Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7XzBPP7a_1PJDanMtjkr0uXqieU.roa
File: 7XzBPP7a_1PJDanMtjkr0uXqieU.roa (raw, json)
Hash identifier: R4x5DVIYk1Wc0fwxbSM+9c8eYivVhw70h1ZnejTxnFE=
Subject key identifier: ED:7C:C1:3C:FE:DA:FF:53:C9:0D:A9:CC:B6:39:2B:D2:E5:EA:89:E5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6DFEA79F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7XzBPP7a_1PJDanMtjkr0uXqieU.roa
Signing time: Sat 26 Feb 2022 23:08:36 +0000
ROA not before: Sat 26 Feb 2022 23:08:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1845405599 (0x6dfea79f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 23:08:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed7cc13cfedaff53c90da9ccb6392bd2e5ea89e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:17:aa:1a:83:03:95:d1:ba:49:0b:ed:5b:ce:
1e:d6:98:e5:73:f2:7d:27:07:ef:3d:98:42:d7:dc:
8a:cb:0f:83:1e:c6:eb:d5:6a:83:b4:31:05:11:51:
e4:fe:e5:29:8e:93:3c:e0:82:6f:2d:55:bb:18:c1:
32:f8:05:5c:c5:94:27:af:ba:3b:4e:08:80:2a:b5:
e3:c9:d2:a1:11:3d:03:46:78:91:8b:2f:d1:4a:01:
de:cf:ff:ea:8e:a2:0e:e1:6f:0b:20:85:74:e7:ce:
60:d0:51:49:8f:0e:58:ed:78:9c:c5:55:7c:ba:50:
06:8f:92:c3:78:db:9a:95:07:1e:91:db:27:8c:76:
ae:a2:29:c0:dd:a4:44:08:c6:5e:a5:92:3a:ce:cd:
0f:f2:d3:0e:1f:89:ad:5e:25:0c:d1:80:d8:e1:d7:
79:0a:3d:be:e0:84:de:f1:2e:ba:13:69:9b:c5:18:
15:13:2d:26:67:a5:61:a0:93:f2:88:3f:9f:92:1c:
f3:05:8f:20:d4:54:b7:ce:19:cb:df:94:ba:fc:44:
3e:cf:0e:08:02:a8:22:e6:81:08:5e:4d:4b:85:c4:
ee:75:25:96:ff:ed:a1:b7:bf:0c:15:de:0a:b8:da:
e7:b8:29:d8:51:9a:72:ec:c5:ea:5e:7c:c4:62:3e:
5d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7C:C1:3C:FE:DA:FF:53:C9:0D:A9:CC:B6:39:2B:D2:E5:EA:89:E5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7XzBPP7a_1PJDanMtjkr0uXqieU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:bc:9f:42:79:a2:73:e3:d0:0e:36:5a:bf:e2:8e:de:2c:8c:
d3:6a:37:4a:aa:95:37:3a:7f:ed:8e:75:46:86:a3:58:34:b0:
c1:44:8b:3c:84:8b:58:f4:df:ae:1a:cf:40:c0:41:e0:4a:0f:
90:5b:30:16:bd:fe:2e:90:bb:e1:fc:b3:1a:54:11:fd:69:a1:
fc:53:a6:6f:3e:d8:21:6e:0b:40:af:fe:cc:5f:cd:10:c9:27:
78:2c:92:cb:3a:ce:1a:31:5a:c5:78:79:87:1f:96:98:82:2d:
31:0c:a8:7d:01:7a:16:4c:45:02:6e:e2:9c:b6:e1:b6:2b:de:
55:58:80:ef:1f:5e:d1:78:07:c2:62:38:f2:c0:03:d1:ee:11:
74:55:7b:93:58:6d:c1:78:1d:3b:29:c0:44:bc:56:2a:6f:90:
a4:f9:eb:59:c6:3b:c8:66:df:d2:a8:23:86:b3:6c:67:f9:df:
28:be:f0:8c:7e:00:64:b4:77:07:b2:4c:75:05:d5:fa:34:86:
f7:e0:50:46:3c:3e:b8:80:11:6b:0c:6a:73:aa:83:4a:85:df:
f1:df:93:5a:64:0b:25:31:ef:a2:e2:53:48:4b:e3:e8:d0:f1:
25:e6:a5:10:46:4d:8a:5a:4a:be:c1:79:25:36:ec:0e:86:65:
2b:e9:53:5e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEbf6nnzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIy
NjIzMDgzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWQ3Y2MxM2NmZWRh
ZmY1M2M5MGRhOWNjYjYzOTJiZDJlNWVhODllNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN4XqhqDA5XRukkL7VvOHtaY5XPyfScH7z2YQtfcissPgx7G
69Vqg7QxBRFR5P7lKY6TPOCCby1VuxjBMvgFXMWUJ6+6O04IgCq148nSoRE9A0Z4
kYsv0UoB3s//6o6iDuFvCyCFdOfOYNBRSY8OWO14nMVVfLpQBo+Sw3jbmpUHHpHb
J4x2rqIpwN2kRAjGXqWSOs7ND/LTDh+JrV4lDNGA2OHXeQo9vuCE3vEuuhNpm8UY
FRMtJmelYaCT8og/n5Ic8wWPINRUt84Zy9+UuvxEPs8OCAKoIuaBCF5NS4XE7nUl
lv/tobe/DBXeCrja57gp2FGacuzF6l58xGI+XdsCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTtfME8/tr/U8kNqcy2OSvS5eqJ5TAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
LzdYekJQUDdhXzFQSkRhbk10amtyMHVYcWllVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCzvJ9CeaJz49AONlq/4o7eLIzTajdKqpU3On/t
jnVGhqNYNLDBRIs8hItY9N+uGs9AwEHgSg+QWzAWvf4ukLvh/LMaVBH9aaH8U6Zv
PtghbgtAr/7MX80QySd4LJLLOs4aMVrFeHmHH5aYgi0xDKh9AXoWTEUCbuKctuG2
K95VWIDvH17ReAfCYjjywAPR7hF0VXuTWG3BeB07KcBEvFYqb5Ck+etZxjvIZt/S
qCOGs2xn+d8ovvCMfgBktHcHskx1BdX6NIb34FBGPD64gBFrDGpzqoNKhd/x35Na
ZAslMe+i4lNIS+Po0PEl5qUQRk2KWkq+wXklNuwOhmUr6VNe
-----END CERTIFICATE-----
Generated at Sun May 4 10:24:52 2025 by rpki-client