Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7bKxmXzfhvqhd2M0pJZYmNAYDF8.roa
File: 7bKxmXzfhvqhd2M0pJZYmNAYDF8.roa (raw, json)
Hash identifier: s/if6r+5ncTXMvnUEtAMZjigO7LdxXCRllGcigMBlwE=
Subject key identifier: ED:B2:B1:99:7C:DF:86:FA:A1:77:63:34:A4:96:58:98:D0:18:0C:5F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01843D36756A4DDDBA879246ABA82BE89091
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7bKxmXzfhvqhd2M0pJZYmNAYDF8.roa
Signing time: Thu 03 Nov 2022 11:18:09 +0000
ROA not before: Thu 03 Nov 2022 11:18:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3d:36:75:6a:4d:dd:ba:87:92:46:ab:a8:2b:e8:90:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 3 11:18:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edb2b1997cdf86faa1776334a4965898d0180c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:56:d5:25:63:14:66:92:ea:7d:cf:a7:f0:55:
1d:de:cd:0e:4d:b4:03:19:c0:7d:c2:a4:4a:ae:74:
88:fd:0e:9a:18:3d:ea:44:ba:38:f0:33:32:83:98:
13:16:52:cd:99:e4:5e:55:e5:09:e4:90:89:20:1a:
0c:16:8c:de:24:ff:85:2e:53:d3:b8:0f:3e:7b:94:
2f:77:66:9e:47:84:fd:33:16:1d:3b:4f:f0:c3:69:
4a:77:11:7e:7a:29:aa:ad:56:de:2c:01:6c:3f:96:
a1:dd:d6:aa:af:f9:7e:69:6f:79:65:21:e3:e2:22:
2f:53:1a:45:62:ac:13:8e:97:13:fe:42:dc:1a:77:
6b:81:fb:02:89:b9:2c:b1:4a:84:d5:fa:02:f4:d4:
64:62:e7:5e:a5:b1:ae:05:47:98:ed:a2:ee:26:2d:
4d:aa:c8:f5:bc:fa:8e:42:cb:22:8a:64:fd:78:97:
20:83:d1:e7:ae:86:e1:e6:9e:f2:49:d7:de:94:36:
d9:fc:46:95:e3:f9:43:37:03:5a:ae:26:bc:71:93:
c6:05:8d:31:cf:2c:b2:96:18:67:04:c7:b1:fb:24:
43:c4:0e:f5:c7:19:96:e7:4a:82:17:32:2d:db:23:
1b:fe:80:c4:8f:da:2c:6d:d5:84:24:7c:c5:5c:6d:
24:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B2:B1:99:7C:DF:86:FA:A1:77:63:34:A4:96:58:98:D0:18:0C:5F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7bKxmXzfhvqhd2M0pJZYmNAYDF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:19:80:76:7f:6d:b6:c3:17:c5:b7:42:03:5e:74:6b:e4:6f:
97:eb:dc:03:52:fc:3f:f4:dd:80:6a:8c:93:a2:4a:50:91:6e:
f3:f3:53:84:e8:2d:22:d8:44:a4:89:76:6c:2c:82:7e:cc:37:
b4:58:3d:1c:60:d3:d1:2f:03:ea:69:97:99:db:18:df:1f:df:
16:14:3a:8e:13:62:c9:5a:d1:c0:7e:f5:85:c6:58:37:e5:67:
0f:47:d7:34:50:81:5a:b7:19:a2:cf:e7:7a:14:f0:f8:2d:29:
93:d1:d0:cd:71:af:01:8f:5c:b6:d1:0d:c2:a7:8b:a7:0d:08:
7b:82:79:1d:19:f8:e2:ad:a6:d6:65:bb:33:65:24:b0:c2:f5:
dc:7c:fe:08:e5:dc:c1:84:a2:a8:cc:f5:86:c4:59:32:5d:39:
60:87:56:63:ca:02:d9:b9:62:12:a3:e0:3b:19:f8:d0:d4:e5:
a4:06:06:91:6c:6b:ca:09:0d:7a:5c:0f:f5:98:76:d3:e1:58:
b0:ca:fc:a4:f8:13:bd:b0:41:30:4f:3d:07:ee:99:a3:32:bb:
df:bc:89:4e:39:b1:45:ec:43:57:23:ab:17:82:85:4b:86:69:
6f:cc:e5:24:fe:17:b1:36:a0:42:bd:5f:54:cf:13:27:f0:f5:
27:a2:f4:c3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYQ9NnVqTd26h5JGq6gr6JCRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTAzMTExODA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGIyYjE5OTdjZGY4NmZhYTE3NzYzMzRhNDk2NTg5OGQwMTgwYzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1bVJWMUZpLqfc+n8FUd3s0OTbQD
GcB9wqRKrnSI/Q6aGD3qRLo48DMyg5gTFlLNmeReVeUJ5JCJIBoMFozeJP+FLlPT
uA8+e5Qvd2aeR4T9MxYdO0/ww2lKdxF+eimqrVbeLAFsP5ah3daqr/l+aW95ZSHj
4iIvUxpFYqwTjpcT/kLcGndrgfsCibkssUqE1foC9NRkYudepbGuBUeY7aLuJi1N
qsj1vPqOQssiimT9eJcgg9Hnrobh5p7ySdfelDbZ/EaV4/lDNwNaria8cZPGBY0x
zyyylhhnBMex+yRDxA71xxmW50qCFzIt2yMb/oDEj9osbdWEJHzFXG0kIwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFO2ysZl834b6oXdjNKSWWJjQGAxfMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvN2JLeG1YemZodnFoZDJNMHBKWlltTkFZREY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEkZgHZ/bbbDF8W3QgNe
dGvkb5fr3ANS/D/03YBqjJOiSlCRbvPzU4ToLSLYRKSJdmwsgn7MN7RYPRxg09Ev
A+ppl5nbGN8f3xYUOo4TYsla0cB+9YXGWDflZw9H1zRQgVq3GaLP53oU8PgtKZPR
0M1xrwGPXLbRDcKni6cNCHuCeR0Z+OKtptZluzNlJLDC9dx8/gjl3MGEoqjM9YbE
WTJdOWCHVmPKAtm5YhKj4DsZ+NDU5aQGBpFsa8oJDXpcD/WYdtPhWLDK/KT4E72w
QTBPPQfumaMyu9+8iU45sUXsQ1cjqxeChUuGaW/M5ST+F7E2oEK9X1TPEyfw9Sei
9MM=
-----END CERTIFICATE-----
Generated at Thu May 1 02:14:59 2025 by rpki-client