10:16 +0000
ROA not before: Wed 23 Mar 2022 04:10:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1961699059 (0x74ed26f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 23 04:10:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8493750f3110fa61c98ca1027ab4f5ca17ca552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:91:ce:50:70:8f:5f:72:8e:95:dd:9a:dd:20:
b3:8d:19:c0:23:11:f2:cc:9f:ce:0e:6e:44:a7:c5:
fb:c5:b6:ee:7a:cd:a2:02:61:cd:eb:07:84:cd:39:
b9:39:84:75:cd:66:56:89:27:7c:0b:73:5c:90:f7:
49:75:5e:c9:84:e0:ce:76:03:7b:f3:c2:c3:c5:61:
f9:9a:69:9b:3b:4b:d5:66:2c:d2:c2:83:93:ef:22:
09:60:8b:24:f6:a5:26:ba:25:da:1f:e8:1f:0c:33:
90:21:38:47:8a:91:52:2f:51:a8:50:82:63:35:40:
9b:99:ab:6d:3f:8e:14:fd:74:67:58:ed:e6:f5:4b:
b4:4e:72:a7:82:b5:d8:fc:df:ac:da:52:75:37:28:
90:59:64:39:c9:e2:06:c1:39:90:7e:45:1f:a6:c4:
75:fc:da:4b:1f:a0:00:d3:f2:7b:d0:8c:69:a6:e4:
0a:8d:b0:03:36:42:b7:38:b4:0b:0c:4b:e9:d4:56:
8b:ac:4b:82:fd:13:e0:81:0f:ff:1c:7e:dd:fb:05:
95:bc:72:aa:58:4c:ef:9b:93:1e:88:a5:67:1e:c4:
90:45:5d:5b:5a:fd:f6:7f:64:df:82:cd:aa:53:05:
4c:87:bf:fa:34:a3:8d:c0:92:5c:8b:e9:c3:51:f9:
f0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:49:37:50:F3:11:0F:A6:1C:98:CA:10:27:AB:4F:5C:A1:7C:A5:52
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Ek3UPMRD6YcmMoQJ6tPXKF8pVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:83:e8:e4:87:d4:8e:49:3e:95:59:d8:63:00:8e:58:98:71:
c4:f6:ca:e8:0c:c9:97:50:98:74:31:97:f9:ea:ee:86:3f:c0:
32:2e:85:7b:d4:f8:24:1a:c1:3b:34:54:ff:92:78:54:4b:6b:
e0:4e:01:74:bb:84:8f:39:60:84:38:cb:d6:41:ea:0a:db:3b:
90:d3:93:9d:a2:33:e5:4d:30:6e:4d:f4:88:b8:29:01:5c:0e:
6f:fd:dc:0f:7f:76:7b:fd:8a:e5:90:77:e1:8c:fe:d9:d0:84:
13:9c:86:c4:70:36:f4:84:22:96:28:9b:26:84:c6:a7:b1:98:
39:1d:a3:ce:11:e4:99:e1:f7:e9:ff:69:01:5c:de:01:cb:7c:
70:f3:22:8b:90:19:36:ac:4d:b2:d3:86:ba:64:15:4b:31:82:
f4:3e:c7:38:2b:0f:46:42:64:62:f6:8b:79:62:58:fa:25:cf:
eb:25:06:17:47:3d:6e:5f:6c:c7:c7:dc:74:e9:c1:9d:cb:7c:
22:8d:09:c3:56:cf:92:a6:d3:56:da:40:36:4e:85:e8:36:0e:
3c:6a:e2:bd:e8:0a:41:ca:92:44:eb:cd:4f:fb:d3:34:29:91:
50:6b:f8:6b:d9:91:00:b1:87:ff:cb:fc:59:b4:ec:75:75:4f:
2e:d7:3e:24
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEdO0m8zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMy
MzA0MTAxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDg0OTM3NTBmMzEx
MGZhNjFjOThjYTEwMjdhYjRmNWNhMTdjYTU1MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJORzlBwj19yjpXdmt0gs40ZwCMR8syfzg5uRKfF+8W27nrN
ogJhzesHhM05uTmEdc1mVoknfAtzXJD3SXVeyYTgznYDe/PCw8Vh+ZppmztL1WYs
0sKDk+8iCWCLJPalJrol2h/oHwwzkCE4R4qRUi9RqFCCYzVAm5mrbT+OFP10Z1jt
5vVLtE5yp4K12PzfrNpSdTcokFlkOcniBsE5kH5FH6bEdfzaSx+gANPye9CMaabk
Co2wAzZCtzi0CwxL6dRWi6xLgv0T4IEP/xx+3fsFlbxyqlhM75uTHoilZx7EkEVd
W1r99n9k34LNqlMFTIe/+jSjjcCSXIvpw1H58BECAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTYSTdQ8xEPphyYyhAnq09coXylUjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
LzJFazNVUE1SRDZZY21Nb1FKNnRQWEtGOHBWSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCNg+jkh9SOST6VWdhjAI5YmHHE9sroDMmXUJh0
MZf56u6GP8AyLoV71PgkGsE7NFT/knhUS2vgTgF0u4SPOWCEOMvWQeoK2zuQ05Od
ojPlTTBuTfSIuCkBXA5v/dwPf3Z7/YrlkHfhjP7Z0IQTnIbEcDb0hCKWKJsmhMan
sZg5HaPOEeSZ4ffp/2kBXN4By3xw8yKLkBk2rE2y04a6ZBVLMYL0Psc4Kw9GQmRi
9ot5Ylj6Jc/rJQYXRz1uX2zHx9x06cGdy3wijQnDVs+SptNW2kA2ToXoNg48auK9
6ApBypJE681P+9M0KZFQa/hr2ZEAsYf/y/xZtOx1dU8u1z4k
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:21 2025 by rpki-client