Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Nl07M-sjEFKCpqcwEYhypKRNIu4.roa
File: Nl07M-sjEFKCpqcwEYhypKRNIu4.roa (raw, json)
Hash identifier: o4zdiXFSK1aRYE5rs8pKGJ1BlVrAV/DwOCvcRwA8szY=
Subject key identifier: 36:5D:3B:33:EB:23:10:52:82:A6:A7:30:11:88:72:A4:A4:4D:22:EE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 82BBC072
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Nl07M-sjEFKCpqcwEYhypKRNIu4.roa
Signing time: Tue 10 May 2022 08:11:04 +0000
ROA not before: Tue 10 May 2022 08:11:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2193342578 (0x82bbc072)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 10 08:11:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=365d3b33eb23105282a6a730118872a4a44d22ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ea:59:2a:ac:ae:2c:42:da:c2:c1:bc:74:1f:
c1:8a:61:26:e1:76:13:06:b1:87:a9:2b:60:ec:84:
38:78:bc:ac:34:f3:ea:cf:c2:0a:95:cc:77:70:f9:
c1:29:b7:97:60:7b:3d:13:8c:7a:48:96:35:bb:9e:
da:df:db:66:82:e8:38:a7:b3:bb:78:73:8c:62:fd:
23:bc:39:b3:c9:19:5e:80:64:39:ae:16:82:18:5d:
6b:eb:37:ed:cd:8f:59:30:d2:6d:59:2a:6a:ca:72:
08:12:49:33:98:32:5c:89:87:dd:ac:0b:96:f2:72:
8e:e0:31:61:6a:8d:23:8b:b2:89:63:81:7c:9c:72:
d0:47:38:5d:58:09:cb:5f:85:55:f8:cf:35:27:4e:
01:a3:ae:19:11:2f:51:db:b8:34:b1:08:be:46:c8:
7d:d9:5d:b6:bb:7e:65:01:90:e1:58:17:9f:00:b4:
7d:02:19:2d:f5:85:2d:4c:9c:26:cb:df:60:5d:7a:
73:30:46:3d:49:70:d0:fa:9b:5f:1c:46:d5:97:56:
12:ea:cd:62:23:6c:36:ea:93:9d:21:da:2a:6f:de:
0f:fe:5e:88:a9:be:4f:11:24:03:92:9d:f3:1d:16:
bc:ef:76:32:ea:c3:d6:11:f8:ea:6f:6b:a5:c6:b9:
74:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5D:3B:33:EB:23:10:52:82:A6:A7:30:11:88:72:A4:A4:4D:22:EE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Nl07M-sjEFKCpqcwEYhypKRNIu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:c3:93:e5:59:94:69:a5:7d:74:88:14:be:1f:a1:0c:17:46:
a6:59:92:d5:4b:e0:57:39:fc:5c:aa:0f:51:40:40:1a:ee:9a:
53:4b:5a:da:8a:8e:ed:16:4f:b6:c5:d5:9c:e9:ee:1b:e5:14:
84:b1:4c:27:c6:7f:19:49:3e:42:d6:24:fe:76:20:3e:42:4b:
ed:92:ea:c6:67:38:02:bc:8d:9c:16:8b:37:f9:6b:37:02:f6:
6e:2a:eb:6b:f1:b6:95:9e:ff:89:a4:00:6d:1b:6c:4c:bf:2a:
72:8d:bd:18:0e:82:80:ee:d8:37:83:e0:ce:6e:ca:a4:8b:fe:
29:24:de:a0:e1:88:97:bf:02:4c:8c:04:99:c4:2d:ae:2a:00:
e9:75:c8:e4:39:f2:38:b4:f3:01:e9:fd:db:57:a7:cd:40:07:
f2:d9:48:a6:d4:ea:36:89:06:7d:79:f8:ef:d9:29:53:65:a6:
45:34:e3:03:d8:a2:ed:c6:6f:db:5c:59:ca:30:fd:3c:27:27:
ca:5b:3f:79:ef:3c:93:8e:56:e1:74:65:42:aa:f2:4c:18:3e:
5b:ed:c3:1a:43:f3:21:20:ec:f5:94:46:6f:71:12:9f:95:3f:
30:51:02:66:2f:aa:51:9b:e8:e2:4e:bb:4b:3c:58:c7:6c:9e:
c6:55:28:ee
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIK7wHIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MTAwODExMDRaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDM2NWQzYjMzZWIy
MzEwNTI4MmE2YTczMDExODg3MmE0YTQ0ZDIyZWUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCk6lkqrK4sQtrCwbx0H8GKYSbhdhMGsYepK2DshDh4vKw0
8+rPwgqVzHdw+cEpt5dgez0TjHpIljW7ntrf22aC6Dins7t4c4xi/SO8ObPJGV6A
ZDmuFoIYXWvrN+3Nj1kw0m1ZKmrKcggSSTOYMlyJh92sC5byco7gMWFqjSOLsolj
gXycctBHOF1YCctfhVX4zzUnTgGjrhkRL1HbuDSxCL5GyH3ZXba7fmUBkOFYF58A
tH0CGS31hS1MnCbL32BdenMwRj1JcND6m18cRtWXVhLqzWIjbDbqk50h2ipv3g/+
Xoipvk8RJAOSnfMdFrzvdjLqw9YR+Opva6XGuXTJAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUNl07M+sjEFKCpqcwEYhypKRNIu4wHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9ObDA3TS1zakVGS0NwcWN3RVloeXBLUk5JdTQucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAVMOT5VmUaaV9dIgUvh+hDBdGplmS1UvgVzn8
XKoPUUBAGu6aU0ta2oqO7RZPtsXVnOnuG+UUhLFMJ8Z/GUk+QtYk/nYgPkJL7ZLq
xmc4AryNnBaLN/lrNwL2birra/G2lZ7/iaQAbRtsTL8qco29GA6CgO7YN4Pgzm7K
pIv+KSTeoOGIl78CTIwEmcQtrioA6XXI5DnyOLTzAen921enzUAH8tlIptTqNokG
fXn479kpU2WmRTTjA9ii7cZv21xZyjD9PCcnyls/ee88k45W4XRlQqryTBg+W+3D
GkPzISDs9ZRGb3ESn5U/MFECZi+qUZvo4k67SzxYx2yexlUo7g==
-----END CERTIFICATE-----
Generated at Fri May 2 14:25:11 2025 by rpki-client