Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7TWv349BGgo5YKjACY0vSqtmVOI.roa
File: 7TWv349BGgo5YKjACY0vSqtmVOI.roa (raw, json)
Hash identifier: gJcNbJrgVBoHOp/Bav6B6YQGg3s3HcUS5HhREM18t74=
Subject key identifier: ED:35:AF:DF:8F:41:1A:0A:39:60:A8:C0:09:8D:2F:4A:AB:66:54:E2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01856E866DD030C6B77DAC9C5993B04EAF32
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7TWv349BGgo5YKjACY0vSqtmVOI.roa
Signing time: Sun 01 Jan 2023 18:09:41 +0000
ROA not before: Sun 01 Jan 2023 18:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:86:6d:d0:30:c6:b7:7d:ac:9c:59:93:b0:4e:af:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 1 18:09:41 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed35afdf8f411a0a3960a8c0098d2f4aab6654e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:75:be:b9:66:2c:f1:99:00:f3:dd:2a:69:29:
8a:1a:eb:51:27:78:f0:0b:16:d5:c1:8e:8b:6a:7b:
bf:42:b1:4d:18:f6:35:b5:0b:4a:49:b3:3f:cd:c1:
71:6c:c2:35:1f:45:ba:ec:a8:ec:e1:2b:7f:1c:29:
ad:ff:bf:63:79:03:25:a0:b3:06:27:93:3c:6f:be:
64:de:fc:5b:3c:e2:30:84:8f:c7:18:ae:12:7b:4e:
61:39:c7:da:70:ce:05:68:0e:6a:36:46:0a:65:79:
f2:e6:4b:5c:d3:d9:c5:d6:8c:9a:3e:26:28:fa:0b:
13:ba:48:e4:9d:d1:52:bd:92:be:b2:61:4a:ea:d7:
6e:07:76:b0:bc:02:8c:69:a5:c7:a7:10:84:38:f3:
dc:a7:4a:ef:f3:31:75:10:85:59:e0:f1:b5:48:41:
78:ef:e9:21:e6:28:57:fc:47:80:e5:93:c2:00:6c:
13:d0:79:3e:f7:42:bd:e8:b3:04:4d:8d:17:0c:ef:
ff:69:ee:74:c4:9c:63:5c:b2:a1:46:3f:ee:ee:4e:
7a:79:e0:fc:c3:e2:5a:48:2b:9d:4f:ef:76:55:48:
45:f4:56:13:e6:ab:a8:f0:37:cf:5c:db:e9:dd:fe:
df:32:30:d7:1a:cc:43:2b:02:68:77:ae:1b:55:f0:
b3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:35:AF:DF:8F:41:1A:0A:39:60:A8:C0:09:8D:2F:4A:AB:66:54:E2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7TWv349BGgo5YKjACY0vSqtmVOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:da:53:00:6a:4b:bf:ae:f1:87:7e:6b:d3:b9:b7:55:99:a3:
36:51:28:7f:19:0d:5a:71:95:f5:3d:f6:b6:ed:bc:b8:84:e3:
e4:7d:96:e8:fe:e1:c5:f8:17:cf:6a:51:b1:91:e0:25:fd:f1:
31:f0:ae:7a:97:24:c9:b3:5d:86:5a:63:e4:a0:ae:fb:d3:f3:
51:ec:4e:9e:91:28:ac:71:a9:ed:26:95:d1:a8:aa:9f:7b:ef:
61:a2:51:3d:98:ba:28:bf:ec:9a:96:ff:f7:b2:b6:73:94:4f:
1f:ff:44:e3:20:c7:f3:54:ed:bd:7b:71:94:5a:18:83:88:35:
ea:bd:f3:06:c6:c0:9d:11:f6:fb:6b:63:4f:32:18:09:b1:83:
28:c4:ec:a2:dc:a3:14:aa:2f:16:7f:e6:73:47:29:df:59:f2:
4e:62:d5:d3:d2:49:5d:f0:2f:9a:d6:d2:a0:fd:46:09:23:c5:
13:6b:ba:ab:ed:a9:27:d0:d6:0b:1d:d5:20:63:89:14:9f:a1:
b7:63:4e:00:25:95:ff:06:b2:2b:c8:32:64:d4:0b:9c:51:bb:
46:96:90:5c:56:85:63:90:d6:70:97:a1:8b:6f:7b:ff:6f:42:
15:d6:76:99:d5:f0:60:61:44:b2:05:bc:03:b4:dc:b1:b5:dc:
cd:61:4a:06
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVuhm3QMMa3faycWZOwTq8yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTAxMTgwOTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDM1YWZkZjhmNDExYTBhMzk2MGE4YzAwOThkMmY0YWFiNjY1NGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnW+uWYs8ZkA890qaSmKGutRJ3jw
CxbVwY6Lanu/QrFNGPY1tQtKSbM/zcFxbMI1H0W67Kjs4St/HCmt/79jeQMloLMG
J5M8b75k3vxbPOIwhI/HGK4Se05hOcfacM4FaA5qNkYKZXny5ktc09nF1oyaPiYo
+gsTukjkndFSvZK+smFK6tduB3awvAKMaaXHpxCEOPPcp0rv8zF1EIVZ4PG1SEF4
7+kh5ihX/EeA5ZPCAGwT0Hk+90K96LMETY0XDO//ae50xJxjXLKhRj/u7k56eeD8
w+JaSCudT+92VUhF9FYT5quo8DfPXNvp3f7fMjDXGsxDKwJod64bVfCzgQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFO01r9+PQRoKOWCowAmNL0qrZlTiMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvN1RXdjM0OUJHZ281WUtqQUNZMHZTcXRtVk9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKLaUwBqS7+u8Yd+a9O5
t1WZozZRKH8ZDVpxlfU99rbtvLiE4+R9luj+4cX4F89qUbGR4CX98THwrnqXJMmz
XYZaY+SgrvvT81HsTp6RKKxxqe0mldGoqp9772GiUT2Yuii/7JqW//eytnOUTx//
ROMgx/NU7b17cZRaGIOINeq98wbGwJ0R9vtrY08yGAmxgyjE7KLcoxSqLxZ/5nNH
Kd9Z8k5i1dPSSV3wL5rW0qD9RgkjxRNruqvtqSfQ1gsd1SBjiRSfobdjTgAllf8G
sivIMmTUC5xRu0aWkFxWhWOQ1nCXoYtve/9vQhXWdpnV8GBhRLIFvAO03LG13M1h
SgY=
-----END CERTIFICATE-----
Generated at Thu May 1 12:50:49 2025 by rpki-client