Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7G2-LDCm0HrdVW3d5COKuKln9fM.roa
File: 7G2-LDCm0HrdVW3d5COKuKln9fM.roa (raw, json)
Hash identifier: gu8O5UiiMD4wTWDXA6uwaMa6/sY+mSsFC+RvhhcL/B0=
Subject key identifier: EC:6D:BE:2C:30:A6:D0:7A:DD:55:6D:DD:E4:23:8A:B8:A9:67:F5:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01823D6F092E6D430BD2E1B0652111FCE55F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7G2-LDCm0HrdVW3d5COKuKln9fM.roa
Signing time: Wed 27 Jul 2022 02:14:23 +0000
ROA not before: Wed 27 Jul 2022 02:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3d:6f:09:2e:6d:43:0b:d2:e1:b0:65:21:11:fc:e5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 02:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec6dbe2c30a6d07add556ddde4238ab8a967f5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ac:30:25:5d:95:2d:4d:ed:c7:2e:17:1d:1c:
a2:24:00:c0:21:7e:f5:14:17:92:a8:86:c4:6a:6e:
f8:b6:39:d4:aa:0f:1a:13:89:f4:85:9b:04:0a:02:
5e:ce:ad:5d:3e:7e:9d:5c:d7:e3:8c:91:de:57:80:
1a:bf:46:a4:d0:f3:21:6a:8c:4f:45:89:4e:7a:3a:
b2:90:dd:38:7c:d7:10:ab:f0:ea:13:c5:b9:29:37:
55:ff:5a:aa:5d:03:dc:ec:65:cb:87:3e:2f:dd:97:
bf:4a:48:d3:1a:cc:8a:e1:65:72:74:9f:d3:ed:c6:
05:25:ff:01:6d:03:cd:66:95:b1:74:77:b3:74:44:
9b:bb:60:84:5b:ce:de:9e:7d:75:2d:c3:88:f0:e1:
b9:1e:df:e1:0e:22:57:49:f1:ab:34:93:44:51:c5:
49:5d:71:9e:12:a1:dd:ee:83:e5:bd:a3:78:15:9d:
f0:10:16:10:b5:a2:a1:dc:c0:4a:39:3a:da:6c:b4:
b0:65:94:18:2e:43:79:26:8a:cb:27:74:93:1e:2b:
a4:0e:26:60:2d:dd:70:b1:e5:ab:09:61:94:96:a4:
85:75:de:20:16:cc:6d:0c:fa:2e:fa:8f:06:d9:d4:
9a:a6:10:bb:19:cf:0d:46:31:c8:26:6e:f6:6b:58:
2a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6D:BE:2C:30:A6:D0:7A:DD:55:6D:DD:E4:23:8A:B8:A9:67:F5:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7G2-LDCm0HrdVW3d5COKuKln9fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:c6:fb:8b:67:16:09:11:20:13:89:fb:9b:46:54:83:a2:12:
2f:20:e8:2e:a2:d9:50:8d:7b:8a:1a:88:0e:a5:9c:ca:31:d3:
e3:0f:8b:93:8d:79:8b:50:05:62:16:96:af:8d:6a:5b:c5:03:
97:f8:1c:6e:80:95:ac:51:a9:e8:60:87:89:44:e9:5a:5c:39:
2a:12:7a:68:8c:3b:f0:6f:d7:aa:93:82:bd:eb:8b:6f:a7:c0:
12:4c:92:5c:5f:10:43:7a:44:db:70:d8:ba:ba:21:00:54:ee:
cc:4a:88:83:c3:db:8b:62:95:a1:30:2f:e4:cd:62:f4:e5:e2:
cb:d6:28:79:0c:6a:14:0f:b2:c5:eb:4a:5f:7b:86:dd:08:51:
04:61:00:14:00:6d:34:df:f6:85:75:70:6f:d8:ed:85:1a:c8:
3a:7c:27:d3:5d:46:3a:ab:26:cf:4f:92:33:7c:da:a8:5d:f9:
7f:c2:e9:d6:83:b1:63:b7:5d:dd:99:fc:f8:ab:b8:91:7c:30:
f5:bc:11:52:9c:29:ef:19:af:36:0d:be:f3:e4:d2:b5:85:5d:
9f:7c:81:8b:48:c8:1c:34:5a:7e:37:ca:0d:62:e4:04:49:6c:
63:5a:9d:d3:62:2b:d6:e9:2e:85:3e:41:87:9a:e3:ed:84:f8:
c9:45:48:c1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYI9bwkubUML0uGwZSER/OVfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzI3MDIxNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzZkYmUyYzMwYTZkMDdhZGQ1NTZkZGRlNDIzOGFiOGE5NjdmNWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqwwJV2VLU3txy4XHRyiJADAIX71
FBeSqIbEam74tjnUqg8aE4n0hZsECgJezq1dPn6dXNfjjJHeV4Aav0ak0PMhaoxP
RYlOejqykN04fNcQq/DqE8W5KTdV/1qqXQPc7GXLhz4v3Ze/SkjTGsyK4WVydJ/T
7cYFJf8BbQPNZpWxdHezdESbu2CEW87enn11LcOI8OG5Ht/hDiJXSfGrNJNEUcVJ
XXGeEqHd7oPlvaN4FZ3wEBYQtaKh3MBKOTrabLSwZZQYLkN5JorLJ3STHiukDiZg
Ld1wseWrCWGUlqSFdd4gFsxtDPou+o8G2dSaphC7Gc8NRjHIJm72a1gqqQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOxtviwwptB63VVt3eQjiripZ/XzMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvN0cyLUxEQ20wSHJkVlczZDVDT0t1S2xuOWZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEzG+4tnFgkRIBOJ+5tG
VIOiEi8g6C6i2VCNe4oaiA6lnMox0+MPi5ONeYtQBWIWlq+NalvFA5f4HG6AlaxR
qehgh4lE6VpcOSoSemiMO/Bv16qTgr3ri2+nwBJMklxfEEN6RNtw2Lq6IQBU7sxK
iIPD24tilaEwL+TNYvTl4svWKHkMahQPssXrSl97ht0IUQRhABQAbTTf9oV1cG/Y
7YUayDp8J9NdRjqrJs9PkjN82qhd+X/C6daDsWO3Xd2Z/PiruJF8MPW8EVKcKe8Z
rzYNvvPk0rWFXZ98gYtIyBw0Wn43yg1i5ARJbGNandNiK9bpLoU+QYea4+2E+MlF
SME=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:59:15 2025 by rpki-client