Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5BNaT3wUAWGYtNljrlPoOfsiONg.roa
File: 5BNaT3wUAWGYtNljrlPoOfsiONg.roa (raw, json)
Hash identifier: 3XYWIwhnRu8MQdfRF11eRB9ssuSb34nn/XPqQKodWV0=
Subject key identifier: E4:13:5A:4F:7C:14:01:61:98:B4:D9:63:AE:53:E8:39:FB:22:38:D8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7BC93353
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5BNaT3wUAWGYtNljrlPoOfsiONg.roa
Signing time: Sat 16 Apr 2022 13:10:33 +0000
ROA not before: Sat 16 Apr 2022 13:10:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2076783443 (0x7bc93353)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 16 13:10:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4135a4f7c14016198b4d963ae53e839fb2238d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e4:1f:62:1c:f5:d4:d3:0e:e3:11:2d:19:ef:
b5:7c:fb:bb:ca:2f:57:78:64:cf:96:d1:2e:e2:fb:
b5:8c:e3:50:bb:d3:d0:10:aa:a9:fa:c9:4a:b7:bb:
9a:e6:0a:b2:cc:a0:b6:d4:07:3f:b1:28:49:cf:d8:
96:22:da:85:0e:97:60:a7:e9:47:f8:17:39:cd:a1:
fd:c5:a2:47:d3:e2:a5:97:66:11:8c:96:04:ca:36:
29:fd:56:b0:9a:ba:5e:56:f7:ab:36:42:24:49:3e:
ee:2a:d4:85:c3:09:43:d0:8a:8e:ea:74:5d:98:51:
6d:4e:75:2c:35:b4:a1:dd:14:7d:b0:ef:82:25:63:
33:9e:e8:c0:e5:d8:f8:74:d9:cd:19:c3:55:d9:ea:
29:f1:49:e3:e3:bd:ca:c2:4a:81:d0:f7:6a:84:b7:
2b:a6:24:d4:ec:97:ff:db:72:34:23:2c:60:7b:81:
6e:ad:10:fd:26:5f:b5:1d:6b:e4:fb:09:6a:75:f7:
ea:fd:66:68:99:99:f2:9e:00:ce:90:91:16:0f:a0:
28:14:d9:03:49:69:d3:4d:70:8b:01:ef:6b:ab:70:
61:ca:e9:49:55:ae:7a:ca:28:80:43:e7:06:aa:de:
2a:36:ff:43:e8:3a:e3:37:39:bd:af:36:92:ba:73:
8d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:13:5A:4F:7C:14:01:61:98:B4:D9:63:AE:53:E8:39:FB:22:38:D8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5BNaT3wUAWGYtNljrlPoOfsiONg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:6a:e2:1a:07:2f:9a:76:e4:bd:27:b4:ee:7b:9a:95:07:b2:
82:ce:ea:db:cb:5f:2b:24:a4:80:f5:2b:00:d4:ce:3f:47:8a:
59:66:96:2a:be:ad:2a:ad:25:16:c1:32:6b:e2:85:aa:1a:a7:
0a:78:46:1d:cb:60:77:ae:b3:6e:b8:a1:35:51:99:35:93:6e:
85:93:b6:8a:6b:85:7c:31:6c:b7:da:1b:2b:a4:00:70:28:de:
69:93:70:28:64:55:df:6f:3a:98:77:85:b0:fc:77:93:0b:49:
ab:90:90:cc:4b:2f:d9:00:bf:0f:1b:5a:cc:20:82:a7:2c:63:
84:a9:e0:18:c0:39:3b:85:7f:c9:b7:f1:b0:a5:c5:5b:bc:d6:
92:b8:cf:93:10:5e:96:a5:c2:85:0a:f0:6d:28:ad:08:4c:1f:
5a:eb:0a:67:ce:0d:bd:a9:3a:b2:fc:f6:43:f2:35:7d:85:60:
ca:d7:94:a6:f7:6e:2d:fd:d2:f7:aa:08:72:67:68:e5:68:11:
41:d9:bb:18:67:3d:3a:94:cc:16:86:37:f3:29:76:db:2e:ce:
ed:be:09:28:08:0d:d2:01:34:eb:d8:f5:0d:84:69:c4:40:08:
c9:60:62:3f:dd:e4:6e:c4:06:d0:74:e3:a0:ca:26:de:4d:00:
b1:a9:a5:16
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEe8kzUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDQx
NjEzMTAzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTQxMzVhNGY3YzE0
MDE2MTk4YjRkOTYzYWU1M2U4MzlmYjIyMzhkODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOzkH2Ic9dTTDuMRLRnvtXz7u8ovV3hkz5bRLuL7tYzjULvT
0BCqqfrJSre7muYKssygttQHP7EoSc/YliLahQ6XYKfpR/gXOc2h/cWiR9PipZdm
EYyWBMo2Kf1WsJq6Xlb3qzZCJEk+7irUhcMJQ9CKjup0XZhRbU51LDW0od0UfbDv
giVjM57owOXY+HTZzRnDVdnqKfFJ4+O9ysJKgdD3aoS3K6Yk1OyX/9tyNCMsYHuB
bq0Q/SZftR1r5PsJanX36v1maJmZ8p4AzpCRFg+gKBTZA0lp001wiwHva6twYcrp
SVWuesoogEPnBqreKjb/Q+g64zc5va82krpzjQ0CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTkE1pPfBQBYZi02WOuU+g5+yI42DAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
LzVCTmFUM3dVQVdHWXRObGpybFBvT2ZzaU9OZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQBtauIaBy+aduS9J7Tue5qVB7KCzurby18rJKSA
9SsA1M4/R4pZZpYqvq0qrSUWwTJr4oWqGqcKeEYdy2B3rrNuuKE1UZk1k26Fk7aK
a4V8MWy32hsrpABwKN5pk3AoZFXfbzqYd4Ww/HeTC0mrkJDMSy/ZAL8PG1rMIIKn
LGOEqeAYwDk7hX/Jt/GwpcVbvNaSuM+TEF6WpcKFCvBtKK0ITB9a6wpnzg29qTqy
/PZD8jV9hWDK15Sm924t/dL3qghyZ2jlaBFB2bsYZz06lMwWhjfzKXbbLs7tvgko
CA3SATTr2PUNhGnEQAjJYGI/3eRuxAbQdOOgyibeTQCxqaUW
-----END CERTIFICATE-----
Generated at Thu May 1 19:17:18 2025 by rpki-client