Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7u4tEKRvKRLgfhNqdLWPq5325C0.roa
File: 7u4tEKRvKRLgfhNqdLWPq5325C0.roa (raw, json)
Hash identifier: dzkXK5gJ+HNZ9sryzv1h+Wz6cXBLvJ02PnXVLClE9N0=
Subject key identifier: EE:EE:2D:10:A4:6F:29:12:E0:7E:13:6A:74:B5:8F:AB:9D:F6:E4:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185819E6F692FFB14B86E58159B358FAC2C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7u4tEKRvKRLgfhNqdLWPq5325C0.roa
Signing time: Thu 05 Jan 2023 11:08:42 +0000
ROA not before: Thu 05 Jan 2023 11:08:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:81:9e:6f:69:2f:fb:14:b8:6e:58:15:9b:35:8f:ac:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 5 11:08:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eeee2d10a46f2912e07e136a74b58fab9df6e42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:4e:58:bb:00:82:6b:05:df:96:25:13:16:
81:f7:cb:a5:a4:30:39:d3:a7:68:41:ff:29:22:51:
0c:3e:14:e7:0c:99:e3:22:a3:fe:b2:7c:ec:da:f8:
e6:b0:ad:3c:4c:8e:f9:89:c5:49:41:48:35:c2:76:
a2:5e:9f:90:71:fc:32:5d:7e:64:05:0d:47:7f:4e:
72:34:5a:2f:c8:f3:bf:fe:b3:a8:78:21:3c:a5:4e:
09:ae:48:c4:e3:9f:db:4c:8a:e9:53:f3:b6:10:47:
17:d0:c7:17:df:16:e2:b5:9a:bc:f8:dc:db:6e:3d:
98:79:27:ce:5e:22:68:2c:b6:0b:79:fb:1a:06:76:
e5:47:83:5a:a3:97:90:f8:ef:39:f3:d8:81:25:e0:
1b:3f:9b:10:7a:30:96:dc:51:4b:70:0f:f3:91:47:
c8:3b:dc:95:cf:12:22:c8:8c:d6:24:43:59:e4:13:
ac:3b:cc:9f:15:88:e8:f1:ba:84:61:80:f8:79:6f:
1e:2a:cc:8d:3d:8c:7d:fc:fc:83:3a:ae:7b:f9:c5:
1c:4f:3e:ed:8a:01:73:bf:f3:9e:76:91:47:0c:13:
be:0f:b9:14:e6:f0:db:61:c8:ec:33:7b:18:68:7b:
78:6b:34:c7:f4:82:8e:41:db:a1:81:3f:33:f0:5a:
74:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EE:2D:10:A4:6F:29:12:E0:7E:13:6A:74:B5:8F:AB:9D:F6:E4:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7u4tEKRvKRLgfhNqdLWPq5325C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:75:f9:84:66:dd:7a:5e:34:db:c1:5c:fd:6e:e7:e4:20:b3:
0e:60:dc:2b:b9:24:64:ff:18:e9:ff:bf:34:1d:d4:f9:44:39:
f0:66:dc:d3:04:f1:2a:ea:fb:dc:f5:36:2f:90:7a:0c:e8:88:
18:41:8f:75:63:d3:73:7d:6a:f4:5d:46:66:d8:fa:49:70:59:
99:06:36:25:00:3d:22:d3:a1:fa:32:75:33:aa:af:64:06:a6:
3d:1c:68:d4:18:f9:d7:b6:0e:39:bb:77:fa:31:63:c9:0b:8e:
60:aa:a9:f6:22:8f:20:42:ec:7e:00:8c:dc:54:9c:92:2e:72:
80:82:12:58:02:d2:28:f4:90:45:f2:31:3e:5b:8c:14:f1:08:
19:58:7a:97:d8:b4:ca:75:02:84:35:a2:81:9e:93:92:8c:d0:
1c:f7:ce:da:55:8d:71:df:91:6f:c8:51:5b:71:fd:d5:c8:ab:
af:bc:7c:3e:4a:3f:3b:28:cb:8a:fd:1e:b3:05:ad:1b:67:5c:
87:08:94:af:6f:8b:9c:66:9f:26:56:1a:15:5a:c3:7f:0d:a7:
55:ac:b0:4e:af:b6:f9:7c:c1:bd:70:db:af:71:4a:cc:69:10:
0b:7f:aa:16:6a:96:1d:2d:f5:08:c8:13:f2:32:b6:dd:26:75:
62:46:0c:4b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYWBnm9pL/sUuG5YFZs1j6wsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTA1MTEwODQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWVlMmQxMGE0NmYyOTEyZTA3ZTEzNmE3NGI1OGZhYjlkZjZlNDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHdOWLsAgmsF35YlExaB98ulpDA5
06doQf8pIlEMPhTnDJnjIqP+snzs2vjmsK08TI75icVJQUg1wnaiXp+QcfwyXX5k
BQ1Hf05yNFovyPO//rOoeCE8pU4JrkjE45/bTIrpU/O2EEcX0McX3xbitZq8+Nzb
bj2YeSfOXiJoLLYLefsaBnblR4Nao5eQ+O8589iBJeAbP5sQejCW3FFLcA/zkUfI
O9yVzxIiyIzWJENZ5BOsO8yfFYjo8bqEYYD4eW8eKsyNPYx9/PyDOq57+cUcTz7t
igFzv/OedpFHDBO+D7kU5vDbYcjsM3sYaHt4azTH9IKOQduhgT8z8Fp08QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFO7uLRCkbykS4H4TanS1j6ud9uQtMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvN3U0dEVLUnZLUkxnZmhOcWRMV1BxNTMyNUMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABt1+YRm3XpeNNvBXP1u
5+Qgsw5g3Cu5JGT/GOn/vzQd1PlEOfBm3NME8Srq+9z1Ni+QegzoiBhBj3Vj03N9
avRdRmbY+klwWZkGNiUAPSLTofoydTOqr2QGpj0caNQY+de2Djm7d/oxY8kLjmCq
qfYijyBC7H4AjNxUnJIucoCCElgC0ij0kEXyMT5bjBTxCBlYepfYtMp1AoQ1ooGe
k5KM0Bz3ztpVjXHfkW/IUVtx/dXIq6+8fD5KPzsoy4r9HrMFrRtnXIcIlK9vi5xm
nyZWGhVaw38Np1WssE6vtvl8wb1w269xSsxpEAt/qhZqlh0t9QjIE/Iytt0mdWJG
DEs=
-----END CERTIFICATE-----
Generated at Fri May 2 13:20:49 2025 by rpki-client