Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7UUHAMI8xXb1erRt7fOaw7BJUA0.roa
File: 7UUHAMI8xXb1erRt7fOaw7BJUA0.roa (raw, json)
Hash identifier: Ys+AUjn6jzzj9HLfO0IbPAwctnshMC2TfQGVHcwtCag=
Subject key identifier: ED:45:07:00:C2:3C:C5:76:F5:7A:B4:6D:ED:F3:9A:C3:B0:49:50:0D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187A72A04FB8CA6697379D4CBDE278B22F8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7UUHAMI8xXb1erRt7fOaw7BJUA0.roa
Signing time: Sat 22 Apr 2023 04:12:41 +0000
ROA not before: Sat 22 Apr 2023 04:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a7:2a:04:fb:8c:a6:69:73:79:d4:cb:de:27:8b:22:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 22 04:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed450700c23cc576f57ab46dedf39ac3b049500d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:0e:39:a3:c5:94:0b:4f:13:c5:14:1d:df:
7e:dd:fa:fd:ea:67:2b:90:c0:4e:3d:5c:d9:c4:aa:
b1:1c:01:37:fd:85:e8:73:e4:7b:85:4f:1e:2d:83:
8f:46:74:92:0e:8b:f0:62:ce:45:c9:3e:45:de:4f:
f6:0c:28:b3:03:d2:46:35:24:d8:cb:fe:8a:50:98:
cd:22:3d:88:b4:03:9f:39:9c:9f:56:3f:11:93:09:
23:b8:b8:f3:57:7f:f3:27:4d:8c:60:e4:ad:52:39:
14:27:b3:91:8d:6b:02:cd:f3:7b:f9:16:01:d6:59:
b7:34:ef:c9:8e:27:30:b4:bd:83:db:da:43:78:15:
e8:f7:d1:56:d9:52:47:e0:6c:39:3a:b7:cb:e6:b4:
11:62:0b:50:91:30:e1:53:89:74:89:9b:ef:9f:9d:
65:c6:d7:94:2f:92:71:15:01:e5:37:da:c6:af:81:
84:4d:ac:31:61:db:09:7f:0c:49:bd:01:b9:14:63:
b9:ce:09:26:bb:57:92:5e:36:2d:9f:63:82:8c:a8:
be:37:d1:cb:ca:2b:75:36:45:65:ad:80:45:41:d8:
5f:3e:53:98:c4:04:0a:8a:6d:19:f6:21:33:49:d4:
76:2d:a5:1b:ba:5f:ef:bb:b3:5d:16:5a:a3:5c:ad:
6d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:45:07:00:C2:3C:C5:76:F5:7A:B4:6D:ED:F3:9A:C3:B0:49:50:0D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7UUHAMI8xXb1erRt7fOaw7BJUA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:67:7d:1a:44:68:a4:53:5e:f8:b2:fc:2d:96:00:3d:f2:be:
07:47:5c:c9:99:64:52:30:da:b5:bd:30:d9:f6:a0:50:b4:3b:
af:fb:1a:10:ee:75:fd:27:4a:d7:cc:a4:26:0a:64:2b:86:e2:
7b:b3:fd:ce:0a:94:8c:49:56:9d:90:3f:fe:88:75:3e:b1:af:
1c:b3:df:6e:a0:5e:8e:89:89:18:68:44:6b:1b:e5:8c:15:34:
37:68:a7:e3:24:09:4d:90:12:0f:7d:8c:5e:53:e0:81:9b:37:
28:e4:53:1d:85:46:8a:c9:45:3e:2c:e1:8a:76:8c:61:ac:17:
01:4f:0e:08:27:9d:ce:fe:35:ab:24:05:40:4f:73:b9:76:5c:
f5:67:4a:1b:c7:05:27:5a:5f:38:25:af:bd:5b:7f:57:a5:a9:
c0:cd:ab:0d:4b:20:da:2c:9a:62:4b:22:5d:c0:60:05:5d:2c:
35:b9:55:c9:b1:b3:17:ef:f7:80:82:9d:ae:8d:1e:2b:0e:91:
67:21:25:88:97:49:67:09:ec:a4:15:5d:04:e2:2c:85:16:1c:
b1:de:bc:3d:47:4a:81:7d:e0:0a:4e:c3:ff:2b:28:6b:4e:77:
a0:72:1e:e9:22:ff:f9:0a:25:c0:85:fa:27:61:7a:d4:d3:8c:
09:92:08:ef
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYenKgT7jKZpc3nUy94niyL4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDIyMDQxMjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDQ1MDcwMGMyM2NjNTc2ZjU3YWI0NmRlZGYzOWFjM2IwNDk1MDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+4OOaPFlAtPE8UUHd9+3fr96mcr
kMBOPVzZxKqxHAE3/YXoc+R7hU8eLYOPRnSSDovwYs5FyT5F3k/2DCizA9JGNSTY
y/6KUJjNIj2ItAOfOZyfVj8RkwkjuLjzV3/zJ02MYOStUjkUJ7ORjWsCzfN7+RYB
1lm3NO/JjicwtL2D29pDeBXo99FW2VJH4Gw5OrfL5rQRYgtQkTDhU4l0iZvvn51l
xteUL5JxFQHlN9rGr4GETawxYdsJfwxJvQG5FGO5zgkmu1eSXjYtn2OCjKi+N9HL
yit1NkVlrYBFQdhfPlOYxAQKim0Z9iEzSdR2LaUbul/vu7NdFlqjXK1tLQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFO1FBwDCPMV29Xq0be3zmsOwSVANMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvN1VVSEFNSTh4WGIxZXJSdDdmT2F3N0JKVUEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADhnfRpEaKRTXviy/C2W
AD3yvgdHXMmZZFIw2rW9MNn2oFC0O6/7GhDudf0nStfMpCYKZCuG4nuz/c4KlIxJ
Vp2QP/6IdT6xrxyz326gXo6JiRhoRGsb5YwVNDdop+MkCU2QEg99jF5T4IGbNyjk
Ux2FRorJRT4s4Yp2jGGsFwFPDggnnc7+NaskBUBPc7l2XPVnShvHBSdaXzglr71b
f1elqcDNqw1LINosmmJLIl3AYAVdLDW5Vcmxsxfv94CCna6NHisOkWchJYiXSWcJ
7KQVXQTiLIUWHLHevD1HSoF94ApOw/8rKGtOd6ByHuki//kKJcCF+idhetTTjAmS
CO8=
-----END CERTIFICATE-----
Generated at Fri May 2 12:54:27 2025 by rpki-client