Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_IuAuwSsRwG6l-fejYyvtT71ePY.roa
File: _IuAuwSsRwG6l-fejYyvtT71ePY.roa (raw, json)
Hash identifier: lUVFGhMmujJmDG+xpjNsTgyTRs0XXbKoYj8NJz2BuWo=
Subject key identifier: FC:8B:80:BB:04:AC:47:01:BA:97:E7:DE:8D:8C:AF:B5:3E:F5:78:F6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6FE03F94
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_IuAuwSsRwG6l-fejYyvtT71ePY.roa
Signing time: Sat 05 Mar 2022 11:11:29 +0000
ROA not before: Sat 05 Mar 2022 11:11:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1876967316 (0x6fe03f94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 5 11:11:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc8b80bb04ac4701ba97e7de8d8cafb53ef578f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:85:e2:0a:6f:7c:43:73:1a:b4:eb:48:c1:4d:
c7:2e:59:cc:8e:ed:f3:d1:2d:fa:79:5c:ba:71:1c:
cf:50:4b:7c:01:d5:10:ce:cb:56:37:ac:c3:54:78:
ea:ca:ae:59:26:fa:64:7c:62:09:e2:96:35:5a:43:
d3:bc:80:52:a0:84:f8:b5:e7:a1:2d:04:be:37:05:
0f:83:b0:d6:88:21:ce:79:38:7d:15:6d:76:92:0d:
55:31:50:c5:4a:0a:2d:8c:c8:b3:8b:3b:02:8b:98:
c6:24:80:93:e0:84:41:ee:16:da:81:cd:b3:f0:23:
b7:e6:b1:3d:4a:5a:32:eb:1f:ae:64:95:c9:b8:b6:
a8:38:dd:5e:f9:01:e4:16:6f:e8:45:1f:f7:c0:73:
88:69:26:91:80:22:e5:d9:51:ef:fc:2f:bd:15:2a:
c3:21:50:b8:67:e8:4f:7b:78:1d:eb:58:c4:bd:37:
7e:ad:cb:ff:34:e5:d2:aa:46:e1:e0:da:b9:1b:2b:
ce:b8:6c:87:78:37:9f:d8:25:d0:e8:5d:a4:8e:7c:
1d:85:53:47:eb:d0:bb:17:08:f8:85:a6:fc:80:83:
5d:27:a8:e6:54:20:3f:9a:32:ef:ff:8c:04:09:20:
dd:85:21:8a:be:a8:20:72:62:bd:9e:b2:d6:3a:01:
1c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8B:80:BB:04:AC:47:01:BA:97:E7:DE:8D:8C:AF:B5:3E:F5:78:F6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_IuAuwSsRwG6l-fejYyvtT71ePY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:ac:f4:d0:b8:97:b1:c6:6f:13:d4:14:f0:4f:33:20:69:2c:
61:de:cf:93:32:34:8a:17:63:1b:fe:07:7c:f6:3b:53:74:d5:
ff:a1:5e:48:74:b3:ca:17:f2:bb:a4:26:11:80:6a:ce:82:bc:
ca:b1:42:d3:a5:c9:4e:86:0c:29:d1:99:13:e2:96:74:52:b8:
38:06:9a:ce:17:e4:6c:ef:65:6d:7a:bc:38:a4:2d:3e:19:d5:
cf:5f:85:7f:33:b8:4b:ee:72:4c:cd:e4:95:60:d3:77:b9:56:
f5:b3:22:ca:89:3c:47:6c:81:fa:d2:b8:22:cb:8d:01:8d:ec:
4b:3e:2f:8d:c4:ff:c1:57:7a:f0:9e:4c:22:a2:8f:a0:d7:f5:
8c:11:14:d8:67:83:8a:f2:d0:cd:b6:e6:04:31:9b:94:61:01:
ff:3b:73:ff:10:47:53:e5:9b:c3:10:31:b8:07:e3:9b:c0:ad:
82:ad:4b:d9:6a:e3:58:7d:ca:f2:e4:13:f7:dd:bb:88:91:3d:
2a:b6:57:66:4d:08:fa:f6:4a:19:ed:09:3f:5f:cb:06:a6:5f:
1e:c2:30:2a:fb:48:ef:73:1a:0b:d7:8b:7d:a6:7d:27:f6:8c:
c2:a8:2c:32:bd:0f:85:ef:91:14:9b:5b:dc:91:19:5f:89:01:
bf:9d:14:d1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEb+A/lDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMw
NTExMTEyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmM4YjgwYmIwNGFj
NDcwMWJhOTdlN2RlOGQ4Y2FmYjUzZWY1NzhmNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ2F4gpvfENzGrTrSMFNxy5ZzI7t89Et+nlcunEcz1BLfAHV
EM7LVjesw1R46squWSb6ZHxiCeKWNVpD07yAUqCE+LXnoS0EvjcFD4Ow1oghznk4
fRVtdpINVTFQxUoKLYzIs4s7AouYxiSAk+CEQe4W2oHNs/Ajt+axPUpaMusfrmSV
ybi2qDjdXvkB5BZv6EUf98BziGkmkYAi5dlR7/wvvRUqwyFQuGfoT3t4HetYxL03
fq3L/zTl0qpG4eDauRsrzrhsh3g3n9gl0OhdpI58HYVTR+vQuxcI+IWm/ICDXSeo
5lQgP5oy7/+MBAkg3YUhir6oIHJivZ6y1joBHFUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBT8i4C7BKxHAbqX596NjK+1PvV49jAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L19JdUF1d1NzUndHNmwtZmVqWXl2dFQ3MWVQWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAnrPTQuJexxm8T1BTwTzMgaSxh3s+TMjSKF2Mb
/gd89jtTdNX/oV5IdLPKF/K7pCYRgGrOgrzKsULTpclOhgwp0ZkT4pZ0Urg4BprO
F+Rs72Vterw4pC0+GdXPX4V/M7hL7nJMzeSVYNN3uVb1syLKiTxHbIH60rgiy40B
jexLPi+NxP/BV3rwnkwioo+g1/WMERTYZ4OK8tDNtuYEMZuUYQH/O3P/EEdT5ZvD
EDG4B+ObwK2CrUvZauNYfcry5BP33buIkT0qtldmTQj69koZ7Qk/X8sGpl8ewjAq
+0jvcxoL14t9pn0n9ozCqCwyvQ+F75EUm1vckRlfiQG/nRTR
-----END CERTIFICATE-----
Generated at Thu May 1 15:53:55 2025 by rpki-client