Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7VCPZ_XqOmGvWZNGs-ZybQXJ02k.roa
File: 7VCPZ_XqOmGvWZNGs-ZybQXJ02k.roa (raw, json)
Hash identifier: W7Ha2iP+89QtbTsUwQHqp1bYXNAP0dqcRiaCUCJvuKw=
Subject key identifier: ED:50:8F:67:F5:EA:3A:61:AF:59:93:46:B3:E6:72:6D:05:C9:D3:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185C94B76680C49F7131120CA4B01B932FA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7VCPZ_XqOmGvWZNGs-ZybQXJ02k.roa
Signing time: Thu 19 Jan 2023 09:10:43 +0000
ROA not before: Thu 19 Jan 2023 09:10:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c9:4b:76:68:0c:49:f7:13:11:20:ca:4b:01:b9:32:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 19 09:10:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed508f67f5ea3a61af599346b3e6726d05c9d369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:f6:bd:59:4d:24:4b:37:3f:97:dc:92:c7:
68:53:b5:0f:3c:57:35:26:b4:33:70:50:6d:4a:be:
b4:cb:00:c8:12:c4:3a:33:52:65:ca:9c:c3:1e:b1:
16:41:cc:fa:95:22:c8:33:dd:34:10:7e:65:07:9e:
90:4d:4c:25:a7:48:ef:10:ba:9e:38:2a:1f:0e:c3:
40:82:64:df:34:b4:9a:62:7c:c7:ce:c9:04:3e:f3:
39:05:7c:80:a7:30:dd:37:c6:6a:e8:66:1b:36:0b:
49:35:ff:07:21:a5:0f:10:7e:cf:de:dc:0f:cb:52:
9c:46:05:a6:f5:84:54:bd:f5:ea:08:bc:6d:f7:3b:
c0:6b:f1:fc:3f:e8:f9:77:2f:99:61:25:26:29:9e:
7b:91:6f:22:34:9b:ea:73:04:40:0b:1b:bc:5c:84:
e4:35:9a:d2:b1:a5:e9:06:ea:83:ba:59:c1:38:11:
6e:a0:db:c6:bf:cc:1b:83:dd:61:65:49:04:35:70:
28:21:4f:0b:9d:58:51:85:93:f8:e3:77:2b:dd:0f:
6c:fa:d2:fc:cb:30:36:33:8b:20:a4:dc:1b:89:b2:
0e:b3:e3:cf:d9:ae:df:3c:8e:96:5a:d4:ad:dc:2a:
57:74:ff:0e:b7:79:a1:ef:f3:e2:e4:e6:fc:f7:69:
8f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:50:8F:67:F5:EA:3A:61:AF:59:93:46:B3:E6:72:6D:05:C9:D3:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7VCPZ_XqOmGvWZNGs-ZybQXJ02k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:f0:86:1f:d9:e2:3f:20:13:d3:ac:d5:8e:1b:00:e5:94:5a:
c7:03:16:ae:45:3a:c2:c8:10:b5:81:e5:fc:34:5c:c5:df:ab:
9f:b3:e9:90:ed:71:8f:50:78:74:48:b3:eb:39:f8:71:50:ec:
ab:7e:34:32:0a:aa:c9:99:86:64:c1:9a:48:32:03:26:56:70:
9b:e6:26:84:de:02:61:77:1f:a6:5d:9b:24:8a:7c:e0:ec:fa:
a6:81:16:ce:2f:19:1b:62:dc:43:58:40:b1:3a:5a:78:b9:6a:
fb:50:9a:64:01:c0:4d:30:5e:a8:b4:aa:80:47:34:84:a6:d1:
2c:c2:e1:a6:6c:62:5e:e7:ff:da:f2:79:2d:f8:23:d0:1e:d3:
0c:a2:31:98:d3:fc:91:2e:0c:7d:09:07:bb:1d:e7:21:ca:ee:
a2:7b:b4:88:bf:0f:46:c5:da:55:49:5f:f1:ed:79:ac:04:8d:
fa:56:dd:9c:d4:ab:13:b1:a4:98:cb:ad:72:fd:0e:29:57:3c:
d7:43:8a:71:e7:b3:d4:b6:24:8f:23:5e:39:3d:83:f5:b1:c7:
2a:bc:51:37:8e:af:fb:84:70:8f:7f:9e:ee:96:1f:fa:22:16:
be:66:05:50:24:fc:61:95:dd:71:d9:9b:2b:d7:a6:48:54:19:
4f:59:0a:ba
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYXJS3ZoDEn3ExEgyksBuTL6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTE5MDkxMDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDUwOGY2N2Y1ZWEzYTYxYWY1OTkzNDZiM2U2NzI2ZDA1YzlkMzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8H2vVlNJEs3P5fcksdoU7UPPFc1
JrQzcFBtSr60ywDIEsQ6M1JlypzDHrEWQcz6lSLIM900EH5lB56QTUwlp0jvELqe
OCofDsNAgmTfNLSaYnzHzskEPvM5BXyApzDdN8Zq6GYbNgtJNf8HIaUPEH7P3twP
y1KcRgWm9YRUvfXqCLxt9zvAa/H8P+j5dy+ZYSUmKZ57kW8iNJvqcwRACxu8XITk
NZrSsaXpBuqDulnBOBFuoNvGv8wbg91hZUkENXAoIU8LnVhRhZP443cr3Q9s+tL8
yzA2M4sgpNwbibIOs+PP2a7fPI6WWtSt3CpXdP8Ot3mh7/Pi5Ob892mPMwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFO1Qj2f16jphr1mTRrPmcm0FydNpMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvN1ZDUFpfWHFPbUd2V1pOR3MtWnliUVhKMDJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFnwhh/Z4j8gE9Os1Y4b
AOWUWscDFq5FOsLIELWB5fw0XMXfq5+z6ZDtcY9QeHRIs+s5+HFQ7Kt+NDIKqsmZ
hmTBmkgyAyZWcJvmJoTeAmF3H6ZdmySKfODs+qaBFs4vGRti3ENYQLE6Wni5avtQ
mmQBwE0wXqi0qoBHNISm0SzC4aZsYl7n/9ryeS34I9Ae0wyiMZjT/JEuDH0JB7sd
5yHK7qJ7tIi/D0bF2lVJX/HteawEjfpW3ZzUqxOxpJjLrXL9DilXPNdDinHns9S2
JI8jXjk9g/Wxxyq8UTeOr/uEcI9/nu6WH/oiFr5mBVAk/GGV3XHZmyvXpkhUGU9Z
Cro=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:59:08 2025 by rpki-client