Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_EFdwdIUXtEVehb_2ssiRZvDc9k.roa
File: _EFdwdIUXtEVehb_2ssiRZvDc9k.roa (raw, json)
Hash identifier: 3Qtu28NYOBfR3tjntZpJzGHIxnxR2yT93pb2ovJMi94=
Subject key identifier: FC:41:5D:C1:D2:14:5E:D1:15:7A:16:FF:DA:CB:22:45:9B:C3:73:D9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6E317257
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_EFdwdIUXtEVehb_2ssiRZvDc9k.roa
Signing time: Sun 27 Feb 2022 15:10:58 +0000
ROA not before: Sun 27 Feb 2022 15:10:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1848734295 (0x6e317257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 27 15:10:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc415dc1d2145ed1157a16ffdacb22459bc373d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:49:15:8c:2f:62:2c:38:b7:13:9f:d6:36:
63:0a:75:c7:eb:c3:b7:85:b9:8e:1a:af:4a:84:ab:
c3:07:de:28:66:39:dc:03:e8:c1:24:08:40:7a:33:
0f:b3:b6:12:b9:ea:ad:db:11:45:5e:fd:06:1d:7a:
22:15:2c:7f:51:65:40:6e:8c:56:9e:63:66:b5:60:
76:51:b7:57:0c:f2:72:5b:bd:2c:67:5e:0a:13:76:
fd:73:ef:fb:69:31:e2:d7:ad:89:10:b3:99:03:dc:
dc:0c:80:47:27:4c:36:2b:d1:92:d6:a6:d6:85:cd:
4a:69:89:75:0b:e9:c2:1f:bd:9b:01:f2:c0:24:a0:
54:e0:1d:8d:d7:ad:29:14:b2:00:b6:fd:2e:54:1c:
08:7b:70:91:2b:ac:b3:a9:a7:a0:10:c4:cf:c6:37:
1e:7a:8f:0f:6c:47:61:11:66:ea:16:d5:d2:15:af:
e4:56:98:20:27:c9:44:0b:d4:b0:f1:48:55:ea:68:
cd:db:16:06:df:13:ef:c6:c2:6e:3c:07:26:f4:e6:
3a:00:bf:1f:18:35:ed:e0:53:2c:e6:b9:dd:2d:23:
ec:a1:cc:59:cf:8e:c1:10:44:cf:80:e2:cc:ec:32:
79:56:66:a6:68:0f:3a:fb:d7:97:72:a1:58:36:9e:
ed:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:41:5D:C1:D2:14:5E:D1:15:7A:16:FF:DA:CB:22:45:9B:C3:73:D9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_EFdwdIUXtEVehb_2ssiRZvDc9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:cd:dd:c9:f6:ce:66:d5:d5:e1:10:23:2f:b2:2d:e9:a6:1c:
c8:16:e3:23:89:33:59:b7:09:6a:44:d1:18:ca:dd:32:58:84:
1f:66:73:da:fa:28:6a:4b:04:52:fa:49:49:1f:5e:2e:00:02:
d7:a3:b0:24:a2:df:74:ee:0b:a9:03:f2:3d:3b:fa:6b:b2:62:
de:11:5f:1e:25:f1:cc:e9:f7:43:76:19:08:7c:d1:82:ff:c0:
21:5a:68:d8:3b:e3:72:cc:5d:17:9d:ee:85:76:d2:48:4c:81:
d2:36:d0:85:4e:f3:ab:60:0b:bc:87:07:4e:66:5e:16:db:78:
a9:b2:eb:95:ee:ec:a7:71:56:39:52:d8:fa:a2:15:f4:a3:2a:
83:28:2d:00:23:1e:bd:4c:27:a0:f5:96:c8:e3:de:ce:7d:fa:
14:a9:24:19:c0:d0:e4:da:50:00:f3:01:93:29:d4:aa:5c:c2:
32:68:6c:97:89:50:d7:89:43:a3:2a:18:d2:a7:29:a9:80:9d:
40:13:f8:a4:1d:5b:a1:b0:1d:00:a7:ce:66:55:01:d1:12:b8:
ee:0b:30:dc:e8:31:a7:b7:35:33:9c:58:b7:92:a1:51:4a:49:
d7:41:f5:e2:d7:4a:4b:72:6a:07:ab:8c:14:b1:80:6f:e2:a3:
b4:d6:79:6e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEbjFyVzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIy
NzE1MTA1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmM0MTVkYzFkMjE0
NWVkMTE1N2ExNmZmZGFjYjIyNDU5YmMzNzNkOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMLySRWML2IsOLcTn9Y2Ywp1x+vDt4W5jhqvSoSrwwfeKGY5
3APowSQIQHozD7O2ErnqrdsRRV79Bh16IhUsf1FlQG6MVp5jZrVgdlG3Vwzyclu9
LGdeChN2/XPv+2kx4tetiRCzmQPc3AyARydMNivRktam1oXNSmmJdQvpwh+9mwHy
wCSgVOAdjdetKRSyALb9LlQcCHtwkSuss6mnoBDEz8Y3HnqPD2xHYRFm6hbV0hWv
5FaYICfJRAvUsPFIVepozdsWBt8T78bCbjwHJvTmOgC/Hxg17eBTLOa53S0j7KHM
Wc+OwRBEz4DizOwyeVZmpmgPOvvXl3KhWDae7bMCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBT8QV3B0hRe0RV6Fv/ayyJFm8Nz2TAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L19FRmR3ZElVWHRFVmVoYl8yc3NpUlp2RGM5ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCjzd3J9s5m1dXhECMvsi3pphzIFuMjiTNZtwlq
RNEYyt0yWIQfZnPa+ihqSwRS+klJH14uAALXo7Akot907gupA/I9O/prsmLeEV8e
JfHM6fdDdhkIfNGC/8AhWmjYO+NyzF0Xne6FdtJITIHSNtCFTvOrYAu8hwdOZl4W
23ipsuuV7uyncVY5Utj6ohX0oyqDKC0AIx69TCeg9ZbI497OffoUqSQZwNDk2lAA
8wGTKdSqXMIyaGyXiVDXiUOjKhjSpympgJ1AE/ikHVuhsB0Ap85mVQHRErjuCzDc
6DGntzUznFi3kqFRSknXQfXi10pLcmoHq4wUsYBv4qO01nlu
-----END CERTIFICATE-----
Generated at Thu May 1 01:15:15 2025 by rpki-client