Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_bxilqztA8JAdgreJRZ1AKjo0YU.roa
File: _bxilqztA8JAdgreJRZ1AKjo0YU.roa (raw, json)
Hash identifier: V9nxeva7jpOalxukRPbcODPp531sVWFnGLxQ7r672kc=
Subject key identifier: FD:BC:62:96:AC:ED:03:C2:40:76:0A:DE:25:16:75:00:A8:E8:D1:85
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 85C673F2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_bxilqztA8JAdgreJRZ1AKjo0YU.roa
Signing time: Fri 20 May 2022 16:12:29 +0000
ROA not before: Fri 20 May 2022 16:12:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:ddb5:bc5/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:e0ec:efe1/128 maxlen: 128
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2244375538 (0x85c673f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 20 16:12:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdbc6296aced03c240760ade25167500a8e8d185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:36:7e:1d:7c:6f:f9:95:30:d1:26:47:34:14:
2b:13:08:e4:52:27:73:8f:f7:f4:91:ff:f5:3c:50:
01:24:2a:d0:f4:bb:2e:b3:4b:e0:48:35:4e:0b:f2:
a1:57:66:32:12:d6:33:d1:c7:5a:4f:4e:bc:24:66:
ad:29:61:16:ae:55:a1:b0:b0:ab:e9:91:d9:c4:da:
0b:4d:82:02:26:e8:47:4c:b6:d2:ce:d7:5c:96:29:
62:6c:ed:7f:81:f3:de:c5:2e:3d:75:89:97:94:b9:
0e:cb:7a:e2:2b:0c:35:ba:ec:fd:60:15:12:98:68:
4b:81:41:f8:38:fb:b9:18:d1:90:96:4e:91:65:ae:
f6:3b:0f:ca:19:b2:6e:ab:1c:ef:55:99:c1:bd:24:
a0:39:ad:a4:d0:3b:01:9a:00:56:0c:9a:15:03:0a:
c7:62:d2:f8:78:d3:b9:39:7e:d4:9a:ea:9f:8f:55:
ba:71:29:e2:a2:d9:fe:ab:ea:87:35:91:74:18:a5:
6c:9c:a3:af:0a:70:09:d3:e0:82:6f:33:6b:90:78:
16:c1:b7:99:e7:16:c0:5e:63:ec:e8:3f:b2:48:45:
aa:00:a6:e7:b4:19:ad:c7:93:94:9f:de:30:57:0a:
50:06:d0:ba:54:4c:9a:30:17:cd:5e:07:36:03:af:
89:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BC:62:96:AC:ED:03:C2:40:76:0A:DE:25:16:75:00:A8:E8:D1:85
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_bxilqztA8JAdgreJRZ1AKjo0YU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:cf:3a:dd:74:9f:64:f1:e0:88:44:8e:20:05:e3:55:99:a6:
de:4e:25:22:66:75:4a:0a:29:32:f0:6c:2e:d8:5f:23:3d:84:
b3:95:1a:93:4d:6e:3e:f8:f7:2f:6d:bc:ec:76:86:64:a7:39:
bb:e2:a2:cd:bd:6e:9f:9e:5e:c2:8f:10:19:6a:4b:02:92:9a:
5b:21:6b:6c:16:c3:d4:4b:dd:62:10:e0:13:43:ec:3c:10:46:
37:d6:51:00:98:f3:f5:d8:79:71:68:f6:4d:3c:68:73:d0:94:
47:86:02:b7:24:88:1f:c1:1e:de:88:a2:86:bc:d5:4c:f9:5c:
93:ae:df:36:78:c7:42:5f:bb:2c:91:fb:99:d0:36:a7:f7:ac:
b5:eb:aa:3f:b4:05:19:db:c2:d8:ce:ca:b8:35:f1:9d:ab:2f:
7a:36:9a:c8:df:44:0c:a3:44:65:6e:36:81:b3:48:33:8e:51:
b7:f6:95:72:23:6a:9f:a8:0b:d1:48:15:4d:0b:a5:47:d8:37:
f5:a9:0a:c4:ef:52:6a:9b:da:0c:1d:aa:7f:21:d2:2a:f8:95:
ac:f5:f0:89:87:57:f2:df:c8:85:aa:ed:48:9f:56:1d:1d:ca:
47:6a:17:c0:1c:fd:df:df:0d:45:1d:09:a3:ac:69:4b:37:7a:
91:72:38:2e
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIXGc/IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MjAxNjEyMjlaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGZkYmM2Mjk2YWNl
ZDAzYzI0MDc2MGFkZTI1MTY3NTAwYThlOGQxODUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCFNn4dfG/5lTDRJkc0FCsTCORSJ3OP9/SR//U8UAEkKtD0
uy6zS+BINU4L8qFXZjIS1jPRx1pPTrwkZq0pYRauVaGwsKvpkdnE2gtNggIm6EdM
ttLO11yWKWJs7X+B897FLj11iZeUuQ7LeuIrDDW67P1gFRKYaEuBQfg4+7kY0ZCW
TpFlrvY7D8oZsm6rHO9VmcG9JKA5raTQOwGaAFYMmhUDCsdi0vh407k5ftSa6p+P
VbpxKeKi2f6r6oc1kXQYpWyco68KcAnT4IJvM2uQeBbBt5nnFsBeY+zoP7JIRaoA
pue0Ga3Hk5Sf3jBXClAG0LpUTJowF81eBzYDr4kHAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQU/bxilqztA8JAdgreJRZ1AKjo0YUwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9fYnhpbHF6dEE4SkFkZ3JlSlJaMUFLam8wWVUucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAW8863XSfZPHgiESOIAXjVZmm3k4lImZ1Sgop
MvBsLthfIz2Es5Uak01uPvj3L2287HaGZKc5u+Kizb1un55ewo8QGWpLApKaWyFr
bBbD1EvdYhDgE0PsPBBGN9ZRAJjz9dh5cWj2TTxoc9CUR4YCtySIH8Ee3oiihrzV
TPlck67fNnjHQl+7LJH7mdA2p/esteuqP7QFGdvC2M7KuDXxnasvejaayN9EDKNE
ZW42gbNIM45Rt/aVciNqn6gL0UgVTQulR9g39akKxO9SapvaDB2qfyHSKviVrPXw
iYdX8t/IhartSJ9WHR3KR2oXwBz9398NRR0Jo6xpSzd6kXI4Lg==
-----END CERTIFICATE-----
Generated at Fri May 2 09:20:07 2025 by rpki-client