Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X1ZesKCTVD04XVGrgVNNla8M2vk.roa
File: X1ZesKCTVD04XVGrgVNNla8M2vk.roa (raw, json)
Hash identifier: SZbBFVbqvTBPvvI6LFiZb6PAksqgOPs5U/ycqLgHAVY=
Subject key identifier: 5F:56:5E:B0:A0:93:54:3D:38:5D:51:AB:81:53:4D:95:AF:0C:DA:F9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7110A17B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X1ZesKCTVD04XVGrgVNNla8M2vk.roa
Signing time: Wed 09 Mar 2022 15:09:51 +0000
ROA not before: Wed 09 Mar 2022 15:09:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1896915323 (0x7110a17b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 9 15:09:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f565eb0a093543d385d51ab81534d95af0cdaf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4c:ee:8a:0b:4a:dd:b4:f9:a1:fe:b6:5f:36:
8e:71:64:68:7f:c8:21:98:83:52:dc:f9:dd:b0:04:
1e:a8:f0:5c:12:06:e8:00:a8:d1:4f:a2:02:bc:f3:
8e:b6:ea:e5:1d:7d:8b:70:a6:4b:5b:f0:f5:a5:c8:
01:ef:1e:58:f9:a8:55:09:a2:c7:4a:9c:00:60:42:
fb:e4:ad:b9:af:e4:75:2b:bb:82:20:88:74:24:8a:
5b:45:03:b4:9c:c6:e4:34:38:91:7e:58:5b:63:d7:
f4:84:3c:b3:f4:a1:35:ab:d8:6d:42:37:b9:6f:49:
e4:8f:a7:98:4d:aa:d7:6e:e7:58:42:98:8b:aa:be:
7d:bd:0c:72:b8:98:a9:d6:6d:1e:d6:de:4d:84:80:
85:3b:e6:8d:92:56:66:7c:aa:19:9a:1a:5d:c9:fa:
fd:cd:3c:10:68:c7:4c:5d:de:b4:aa:1f:e1:14:33:
5a:6e:bc:98:da:a2:69:de:63:86:ad:64:de:c9:c4:
3f:3f:1d:a4:2f:50:0d:96:c4:74:56:03:b1:7f:a2:
29:de:e7:ae:76:ba:68:c4:6b:d1:60:09:3c:5a:89:
f0:c5:90:5d:7f:9e:a8:51:3b:1a:99:04:4f:e0:ef:
7f:05:db:59:f5:59:ac:ef:3a:90:c1:4b:ef:2b:60:
6c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:56:5E:B0:A0:93:54:3D:38:5D:51:AB:81:53:4D:95:AF:0C:DA:F9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X1ZesKCTVD04XVGrgVNNla8M2vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:a2:fb:c5:a9:85:28:7e:23:60:f7:19:c3:87:50:a0:65:d3:
76:60:89:c7:5c:4f:09:31:2c:57:03:5e:12:9d:e5:6d:5a:8f:
f4:47:87:69:7f:24:13:a1:ff:05:d1:2e:82:31:03:4f:5e:95:
51:b3:08:e5:7e:0e:2c:ce:91:9e:c6:f6:39:68:83:84:de:cb:
c9:d3:07:60:ba:b9:29:34:30:9b:cb:87:e2:84:f2:da:ed:a8:
03:bb:d1:71:08:d9:f3:4f:15:62:af:01:ca:bb:2d:1b:f1:8b:
20:c9:61:8e:c0:f4:87:03:b0:23:df:8e:27:cc:80:6d:97:19:
bb:4d:82:d7:d7:bc:f5:c8:be:0c:07:ff:5b:4a:31:0d:e8:16:
ac:16:d8:aa:ea:56:36:3f:41:15:cc:6b:07:05:87:45:11:51:
b3:2e:fb:f0:85:20:d6:7a:c9:7d:27:3a:2e:3e:6b:d1:0a:ab:
26:27:83:8c:1c:30:1e:d0:42:6e:23:78:77:ea:51:22:89:68:
40:19:1f:d8:7d:99:32:b5:61:80:ab:1a:f0:2d:2b:da:ec:34:
69:e3:83:f7:9d:d9:db:bc:f8:c6:4f:13:75:26:f0:cb:3b:79:
a1:f0:e2:a9:23:e1:2f:cb:01:7b:7e:5f:8c:07:c0:23:fa:43:
e6:68:09:bf
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEcRChezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMw
OTE1MDk1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWY1NjVlYjBhMDkz
NTQzZDM4NWQ1MWFiODE1MzRkOTVhZjBjZGFmOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALVM7ooLSt20+aH+tl82jnFkaH/IIZiDUtz53bAEHqjwXBIG
6ACo0U+iArzzjrbq5R19i3CmS1vw9aXIAe8eWPmoVQmix0qcAGBC++Stua/kdSu7
giCIdCSKW0UDtJzG5DQ4kX5YW2PX9IQ8s/ShNavYbUI3uW9J5I+nmE2q127nWEKY
i6q+fb0McriYqdZtHtbeTYSAhTvmjZJWZnyqGZoaXcn6/c08EGjHTF3etKof4RQz
Wm68mNqiad5jhq1k3snEPz8dpC9QDZbEdFYDsX+iKd7nrna6aMRr0WAJPFqJ8MWQ
XX+eqFE7GpkET+DvfwXbWfVZrO86kMFL7ytgbOcCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRfVl6woJNUPThdUauBU02Vrwza+TAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L1gxWmVzS0NUVkQwNFhWR3JnVk5ObGE4TTJ2ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAwovvFqYUofiNg9xnDh1CgZdN2YInHXE8JMSxX
A14SneVtWo/0R4dpfyQTof8F0S6CMQNPXpVRswjlfg4szpGexvY5aIOE3svJ0wdg
urkpNDCby4fihPLa7agDu9FxCNnzTxVirwHKuy0b8YsgyWGOwPSHA7Aj344nzIBt
lxm7TYLX17z1yL4MB/9bSjEN6BasFtiq6lY2P0EVzGsHBYdFEVGzLvvwhSDWesl9
JzouPmvRCqsmJ4OMHDAe0EJuI3h36lEiiWhAGR/YfZkytWGAqxrwLSva7DRp44P3
ndnbvPjGTxN1JvDLO3mh8OKpI+EvywF7fl+MB8Aj+kPmaAm/
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:51:50 2025 by rpki-client