Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B347YKQa0VpSmftT3rNvVTWmRkU.roa
File: B347YKQa0VpSmftT3rNvVTWmRkU.roa (raw, json)
Hash identifier: jY6SzXFWvcexyu0BbRbxTEQ4BQQSDd08wOl+0MviWmA=
Subject key identifier: 07:7E:3B:60:A4:1A:D1:5A:52:99:FB:53:DE:B3:6F:55:35:A6:46:45
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 696885BC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B347YKQa0VpSmftT3rNvVTWmRkU.roa
Signing time: Thu 10 Feb 2022 11:09:40 +0000
ROA not before: Thu 10 Feb 2022 11:09:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
2001:67c:64:ffff:0:17e:d9a6:5e4a/128 maxlen: 128
2001:67c:64:ffff:0:17e:ddba:7b5e/128 maxlen: 128
2001:67c:64:ffff:0:17e:db26:e5c4/128 maxlen: 128
2001:67c:64:ffff:0:17e:dab9:26f6/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:da82:41aa/128 maxlen: 128
2001:67c:64:ffff:0:17e:dd83:3b9e/128 maxlen: 128
2001:67c:64:ffff:0:17e:dcde:5809/128 maxlen: 128
2001:67c:64:ffff:0:17e:d938:ba2e/128 maxlen: 128
2001:67c:64:ffff:0:17e:d85c:d348/128 maxlen: 128
2001:67c:64:ffff:0:17e:daf0:4034/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc02:dc22/128 maxlen: 128
2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7ee:e040/128 maxlen: 128
2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
2001:67c:64:ffff:0:17e:d901:fecb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7b8:3101/128 maxlen: 128
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64:ffff:0:17e:d826:2565/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc39:b603/128 maxlen: 128
2001:67c:64:ffff:0:17e:db5e:7e8/128 maxlen: 128
2001:67c:64:ffff:0:17e:d713:9aeb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
2001:67c:64:ffff:0:17e:d96f:7a13/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1768457660 (0x696885bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 10 11:09:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=077e3b60a41ad15a5299fb53deb36f5535a64645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1c:92:10:64:d0:8f:2c:8d:ff:8f:94:7d:86:
c7:d3:12:f2:0c:b5:0e:95:2c:7c:ff:6d:a0:42:da:
4f:af:60:69:f4:a5:3f:c4:04:e1:db:21:07:13:de:
0e:f2:f0:d3:3c:98:eb:91:a1:6b:0a:15:b8:75:a9:
3d:f0:f4:90:a4:b1:c2:7f:3d:26:b0:36:e0:8c:a1:
dc:c0:de:16:fc:9d:8c:af:09:99:a9:03:80:03:d6:
33:bb:03:54:26:b8:2e:83:d9:c3:f6:3d:6a:56:da:
f6:75:14:53:1f:37:20:03:e5:1e:8d:e8:84:cc:b9:
1a:66:91:f9:2b:7d:40:d0:48:e5:99:9a:33:2a:1a:
03:91:dd:95:e8:c7:d4:bd:ab:02:b3:8f:27:e5:8f:
f8:a3:f2:47:97:bb:96:25:86:58:d0:e6:3f:67:e9:
a7:89:25:ef:fb:75:a1:87:e4:e3:63:fc:3c:81:83:
0a:1f:35:24:5d:e1:3e:b6:60:7c:eb:c1:fd:dc:5d:
08:db:28:06:08:70:8f:4c:f6:08:a9:f5:28:d1:17:
27:51:da:14:c4:39:12:09:00:d7:90:05:26:6a:cf:
b2:7e:81:3e:3d:63:33:8a:1d:40:a3:df:67:82:ba:
85:19:ee:a8:8f:6d:9a:89:9a:7e:e8:73:fb:91:60:
27:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7E:3B:60:A4:1A:D1:5A:52:99:FB:53:DE:B3:6F:55:35:A6:46:45
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B347YKQa0VpSmftT3rNvVTWmRkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:72:0a:d4:9f:17:2f:04:98:5f:4f:fd:72:3c:5b:7f:9f:91:
7a:75:13:c0:1a:e9:b9:17:33:4e:03:89:25:1e:07:59:dd:90:
a2:15:43:95:5d:8a:6e:35:db:3a:99:11:fe:e3:6c:d0:d0:b2:
b2:81:b6:98:85:cf:a5:1d:4d:86:10:61:a3:1a:32:61:16:12:
a9:24:da:55:15:ae:f6:35:fc:c8:b4:4c:21:9d:9d:37:6b:32:
28:4d:4d:e3:ec:e1:12:c6:e9:4d:84:4e:68:69:05:28:8d:d7:
43:a3:36:7a:ec:d0:49:00:a3:c4:57:c5:e4:16:d1:73:38:b9:
41:f9:72:0e:6f:d3:98:a6:cb:58:55:e1:e8:1a:63:ac:49:52:
17:ca:13:66:74:79:8d:af:d2:99:fd:b5:92:df:53:d3:3c:e2:
86:08:06:1e:ea:08:9a:7e:4c:b7:d8:3c:00:bb:e6:de:a5:4a:
ee:c9:2e:63:bd:8a:f8:ee:82:cd:40:42:42:15:7a:7d:09:48:
b1:ab:46:84:c0:39:69:e4:74:0a:4f:25:ed:a6:2a:0d:15:a0:
aa:08:ae:af:0d:b7:f0:ae:4c:95:50:ee:b4:c5:6b:72:2b:93:
8d:46:ff:dd:42:ff:a6:62:89:e1:39:75:e6:99:fd:d2:71:62:
fb:83:09:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:11:41 2025 by rpki-client