Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/809hsDXTFtThhtqlWkjKvzZTTdM.roa
File: 809hsDXTFtThhtqlWkjKvzZTTdM.roa (raw, json)
Hash identifier: ZX6NYD2a1VOGMWwYqXKTOiWP2qUdIIevdE++20/KyiY=
Subject key identifier: F3:4F:61:B0:35:D3:16:D4:E1:86:DA:A5:5A:48:CA:BF:36:53:4D:D3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 71A5EBCD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/809hsDXTFtThhtqlWkjKvzZTTdM.roa
Signing time: Fri 11 Mar 2022 16:08:56 +0000
ROA not before: Fri 11 Mar 2022 16:08:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1906699213 (0x71a5ebcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 11 16:08:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f34f61b035d316d4e186daa55a48cabf36534dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:09:a7:2b:36:ed:3d:eb:74:7a:a1:56:b1:
1e:7d:4d:65:07:4b:52:fa:2c:1d:e0:81:4a:45:23:
61:1a:8a:9e:4d:85:cb:e9:f2:97:e8:1f:35:d6:62:
7a:9a:0c:98:6c:cf:56:8d:6b:0e:03:12:6c:30:b0:
7e:5c:22:73:18:d8:f0:aa:d7:70:6c:7f:64:4a:d3:
f0:e5:60:40:93:e4:5b:0e:62:ff:25:5e:71:34:fa:
b6:63:bb:3d:10:6a:29:e8:79:51:0f:8d:db:b4:e4:
ba:e5:77:68:15:ad:21:5e:cb:62:30:50:9c:7d:d6:
19:7a:0f:c2:5f:30:ba:ec:42:8d:1d:1d:1f:23:45:
aa:04:36:62:ec:4f:98:1f:91:65:33:41:56:40:7d:
6f:ab:89:a2:d4:71:32:39:e6:be:e1:96:d7:03:8a:
1f:de:f8:19:14:73:0a:7d:02:9a:20:7e:d0:65:c9:
c4:96:c4:e8:7e:d7:71:a7:33:ee:ee:8f:a6:b3:c4:
46:a3:6d:f0:7e:09:28:20:8c:88:9e:78:75:b1:55:
0d:eb:44:1e:44:79:08:77:68:47:fc:2f:f8:b0:96:
e9:81:ba:05:b3:f4:b9:aa:0f:26:7b:45:69:49:11:
1a:c6:d5:25:a9:84:a8:2c:7e:d7:ce:bb:ad:83:13:
86:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4F:61:B0:35:D3:16:D4:E1:86:DA:A5:5A:48:CA:BF:36:53:4D:D3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/809hsDXTFtThhtqlWkjKvzZTTdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:15:42:ad:08:e2:8e:a5:c7:19:19:95:64:e3:ec:28:4a:98:
2b:82:f6:e1:61:c3:fe:e6:65:67:35:8a:2b:76:6f:50:ed:d6:
8d:19:48:a0:ff:70:6d:fa:5b:82:66:87:bf:2b:9b:79:7c:d8:
fb:55:0a:83:ea:cd:59:45:a8:49:d7:19:5b:52:33:55:98:57:
21:0e:4f:b2:8f:4a:94:4d:3f:20:6c:91:9b:b4:fe:b4:16:8c:
7b:62:10:6c:af:05:74:28:fb:67:3f:dd:f4:00:22:97:76:55:
ae:34:84:d1:75:5b:01:d6:5a:6e:72:1b:32:67:36:68:74:84:
0b:b2:dc:1f:9a:cb:9e:b2:02:72:16:5d:7d:ef:8e:40:6b:8e:
d9:f5:0e:7c:b1:49:2d:18:c8:16:d8:20:3c:73:fc:20:5d:02:
4a:ab:a2:bf:26:f2:7e:af:4d:43:ab:36:fa:c2:a4:44:e3:5b:
f7:27:5a:c9:59:2e:82:ac:e5:57:7c:98:ca:51:dc:6b:39:f9:
10:72:a0:1c:40:a5:78:ac:ea:b7:8e:88:33:84:24:25:62:de:
84:df:4c:c2:0a:50:b9:30:c5:0a:db:c4:96:9c:41:9f:d9:b4:
a1:74:aa:4c:dc:e9:1b:8b:dc:cc:67:93:4a:86:cf:79:8a:24:
d4:f7:90:64
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEcaXrzTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMx
MTE2MDg1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjM0ZjYxYjAzNWQz
MTZkNGUxODZkYWE1NWE0OGNhYmYzNjUzNGRkMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMIfCacrNu0963R6oVaxHn1NZQdLUvosHeCBSkUjYRqKnk2F
y+nyl+gfNdZiepoMmGzPVo1rDgMSbDCwflwicxjY8KrXcGx/ZErT8OVgQJPkWw5i
/yVecTT6tmO7PRBqKeh5UQ+N27TkuuV3aBWtIV7LYjBQnH3WGXoPwl8wuuxCjR0d
HyNFqgQ2YuxPmB+RZTNBVkB9b6uJotRxMjnmvuGW1wOKH974GRRzCn0CmiB+0GXJ
xJbE6H7Xcacz7u6PprPERqNt8H4JKCCMiJ54dbFVDetEHkR5CHdoR/wv+LCW6YG6
BbP0uaoPJntFaUkRGsbVJamEqCx+1867rYMThukCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTzT2GwNdMW1OGG2qVaSMq/NlNN0zAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
LzgwOWhzRFhURnRUaGh0cWxXa2pLdnpaVFRkTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQA0FUKtCOKOpccZGZVk4+woSpgrgvbhYcP+5mVn
NYordm9Q7daNGUig/3Bt+luCZoe/K5t5fNj7VQqD6s1ZRahJ1xlbUjNVmFchDk+y
j0qUTT8gbJGbtP60Fox7YhBsrwV0KPtnP930ACKXdlWuNITRdVsB1lpuchsyZzZo
dIQLstwfmsuesgJyFl19745Aa47Z9Q58sUktGMgW2CA8c/wgXQJKq6K/JvJ+r01D
qzb6wqRE41v3J1rJWS6CrOVXfJjKUdxrOfkQcqAcQKV4rOq3jogzhCQlYt6E30zC
ClC5MMUK28SWnEGf2bShdKpM3Okbi9zMZ5NKhs95iiTU95Bk
-----END CERTIFICATE-----
Generated at Thu May 1 19:16:55 2025 by rpki-client