Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P1w7-RIn96zVMKuUOpIUxiGxOfM.roa
File: P1w7-RIn96zVMKuUOpIUxiGxOfM.roa (raw, json)
Hash identifier: rmJCdlOI09YFN2bkSayjXVWQecgksEqWLk4f8SayOq8=
Subject key identifier: 3F:5C:3B:F9:12:27:F7:AC:D5:30:AB:94:3A:92:14:C6:21:B1:39:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 822F6D51
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P1w7-RIn96zVMKuUOpIUxiGxOfM.roa
Signing time: Sun 08 May 2022 10:11:30 +0000
ROA not before: Sun 08 May 2022 10:11:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2184146257 (0x822f6d51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 8 10:11:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f5c3bf91227f7acd530ab943a9214c621b139f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:91:25:bf:58:91:a4:33:b3:aa:2f:14:3a:8d:
bd:64:73:1c:10:57:6c:c7:e2:cb:d9:8f:6c:c3:e4:
b0:7d:55:ae:a7:9f:15:0a:c2:11:fa:43:a4:ae:59:
cd:b7:13:01:ef:44:1c:55:08:c2:fe:f0:a0:1c:eb:
6a:23:41:fc:ee:d1:3d:0b:9b:37:a7:9d:3c:d1:56:
02:82:74:c6:47:b2:54:f9:83:cc:f4:9f:35:86:7c:
fb:9a:40:7e:7a:6f:40:20:7f:a7:6f:b7:46:86:b0:
4f:94:14:11:21:4e:68:e6:1d:98:35:7b:17:74:fc:
63:dc:c7:01:5c:c4:d7:a6:ca:e3:a0:69:d5:76:29:
8f:ec:28:d6:ff:13:35:1a:fe:c3:3c:66:c6:e2:43:
a2:2c:9c:da:5c:81:d3:a0:3e:a4:43:3d:ce:c6:cb:
3c:02:b7:69:a5:c0:8a:61:cf:3c:78:c4:ec:4a:49:
76:3c:dc:b1:10:4f:8a:5f:6a:da:a4:10:7a:5b:bc:
f7:fe:8e:c9:e8:ef:ad:56:01:ff:2a:da:e4:3c:f4:
e4:c8:72:5c:87:29:a6:2f:8c:83:3c:08:f5:bb:29:
08:f5:45:40:5a:04:ef:b4:88:6c:f7:97:b1:ff:22:
6f:63:07:0e:c0:7a:45:ea:00:13:50:1e:11:7d:8f:
0e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5C:3B:F9:12:27:F7:AC:D5:30:AB:94:3A:92:14:C6:21:B1:39:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P1w7-RIn96zVMKuUOpIUxiGxOfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:de:f0:e5:17:fd:9e:74:e7:01:bc:e6:ff:e7:de:be:68:64:
4f:8d:bd:06:29:b1:9b:ec:05:c1:0e:d1:d3:36:ae:23:65:d1:
d7:1b:e1:ca:08:5e:f7:93:a3:d3:c3:4e:37:17:ca:7f:0b:78:
32:0e:da:52:55:6f:9c:e1:08:75:78:ae:3a:3c:a4:9a:68:67:
56:73:69:a3:61:58:84:bb:7b:24:ec:06:df:14:5f:0d:5c:e4:
38:c2:ee:5b:ac:92:a7:22:fc:54:9d:65:56:f5:dd:8f:b7:26:
0a:1c:56:e9:34:77:9a:3f:69:d0:57:d8:2e:36:23:96:2d:bf:
46:28:7e:47:bb:77:79:29:8e:a6:8f:72:a4:70:fc:f1:86:20:
0a:ef:12:2d:53:b6:72:d1:b8:98:9b:93:9d:16:5a:13:34:49:
5b:5d:db:d8:84:a6:2e:3f:f4:9d:c9:af:78:a4:45:c2:05:37:
b9:20:b4:1d:db:79:78:98:b0:e3:b8:df:08:af:77:c4:e0:3c:
6a:67:b2:f5:e1:db:ae:f4:0c:2d:a6:18:f2:f7:83:be:9b:1a:
45:39:48:97:2e:35:65:ce:ec:63:d2:ec:0d:52:10:80:e4:77:
da:46:bd:d6:13:c2:c9:28:55:43:3b:a7:35:e6:8d:1a:fe:e0:
71:05:29:6a
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIIvbVEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MDgxMDExMzBaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDNmNWMzYmY5MTIy
N2Y3YWNkNTMwYWI5NDNhOTIxNGM2MjFiMTM5ZjMwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQClkSW/WJGkM7OqLxQ6jb1kcxwQV2zH4svZj2zD5LB9Va6n
nxUKwhH6Q6SuWc23EwHvRBxVCML+8KAc62ojQfzu0T0LmzennTzRVgKCdMZHslT5
g8z0nzWGfPuaQH56b0Agf6dvt0aGsE+UFBEhTmjmHZg1exd0/GPcxwFcxNemyuOg
adV2KY/sKNb/EzUa/sM8ZsbiQ6IsnNpcgdOgPqRDPc7GyzwCt2mlwIphzzx4xOxK
SXY83LEQT4pfatqkEHpbvPf+jsno761WAf8q2uQ89OTIclyHKaYvjIM8CPW7KQj1
RUBaBO+0iGz3l7H/Im9jBw7AekXqABNQHhF9jw6tAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUP1w7+RIn96zVMKuUOpIUxiGxOfMwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9QMXc3LVJJbjk2elZNS3VVT3BJVXhpR3hPZk0ucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAtd7w5Rf9nnTnAbzm/+fevmhkT429Bimxm+wF
wQ7R0zauI2XR1xvhyghe95Oj08NONxfKfwt4Mg7aUlVvnOEIdXiuOjykmmhnVnNp
o2FYhLt7JOwG3xRfDVzkOMLuW6ySpyL8VJ1lVvXdj7cmChxW6TR3mj9p0FfYLjYj
li2/Rih+R7t3eSmOpo9ypHD88YYgCu8SLVO2ctG4mJuTnRZaEzRJW13b2ISmLj/0
ncmveKRFwgU3uSC0Hdt5eJiw47jfCK93xOA8amey9eHbrvQMLaYY8veDvpsaRTlI
ly41Zc7sY9LsDVIQgOR32ka91hPCyShVQzunNeaNGv7gcQUpag==
-----END CERTIFICATE-----
Generated at Thu May 1 00:43:46 2025 by rpki-client