Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7dPyJuxMVU0LFun6kcGULMS7tk4.roa
File: 7dPyJuxMVU0LFun6kcGULMS7tk4.roa (raw, json)
Hash identifier: IDvrM4xqDMFIXEVoBmsUtwwtikmqGseRvqe2DIdWaWw=
Subject key identifier: ED:D3:F2:26:EC:4C:55:4D:0B:16:E9:FA:91:C1:94:2C:C4:BB:B6:4E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01894A3BAA9C4582C095CD5CDE96A88F559F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7dPyJuxMVU0LFun6kcGULMS7tk4.roa
Signing time: Wed 12 Jul 2023 13:12:51 +0000
ROA not before: Wed 12 Jul 2023 13:12:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4a:3b:aa:9c:45:82:c0:95:cd:5c:de:96:a8:8f:55:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 12 13:12:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edd3f226ec4c554d0b16e9fa91c1942cc4bbb64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:14:66:55:aa:51:4e:39:28:de:42:8b:b8:
e3:4d:ab:7e:30:c5:4d:63:bc:1b:10:4d:16:4d:a1:
2c:98:24:5c:49:7d:c0:77:6a:77:91:d1:ff:cd:37:
d4:e7:7c:54:c6:77:d6:a7:ff:7c:99:ec:f0:e2:b0:
5d:43:6f:93:f7:93:3a:40:9b:16:2f:1c:58:0a:64:
db:1a:5a:9e:0c:b2:b7:aa:21:ea:76:b3:c6:16:a7:
e2:67:d3:d9:b9:ac:cb:1c:72:c8:99:1a:c8:5b:a6:
ee:ef:d9:0c:4d:75:82:aa:a7:d8:0a:25:c3:ba:25:
82:f3:45:34:d7:f8:5e:06:7f:cb:1c:d2:ff:f1:c7:
0f:b7:af:1e:0b:f3:27:30:2e:f6:18:bc:3b:fe:24:
b9:9c:af:27:5e:64:79:86:36:94:95:39:1f:25:29:
7e:b6:c3:f2:00:db:50:04:63:39:7f:ca:82:29:20:
43:65:bc:a6:56:c9:ee:4d:fc:b1:67:ab:b6:cf:6e:
3c:fb:5e:02:3a:95:62:22:9d:d5:a5:6d:4b:4b:6e:
34:13:b3:15:af:11:18:bd:f4:30:dc:71:2e:2c:fd:
a4:17:62:4f:1e:0a:ba:14:7b:82:2f:d2:98:c1:b7:
de:dd:70:72:fa:c0:fc:db:c6:00:31:16:02:78:f6:
6b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D3:F2:26:EC:4C:55:4D:0B:16:E9:FA:91:C1:94:2C:C4:BB:B6:4E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7dPyJuxMVU0LFun6kcGULMS7tk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:a4:36:9f:f9:dd:47:2a:94:53:29:98:97:90:d7:59:fa:e0:
c7:0c:de:93:c6:92:15:00:26:8c:09:25:ae:8d:a0:c2:8d:2b:
44:c1:db:2f:98:0b:64:e3:4e:6a:13:a8:51:a1:03:de:f8:b5:
35:ba:ed:1d:00:ad:ea:b0:d5:7a:da:13:04:ab:b4:ac:93:ba:
e1:eb:9d:4d:08:ab:26:9a:62:29:6b:8b:d9:bd:3d:bd:9a:10:
d3:4b:02:78:74:f9:a3:06:33:e9:d8:87:0e:7e:f7:2a:f4:bd:
16:e6:6e:7f:64:13:85:ea:66:c2:44:e4:20:93:a9:42:b8:5d:
d8:96:0f:a8:8f:0d:8f:51:ae:15:f4:14:e6:80:b5:16:70:0b:
37:02:75:3b:3a:6d:20:78:b3:17:32:35:e1:12:fb:ba:ae:47:
79:4f:83:35:71:2c:57:be:a5:04:28:03:4f:85:31:f7:c1:7c:
1f:60:aa:31:e7:0f:56:af:3b:a8:b4:95:41:7a:29:0e:fc:52:
8d:db:cf:0b:b3:03:dc:28:60:23:f6:34:cb:99:c2:8a:77:d5:
84:6a:ba:b8:03:8c:2b:e4:74:f6:39:71:ef:4e:aa:19:6d:b3:
95:e6:15:ca:4e:b6:64:31:2f:76:39:95:63:02:65:93:39:0f:
ea:31:0a:ca
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlKO6qcRYLAlc1c3paoj1WfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzEyMTMxMjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGQzZjIyNmVjNGM1NTRkMGIxNmU5ZmE5MWMxOTQyY2M0YmJiNjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1gUZlWqUU45KN5Ci7jjTat+MMVN
Y7wbEE0WTaEsmCRcSX3Ad2p3kdH/zTfU53xUxnfWp/98mezw4rBdQ2+T95M6QJsW
LxxYCmTbGlqeDLK3qiHqdrPGFqfiZ9PZuazLHHLImRrIW6bu79kMTXWCqqfYCiXD
uiWC80U01/heBn/LHNL/8ccPt68eC/MnMC72GLw7/iS5nK8nXmR5hjaUlTkfJSl+
tsPyANtQBGM5f8qCKSBDZbymVsnuTfyxZ6u2z248+14COpViIp3VpW1LS240E7MV
rxEYvfQw3HEuLP2kF2JPHgq6FHuCL9KYwbfe3XBy+sD828YAMRYCePZrOQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFO3T8ibsTFVNCxbp+pHBlCzEu7ZOMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvN2RQeUp1eE1WVTBMRnVuNmtjR1VMTVM3dGs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABykNp/53UcqlFMpmJeQ
11n64McM3pPGkhUAJowJJa6NoMKNK0TB2y+YC2TjTmoTqFGhA974tTW67R0Areqw
1XraEwSrtKyTuuHrnU0IqyaaYilri9m9Pb2aENNLAnh0+aMGM+nYhw5+9yr0vRbm
bn9kE4XqZsJE5CCTqUK4XdiWD6iPDY9RrhX0FOaAtRZwCzcCdTs6bSB4sxcyNeES
+7quR3lPgzVxLFe+pQQoA0+FMffBfB9gqjHnD1avO6i0lUF6KQ78Uo3bzwuzA9wo
YCP2NMuZwop31YRqurgDjCvkdPY5ce9Oqhlts5XmFcpOtmQxL3Y5lWMCZZM5D+ox
Cso=
-----END CERTIFICATE-----
Generated at Thu May 1 00:08:09 2025 by rpki-client