Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_BdQ3DaHx_NH2CMU9IBtBz0iZjY.roa
File: _BdQ3DaHx_NH2CMU9IBtBz0iZjY.roa (raw, json)
Hash identifier: vzXXX+wD6Lg9RtkMAiJltvrfcFJKPkMkiARlcTVmKIQ=
Subject key identifier: FC:17:50:DC:36:87:C7:F3:47:D8:23:14:F4:80:6D:07:3D:22:66:36
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018211A7E22ED240B981ADAD64007637D478
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_BdQ3DaHx_NH2CMU9IBtBz0iZjY.roa
Signing time: Mon 18 Jul 2022 14:13:11 +0000
ROA not before: Mon 18 Jul 2022 14:13:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:11:a7:e2:2e:d2:40:b9:81:ad:ad:64:00:76:37:d4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 18 14:13:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc1750dc3687c7f347d82314f4806d073d226636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:e7:d1:0e:fa:5d:6e:42:9f:74:0d:70:06:
cd:06:49:46:df:ce:a4:a0:0b:d4:61:b0:fb:11:ed:
b2:12:3f:51:e9:9d:d4:d3:b2:3a:5e:40:74:30:c4:
d7:37:dc:04:99:8f:3f:df:e0:7c:65:f1:0d:ef:47:
cb:1f:e7:d6:8f:7d:fd:dc:63:f5:7a:a6:ce:27:36:
8a:14:8f:15:8a:e0:d0:5b:3a:a7:01:61:4b:43:ed:
2f:00:d6:ec:e4:f2:c6:33:05:b6:df:9f:16:f9:0c:
81:c8:a1:e1:b0:79:4c:fd:d2:b9:8a:7d:e0:5c:41:
56:3f:a1:8e:37:3e:92:ef:d4:fc:3d:7d:a8:d3:25:
69:6a:6f:04:97:a8:b7:2e:04:64:d2:69:de:a9:96:
d8:28:f8:dd:ab:6f:af:bc:b6:f6:20:b7:49:5d:7a:
6b:1d:ad:13:01:fe:aa:9b:d5:96:ec:e3:d5:5b:b6:
d1:fc:43:d5:a1:e2:75:eb:64:cd:23:c9:e7:7f:93:
87:55:2b:4a:c2:94:91:7b:c4:00:38:87:55:f1:49:
c7:80:e1:69:b5:f3:fb:1c:72:6c:2e:69:94:ac:e3:
0b:92:57:6c:c8:9c:de:1c:1e:3c:a1:9f:fb:a8:83:
a8:de:36:c7:43:4d:63:4a:0f:02:ac:0a:53:7b:e4:
97:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:17:50:DC:36:87:C7:F3:47:D8:23:14:F4:80:6D:07:3D:22:66:36
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_BdQ3DaHx_NH2CMU9IBtBz0iZjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:f3:5f:03:5f:6a:0d:14:1e:b1:99:2a:0c:fc:09:37:d6:82:
1a:04:d1:60:3b:b2:da:ec:7c:a8:71:a4:e0:0c:52:78:2f:01:
05:9a:59:35:ee:5f:b0:dd:be:bb:09:31:62:45:9c:6e:0e:55:
a2:22:b0:d5:d5:8c:1e:38:8d:ba:ef:6c:84:fd:59:f4:74:2f:
65:9e:4e:35:c5:ea:42:93:0e:ea:fa:23:37:3c:87:7b:68:3e:
fc:a3:22:ad:3e:9b:37:2d:df:7a:f7:d2:5a:fb:3b:63:f0:1c:
8b:b5:25:db:3c:95:9d:37:98:38:6c:18:33:24:0d:94:2a:ad:
ec:d5:a6:98:c0:f8:1e:2a:89:a7:cb:65:fe:55:87:75:63:5d:
13:1d:c4:d4:45:b4:ad:7b:91:d2:f1:76:1c:1e:aa:c0:6c:4c:
99:03:a6:82:28:9a:d0:52:94:b5:f4:10:64:b8:a7:15:ec:76:
5d:32:25:f9:1f:47:39:90:77:68:cf:8e:91:14:54:32:d6:b8:
b7:3e:86:18:46:5c:57:41:7d:95:5d:0e:e8:0c:fc:a3:21:26:
35:a7:6f:63:c1:dc:05:1f:74:e8:b2:75:a2:1d:b1:91:01:fa:
74:d8:3f:17:68:81:b8:62:c8:4d:0c:7b:b3:c3:09:14:50:7d:
a1:f0:98:27
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYIRp+Iu0kC5ga2tZAB2N9R4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzE4MTQxMzExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzE3NTBkYzM2ODdjN2YzNDdkODIzMTRmNDgwNmQwNzNkMjI2NjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQrn0Q76XW5Cn3QNcAbNBklG386k
oAvUYbD7Ee2yEj9R6Z3U07I6XkB0MMTXN9wEmY8/3+B8ZfEN70fLH+fWj3393GP1
eqbOJzaKFI8ViuDQWzqnAWFLQ+0vANbs5PLGMwW2358W+QyByKHhsHlM/dK5in3g
XEFWP6GONz6S79T8PX2o0yVpam8El6i3LgRk0mneqZbYKPjdq2+vvLb2ILdJXXpr
Ha0TAf6qm9WW7OPVW7bR/EPVoeJ162TNI8nnf5OHVStKwpSRe8QAOIdV8UnHgOFp
tfP7HHJsLmmUrOMLkldsyJzeHB48oZ/7qIOo3jbHQ01jSg8CrApTe+SXsQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPwXUNw2h8fzR9gjFPSAbQc9ImY2MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvX0JkUTNEYUh4X05IMkNNVTlJQnRCejBpWmpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFLzXwNfag0UHrGZKgz8
CTfWghoE0WA7strsfKhxpOAMUngvAQWaWTXuX7DdvrsJMWJFnG4OVaIisNXVjB44
jbrvbIT9WfR0L2WeTjXF6kKTDur6Izc8h3toPvyjIq0+mzct33r30lr7O2PwHIu1
Jds8lZ03mDhsGDMkDZQqrezVppjA+B4qiafLZf5Vh3VjXRMdxNRFtK17kdLxdhwe
qsBsTJkDpoIomtBSlLX0EGS4pxXsdl0yJfkfRzmQd2jPjpEUVDLWuLc+hhhGXFdB
fZVdDugM/KMhJjWnb2PB3AUfdOiydaIdsZEB+nTYPxdogbhiyE0Me7PDCRRQfaHw
mCc=
-----END CERTIFICATE-----
Generated at Thu May 1 07:19:13 2025 by rpki-client