Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IHuNUKcgsET9bk1FOEG9FBhp_cE.roa
File: IHuNUKcgsET9bk1FOEG9FBhp_cE.roa (raw, json)
Hash identifier: 02mbJ4LCKD9a7AdefvGp/oU8Ws5QMw/CAJGG3fhgFhQ=
Subject key identifier: 20:7B:8D:50:A7:20:B0:44:FD:6E:4D:45:38:41:BD:14:18:69:FD:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7710366A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IHuNUKcgsET9bk1FOEG9FBhp_cE.roa
Signing time: Wed 30 Mar 2022 23:10:49 +0000
ROA not before: Wed 30 Mar 2022 23:10:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1997551210 (0x7710366a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 30 23:10:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=207b8d50a720b044fd6e4d453841bd141869fdc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e4:03:d3:1f:a1:1d:9f:36:2d:86:b6:12:35:
84:63:c0:45:1f:0a:43:68:75:c4:92:1c:30:27:c3:
c7:ed:f1:a1:88:24:ba:e7:9f:5e:4c:bd:33:98:55:
81:28:33:22:0d:15:16:a3:f7:50:6c:05:80:74:5e:
a2:dd:82:3f:fb:0c:8a:dc:24:89:db:ca:d6:43:b9:
55:86:c2:4b:91:15:e3:5f:87:1a:bf:b5:79:aa:2c:
94:32:f4:ad:48:98:9e:4d:90:9e:ea:c3:27:81:f3:
e2:71:66:da:21:8f:92:e1:08:fe:f9:26:a0:8c:b7:
47:fb:91:22:1b:9c:9c:4a:7f:ef:5f:ec:13:cc:e5:
4c:88:78:a3:7e:6e:61:f6:f9:4b:44:8b:2c:19:d1:
bf:27:af:c6:ac:ab:35:df:9d:77:02:0c:35:15:92:
af:78:24:ca:58:e7:56:1a:71:56:ba:86:a8:ea:8f:
f1:03:70:f4:47:1f:63:61:c1:b5:73:6d:1c:d1:b3:
9a:f3:f4:03:ed:87:cc:e0:19:4e:c6:0b:c7:4d:d4:
c0:ea:b5:1e:36:c7:c2:38:99:45:b8:6e:e2:0e:e5:
f0:7e:0d:73:3a:b8:be:a0:1a:62:d7:5e:70:c1:67:
47:bc:d3:e8:7c:cc:8d:a2:40:e6:fd:f2:1d:c3:01:
21:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7B:8D:50:A7:20:B0:44:FD:6E:4D:45:38:41:BD:14:18:69:FD:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IHuNUKcgsET9bk1FOEG9FBhp_cE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:54:14:71:47:07:78:c1:c8:5b:13:b1:17:9d:1c:de:9c:a7:
82:11:15:c4:8e:45:50:1a:61:02:05:03:d9:1b:83:7c:26:b3:
24:94:3b:82:b7:9d:3f:83:79:83:25:a0:45:da:bb:ed:05:5a:
70:d6:fe:10:13:8a:a3:4d:18:fe:6b:23:a6:9c:bc:ec:f6:3d:
97:68:09:1d:4d:ad:20:67:c5:c1:4c:ff:6d:e1:09:62:4d:be:
43:30:75:a9:1e:69:fe:9f:8f:71:e5:a7:6f:2d:0d:13:d6:8d:
7e:da:9d:8a:c3:d8:01:52:1f:53:44:5b:db:6e:a0:ac:66:8e:
a0:ee:2f:e7:15:79:79:35:b7:e8:0a:f7:e9:33:61:ea:66:b4:
8e:0b:85:34:6e:ad:e8:a4:96:ac:63:f1:5b:cc:52:3b:1e:99:
df:c2:d0:91:7b:7a:82:94:c9:c3:b9:aa:2e:b3:a6:48:64:c5:
af:bb:b9:7f:8b:8a:37:61:f0:d8:ed:99:aa:1c:57:8c:f2:e4:
61:ff:b1:57:79:6f:ab:9d:99:e4:bc:7a:32:9c:6c:13:f2:22:
02:ff:ee:5c:9d:33:4a:6c:17:0f:18:f5:4e:38:ed:c0:92:bb:
a8:23:74:db:ce:8d:fc:25:3e:8c:4d:ea:3a:7d:d1:eb:86:5d:
51:c5:9f:e5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEdxA2ajANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMz
MDIzMTA0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjA3YjhkNTBhNzIw
YjA0NGZkNmU0ZDQ1Mzg0MWJkMTQxODY5ZmRjMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKTkA9MfoR2fNi2GthI1hGPARR8KQ2h1xJIcMCfDx+3xoYgk
uuefXky9M5hVgSgzIg0VFqP3UGwFgHReot2CP/sMitwkidvK1kO5VYbCS5EV41+H
Gr+1eaoslDL0rUiYnk2QnurDJ4Hz4nFm2iGPkuEI/vkmoIy3R/uRIhucnEp/71/s
E8zlTIh4o35uYfb5S0SLLBnRvyevxqyrNd+ddwIMNRWSr3gkyljnVhpxVrqGqOqP
8QNw9EcfY2HBtXNtHNGzmvP0A+2HzOAZTsYLx03UwOq1HjbHwjiZRbhu4g7l8H4N
czq4vqAaYtdecMFnR7zT6HzMjaJA5v3yHcMBIUUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQge41QpyCwRP1uTUU4Qb0UGGn9wTAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L0lIdU5VS2Nnc0VUOWJrMUZPRUc5RkJocF9jRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQA4VBRxRwd4wchbE7EXnRzenKeCERXEjkVQGmEC
BQPZG4N8JrMklDuCt50/g3mDJaBF2rvtBVpw1v4QE4qjTRj+ayOmnLzs9j2XaAkd
Ta0gZ8XBTP9t4QliTb5DMHWpHmn+n49x5advLQ0T1o1+2p2Kw9gBUh9TRFvbbqCs
Zo6g7i/nFXl5NbfoCvfpM2HqZrSOC4U0bq3opJasY/FbzFI7HpnfwtCRe3qClMnD
uaous6ZIZMWvu7l/i4o3YfDY7ZmqHFeM8uRh/7FXeW+rnZnkvHoynGwT8iIC/+5c
nTNKbBcPGPVOOO3AkruoI3Tbzo38JT6MTeo6fdHrhl1RxZ/l
-----END CERTIFICATE-----
Generated at Thu May 1 09:26:04 2025 by rpki-client