Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5fanKe7Qm5RmJAHycI2wJMivRF0.roa
File: 5fanKe7Qm5RmJAHycI2wJMivRF0.roa (raw, json)
Hash identifier: CVpvp258qofc4G1SnSRjROWto+M8aNCRNPfRNxfoFew=
Subject key identifier: E5:F6:A7:29:EE:D0:9B:94:66:24:01:F2:70:8D:B0:24:C8:AF:44:5D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018552A065AB73774830AEC5748530F64B7A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5fanKe7Qm5RmJAHycI2wJMivRF0.roa
Signing time: Tue 27 Dec 2022 08:08:41 +0000
ROA not before: Tue 27 Dec 2022 08:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:52:a0:65:ab:73:77:48:30:ae:c5:74:85:30:f6:4b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 27 08:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5f6a729eed09b94662401f2708db024c8af445d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:b7:bb:5d:04:c5:dc:9c:23:82:e8:56:7a:
48:9f:5b:62:85:9b:59:2a:17:f1:f1:af:4d:a0:d7:
45:b9:11:a4:fa:61:b1:d6:e6:39:9c:99:f5:87:1c:
d1:17:03:41:57:2e:8b:0b:7f:99:1b:b4:20:43:53:
ac:53:34:03:2a:16:e1:71:d4:9c:db:ed:d4:17:d0:
65:19:b9:01:b4:1b:2e:ff:89:9b:a3:ba:9b:7c:c5:
e6:3e:63:da:f3:e7:81:fc:69:ed:af:fa:1e:48:ca:
66:48:1a:c9:5d:69:de:21:60:09:5d:21:64:0d:1e:
a6:49:98:f6:0a:65:65:17:47:31:cf:61:b6:b1:7f:
3a:a4:c0:c3:58:69:df:43:77:bc:85:88:02:7d:27:
89:44:e6:72:46:67:62:eb:bb:34:6d:4a:52:44:1c:
bb:b8:5d:52:05:2d:55:06:aa:bd:0b:1e:61:37:e2:
c2:de:69:3e:6b:65:4e:8f:5b:0b:e2:f6:9c:09:ce:
70:48:85:b1:ca:6a:41:e8:c9:67:25:dd:7f:18:53:
14:fd:7a:90:08:94:ef:f6:a1:30:8a:6d:f4:e6:89:
b1:b3:f4:dd:c7:80:e7:57:77:c5:29:85:51:d0:4b:
e8:98:4d:b8:ef:5b:74:62:30:3b:14:ce:c6:09:a6:
a1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F6:A7:29:EE:D0:9B:94:66:24:01:F2:70:8D:B0:24:C8:AF:44:5D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5fanKe7Qm5RmJAHycI2wJMivRF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:6f:ca:3b:41:dc:b6:bf:f2:e7:4d:08:ec:91:40:e7:65:65:
0f:b7:4b:f3:0c:b1:96:2f:9d:92:07:4f:90:6d:03:fb:91:2c:
31:59:f2:92:db:9d:d1:8a:88:ba:b4:7f:be:b9:d6:6e:28:d2:
73:d8:97:20:8d:92:61:1f:25:90:11:88:d5:dd:2b:8f:11:ab:
29:a0:4a:fa:94:d1:b5:46:17:f5:48:73:93:a7:81:89:67:f1:
53:3e:83:33:ab:f4:5d:56:a1:ed:88:4a:b9:90:49:15:82:fc:
61:09:b6:7f:44:b8:4a:34:51:92:9d:c2:62:a5:2a:8c:b4:ea:
db:59:d9:d6:74:1f:ca:d2:3b:88:6f:bd:11:c2:a9:b6:e8:e2:
1f:f4:6c:b1:a5:65:3b:f7:8f:a2:1c:9c:56:6a:0c:92:f9:9b:
b5:f2:aa:ed:f1:a5:c4:b8:26:13:ec:5c:46:44:f9:7c:50:4e:
8c:e4:af:6c:7f:92:d9:f1:0b:68:f5:b0:e5:63:99:c7:6e:07:
cc:70:d8:4e:d1:05:57:e8:14:45:ac:74:26:f8:7c:b4:31:3d:
2a:b9:2a:15:7f:3b:61:92:77:08:30:1c:79:9c:33:f3:0d:f2:
cd:c1:da:f7:2d:d0:46:a5:3c:37:e0:91:66:92:f1:5c:e0:c9:
4a:30:14:79
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVSoGWrc3dIMK7FdIUw9kt6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjI3MDgwODQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWY2YTcyOWVlZDA5Yjk0NjYyNDAxZjI3MDhkYjAyNGM4YWY0NDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBW3u10ExdycI4LoVnpIn1tihZtZ
Khfx8a9NoNdFuRGk+mGx1uY5nJn1hxzRFwNBVy6LC3+ZG7QgQ1OsUzQDKhbhcdSc
2+3UF9BlGbkBtBsu/4mbo7qbfMXmPmPa8+eB/Gntr/oeSMpmSBrJXWneIWAJXSFk
DR6mSZj2CmVlF0cxz2G2sX86pMDDWGnfQ3e8hYgCfSeJROZyRmdi67s0bUpSRBy7
uF1SBS1VBqq9Cx5hN+LC3mk+a2VOj1sL4vacCc5wSIWxympB6MlnJd1/GFMU/XqQ
CJTv9qEwim305omxs/Tdx4DnV3fFKYVR0EvomE2471t0YjA7FM7GCaahIwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOX2pynu0JuUZiQB8nCNsCTIr0RdMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNWZhbktlN1FtNVJtSkFIeWNJMndKTWl2UkYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAZvyjtB3La/8udNCOyR
QOdlZQ+3S/MMsZYvnZIHT5BtA/uRLDFZ8pLbndGKiLq0f7651m4o0nPYlyCNkmEf
JZARiNXdK48RqymgSvqU0bVGF/VIc5OngYln8VM+gzOr9F1Woe2ISrmQSRWC/GEJ
tn9EuEo0UZKdwmKlKoy06ttZ2dZ0H8rSO4hvvRHCqbbo4h/0bLGlZTv3j6IcnFZq
DJL5m7Xyqu3xpcS4JhPsXEZE+XxQTozkr2x/ktnxC2j1sOVjmcduB8xw2E7RBVfo
FEWsdCb4fLQxPSq5KhV/O2GSdwgwHHmcM/MN8s3B2vct0EalPDfgkWaS8VzgyUow
FHk=
-----END CERTIFICATE-----
Generated at Sun May 4 15:48:38 2025 by rpki-client