Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/__NdWk2poZva9bUWWyvAzTNI3PI.roa
File: __NdWk2poZva9bUWWyvAzTNI3PI.roa (raw, json)
Hash identifier: U6hoOr94KS1eDX4/RQC83irjGmYsJzdzHkeKoFct/Nk=
Subject key identifier: FF:F3:5D:5A:4D:A9:A1:9B:DA:F5:B5:16:5B:2B:C0:CD:33:48:DC:F2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6D7BB9D5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/__NdWk2poZva9bUWWyvAzTNI3PI.roa
Signing time: Fri 25 Feb 2022 03:12:42 +0000
ROA not before: Fri 25 Feb 2022 03:12:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1836825045 (0x6d7bb9d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 25 03:12:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fff35d5a4da9a19bdaf5b5165b2bc0cd3348dcf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:35:3d:9e:3e:47:78:d9:e0:a9:23:68:3b:1f:
16:50:7b:8c:e7:88:58:9c:11:1f:3d:c1:fc:ef:e5:
55:08:7a:d8:eb:d9:c9:07:72:0d:6b:ed:49:29:7b:
b7:66:21:e7:54:77:af:a4:bc:12:cb:e7:98:05:a4:
89:f8:0f:0d:2f:a3:fd:af:ff:c0:7d:e9:c5:bc:21:
d8:06:b8:85:bd:03:c1:b8:29:6a:42:c7:34:e0:7d:
a6:3b:e4:96:e0:72:8d:6a:72:30:57:39:d1:50:af:
bd:1e:47:3e:67:03:f9:27:5f:44:67:d5:c1:c3:ca:
06:51:c2:02:32:76:43:de:d3:6b:ad:5b:fb:93:7a:
98:07:fc:fd:90:91:3b:51:fa:b5:14:e2:62:51:99:
9d:41:6f:07:e4:40:b8:b8:46:17:69:2a:08:67:0b:
0a:b2:04:b7:9c:14:6f:0f:2b:57:0f:6f:a1:43:ea:
cd:80:38:08:e3:e1:1b:8b:89:54:2e:b9:d4:a6:f1:
32:71:8b:db:6c:d4:1c:74:80:59:e8:22:f4:d7:d4:
8d:fc:39:6c:3d:df:6e:a6:aa:c1:d4:52:60:42:5f:
63:df:73:29:73:8a:ac:e1:f0:aa:5b:92:05:f1:94:
e8:9f:53:36:96:2c:d5:c6:cb:69:f0:24:13:fd:66:
1f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F3:5D:5A:4D:A9:A1:9B:DA:F5:B5:16:5B:2B:C0:CD:33:48:DC:F2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/__NdWk2poZva9bUWWyvAzTNI3PI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:e6:1c:bd:a1:00:c7:41:4d:f3:fc:7a:67:8b:5e:4a:1f:28:
07:8c:0d:aa:f4:f0:af:c4:c1:e5:cf:9b:d2:13:8e:57:40:1e:
81:e0:99:f4:6d:81:31:c8:56:a4:e9:43:37:5c:31:80:f1:95:
0a:8a:4f:fe:b1:c4:e1:b3:6e:20:92:39:35:2f:f0:62:68:84:
20:f0:fc:7d:bc:65:57:c3:83:c1:2a:55:97:ff:35:40:9d:b2:
6e:78:65:c8:8e:14:62:bf:48:fb:b4:f4:b1:79:02:07:58:30:
6f:f9:9e:83:0e:ba:3c:1e:4d:f3:54:87:ff:b8:b9:40:16:22:
b5:7d:cc:70:eb:71:28:8e:24:d7:c7:63:a1:ab:0b:e0:ff:6b:
2c:f6:95:28:24:9d:eb:8f:0f:ef:49:5c:3c:d8:24:58:32:31:
a0:5c:ac:11:35:a4:91:f9:f7:72:10:5a:fe:22:a5:4b:0c:18:
fb:05:62:4c:b6:c8:7a:98:00:bf:48:fd:73:41:39:59:ac:aa:
3e:cf:a5:ff:5a:33:ba:1e:8e:c1:0b:ec:85:fb:9b:e2:8c:30:
a0:be:5a:ee:45:c2:8a:27:1b:fb:e9:2d:c7:1f:9e:4a:48:eb:
24:16:ad:dd:78:60:0e:b3:52:80:20:ce:2c:36:7c:4b:0c:43:
18:01:5d:a7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEbXu51TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIy
NTAzMTI0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmZmMzVkNWE0ZGE5
YTE5YmRhZjViNTE2NWIyYmMwY2QzMzQ4ZGNmMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMc1PZ4+R3jZ4KkjaDsfFlB7jOeIWJwRHz3B/O/lVQh62OvZ
yQdyDWvtSSl7t2Yh51R3r6S8EsvnmAWkifgPDS+j/a//wH3pxbwh2Aa4hb0Dwbgp
akLHNOB9pjvkluByjWpyMFc50VCvvR5HPmcD+SdfRGfVwcPKBlHCAjJ2Q97Ta61b
+5N6mAf8/ZCRO1H6tRTiYlGZnUFvB+RAuLhGF2kqCGcLCrIEt5wUbw8rVw9voUPq
zYA4COPhG4uJVC651KbxMnGL22zUHHSAWegi9NfUjfw5bD3fbqaqwdRSYEJfY99z
KXOKrOHwqluSBfGU6J9TNpYs1cbLafAkE/1mH68CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBT/811aTamhm9r1tRZbK8DNM0jc8jAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L19fTmRXazJwb1p2YTliVVdXeXZBelROSTNQSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQB75hy9oQDHQU3z/Hpni15KHygHjA2q9PCvxMHl
z5vSE45XQB6B4Jn0bYExyFak6UM3XDGA8ZUKik/+scThs24gkjk1L/BiaIQg8Px9
vGVXw4PBKlWX/zVAnbJueGXIjhRiv0j7tPSxeQIHWDBv+Z6DDro8Hk3zVIf/uLlA
FiK1fcxw63EojiTXx2Ohqwvg/2ss9pUoJJ3rjw/vSVw82CRYMjGgXKwRNaSR+fdy
EFr+IqVLDBj7BWJMtsh6mAC/SP1zQTlZrKo+z6X/WjO6Ho7BC+yF+5vijDCgvlru
RcKKJxv76S3HH55KSOskFq3deGAOs1KAIM4sNnxLDEMYAV2n
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:49:46 2025 by rpki-client