Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S1FivEeKOFebSKJW7qCYeyY5xd8.roa
File: S1FivEeKOFebSKJW7qCYeyY5xd8.roa (raw, json)
Hash identifier: ZqsXHeU5/S/8st0q5RVwYH/hDU4O0hK2aSMKXe92lPc=
Subject key identifier: 4B:51:62:BC:47:8A:38:57:9B:48:A2:56:EE:A0:98:7B:26:39:C5:DF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 69702480
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S1FivEeKOFebSKJW7qCYeyY5xd8.roa
Signing time: Thu 10 Feb 2022 13:09:31 +0000
ROA not before: Thu 10 Feb 2022 13:09:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
2001:67c:64:ffff:0:17e:d9a6:5e4a/128 maxlen: 128
2001:67c:64:ffff:0:17e:ddba:7b5e/128 maxlen: 128
2001:67c:64:ffff:0:17e:db26:e5c4/128 maxlen: 128
2001:67c:64:ffff:0:17e:dab9:26f6/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:da82:41aa/128 maxlen: 128
2001:67c:64:ffff:0:17e:dd83:3b9e/128 maxlen: 128
2001:67c:64:ffff:0:17e:dcde:5809/128 maxlen: 128
2001:67c:64:ffff:0:17e:d938:ba2e/128 maxlen: 128
2001:67c:64:ffff:0:17e:d85c:d348/128 maxlen: 128
2001:67c:64:ffff:0:17e:daf0:4034/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc02:dc22/128 maxlen: 128
2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7ee:e040/128 maxlen: 128
2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
2001:67c:64:ffff:0:17e:d901:fecb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7b8:3101/128 maxlen: 128
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64:ffff:0:17e:d826:2565/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc39:b603/128 maxlen: 128
2001:67c:64:ffff:0:17e:db5e:7e8/128 maxlen: 128
2001:67c:64:ffff:0:17e:d713:9aeb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
2001:67c:64:ffff:0:17e:d96f:7a13/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1768957056 (0x69702480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 10 13:09:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b5162bc478a38579b48a256eea0987b2639c5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:16:d5:88:4f:98:9c:3d:48:84:2a:69:9e:87:
a6:2f:f9:a8:32:e5:06:e3:4b:93:5b:5d:7d:16:86:
36:85:72:6a:60:6c:08:3f:82:5e:7e:52:d9:f6:14:
6c:42:2b:67:5b:35:8c:dd:a0:47:55:db:49:51:1e:
e7:26:8e:d3:05:a0:16:7d:61:41:cd:10:f6:9b:25:
6f:95:63:31:06:3e:bf:db:df:c9:36:57:80:61:f3:
21:7e:86:e3:35:de:6b:a3:14:59:ec:3b:0c:26:d5:
92:b0:8b:0e:7f:14:53:e2:e0:ac:40:87:b9:28:81:
eb:28:5d:96:28:6f:a6:3f:d4:ab:4e:59:62:e1:ff:
4c:b5:be:cd:96:d4:f3:00:5c:f5:53:4f:ca:bf:9a:
14:38:41:bf:18:ec:1a:20:03:18:07:0a:b0:8b:23:
42:6c:93:16:66:57:13:7a:a2:0e:ae:b0:3e:03:3c:
24:6d:df:fa:bd:0f:06:6d:fb:60:69:4f:8f:5d:32:
10:cf:2c:92:14:92:30:20:5a:74:c6:d7:c1:cb:84:
a0:f3:de:98:ab:79:c6:af:ed:5b:27:31:a7:2c:cc:
0e:f3:4f:ff:95:8e:80:69:98:85:22:ea:17:e8:4c:
3d:20:65:1b:f5:e5:65:1a:80:be:0a:69:95:3a:60:
e0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:51:62:BC:47:8A:38:57:9B:48:A2:56:EE:A0:98:7B:26:39:C5:DF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S1FivEeKOFebSKJW7qCYeyY5xd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:cc:60:c2:13:15:77:c1:e3:ec:b4:1c:58:b7:c8:4e:93:8d:
41:62:c1:9c:a7:91:ad:12:69:f5:39:cf:57:3d:54:9c:22:94:
53:8e:41:13:74:60:5c:ef:9c:20:06:97:89:ea:29:3a:bd:f2:
3e:ca:2e:e1:4a:cb:8f:4b:14:3d:1c:cb:0e:0b:4a:80:ac:28:
31:ef:d3:6e:c9:aa:5a:54:7a:4e:69:b1:27:36:9b:d7:6f:c7:
66:5c:73:01:6f:52:cb:23:9f:3d:db:09:ab:b3:ea:85:fb:25:
9b:cb:9e:c2:79:a5:18:63:73:df:a7:4d:72:92:56:3f:2a:bf:
e3:bd:38:f6:12:05:5a:e8:0c:d8:fe:1d:2e:38:e7:f7:76:bc:
82:c7:ee:18:84:98:25:60:f0:32:ea:88:3d:f8:1f:56:f6:bc:
ca:29:ac:04:30:7f:59:22:c7:a9:27:b3:4b:18:1f:f9:1e:7b:
36:4e:48:83:ef:48:83:4b:93:ef:c7:ab:10:06:46:0c:f7:35:
a8:f8:d3:3c:05:bf:51:23:64:02:87:f3:89:39:b4:69:93:dc:
6b:01:5d:28:bd:1b:3a:8b:68:a7:b3:20:72:5e:b1:60:55:3a:
14:c9:49:e0:30:97:22:ce:e4:5b:23:37:55:fb:92:36:85:7b:
9a:19:78:d3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEaXAkgDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIx
MDEzMDkzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGI1MTYyYmM0Nzhh
Mzg1NzliNDhhMjU2ZWVhMDk4N2IyNjM5YzVkZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL4W1YhPmJw9SIQqaZ6Hpi/5qDLlBuNLk1tdfRaGNoVyamBs
CD+CXn5S2fYUbEIrZ1s1jN2gR1XbSVEe5yaO0wWgFn1hQc0Q9pslb5VjMQY+v9vf
yTZXgGHzIX6G4zXea6MUWew7DCbVkrCLDn8UU+LgrECHuSiB6yhdlihvpj/Uq05Z
YuH/TLW+zZbU8wBc9VNPyr+aFDhBvxjsGiADGAcKsIsjQmyTFmZXE3qiDq6wPgM8
JG3f+r0PBm37YGlPj10yEM8skhSSMCBadMbXwcuEoPPemKt5xq/tWycxpyzMDvNP
/5WOgGmYhSLqF+hMPSBlG/XlZRqAvgpplTpg4OcCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRLUWK8R4o4V5tIolbuoJh7JjnF3zAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L1MxRml2RWVLT0ZlYlNLSlc3cUNZZXlZNXhkOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQBVzGDCExV3wePstBxYt8hOk41BYsGcp5GtEmn1
Oc9XPVScIpRTjkETdGBc75wgBpeJ6ik6vfI+yi7hSsuPSxQ9HMsOC0qArCgx79Nu
yapaVHpOabEnNpvXb8dmXHMBb1LLI5892wmrs+qF+yWby57CeaUYY3Pfp01yklY/
Kr/jvTj2EgVa6AzY/h0uOOf3dryCx+4YhJglYPAy6og9+B9W9rzKKawEMH9ZIsep
J7NLGB/5Hns2TkiD70iDS5Pvx6sQBkYM9zWo+NM8Bb9RI2QCh/OJObRpk9xrAV0o
vRs6i2insyByXrFgVToUyUngMJcizuRbIzdV+5I2hXuaGXjT
-----END CERTIFICATE-----
Generated at Thu May 1 01:15:06 2025 by rpki-client