Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_hWO_BZ0FBjoTVhCEV3AbzC1PBM.roa
File: _hWO_BZ0FBjoTVhCEV3AbzC1PBM.roa (raw, json)
Hash identifier: 512JL7IdiqEBAce4TcvvPxJ2CygeUG/JfSBIghNx0D0=
Subject key identifier: FE:15:8E:FC:16:74:14:18:E8:4D:58:42:11:5D:C0:6F:30:B5:3C:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01825F20384E6C822D48624CCBF50D4AE63E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_hWO_BZ0FBjoTVhCEV3AbzC1PBM.roa
Signing time: Tue 02 Aug 2022 15:15:23 +0000
ROA not before: Tue 02 Aug 2022 15:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5f:20:38:4e:6c:82:2d:48:62:4c:cb:f5:0d:4a:e6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 15:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe158efc16741418e84d5842115dc06f30b53c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:89:15:f9:e3:28:19:10:94:7c:5b:90:52:e9:
f9:5b:53:5f:80:5b:80:c7:5d:ce:34:db:97:b1:65:
6c:77:1f:f5:8c:96:48:b0:ff:88:da:e4:d0:8b:48:
eb:68:7d:83:d2:a5:2c:cd:e0:cc:06:c7:63:8f:72:
78:d3:ad:2d:d4:55:d2:49:09:3f:ec:9c:e1:8d:2c:
e7:5b:d9:eb:c1:9c:e9:d6:25:6a:54:12:3b:10:11:
84:fa:4e:13:c8:60:77:20:a9:1b:b3:41:d5:1a:97:
c9:33:56:1f:fc:0b:3f:74:e8:ba:44:40:9c:aa:02:
34:55:89:5a:04:cf:e8:d5:6f:48:9d:98:c3:4e:14:
ea:79:03:81:6a:f0:6b:25:c8:0d:22:7e:b8:e1:4a:
8a:68:18:4c:2d:89:76:e4:40:a9:b0:f5:4a:c6:79:
91:d0:27:29:64:5f:85:af:db:42:78:b5:54:c8:37:
09:99:95:d9:62:a7:ac:17:f8:79:b1:61:85:d7:2d:
30:1d:eb:e0:eb:bf:40:ff:2a:44:d6:ad:2d:0a:42:
fc:ce:b3:7c:6a:b2:f7:df:84:47:69:bf:25:da:74:
a2:4b:26:5d:e3:5c:65:89:c0:5e:48:5d:d3:2e:c4:
7a:57:4c:8c:62:38:47:38:ab:3f:1c:ff:8c:8e:75:
b2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:15:8E:FC:16:74:14:18:E8:4D:58:42:11:5D:C0:6F:30:B5:3C:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_hWO_BZ0FBjoTVhCEV3AbzC1PBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:c6:99:b6:29:d6:52:9e:07:94:a0:09:5a:32:eb:0f:bd:28:
09:ea:4f:23:98:51:6b:f8:85:1d:38:a3:ec:e1:6d:28:a0:51:
b5:bd:a3:33:86:4e:c3:03:f2:7e:08:0b:25:5e:79:8e:00:44:
02:ab:57:f7:88:e5:0f:9b:7e:b6:9d:b5:ae:aa:db:22:06:96:
2f:20:14:aa:bb:f4:54:8c:a9:8c:ae:e0:f2:44:50:a1:56:cd:
eb:94:37:55:bd:6f:65:a9:40:97:4c:b6:a5:b3:28:7c:eb:e0:
bf:ea:42:44:32:d8:52:70:6a:cf:fe:d0:b3:41:a1:7c:e7:d8:
a7:b1:f6:7f:75:ce:20:a9:89:92:52:bd:9e:ec:95:0d:26:ed:
a5:be:bc:8b:f8:02:d0:48:77:b2:ce:1e:b1:d1:01:73:72:43:
27:70:85:26:6c:f6:69:3b:0c:6f:b8:64:a9:08:ab:44:c4:99:
e2:11:6c:bf:78:51:c4:fc:e7:c5:d2:ab:d2:82:c4:1e:7c:d2:
6e:f0:0d:d5:d9:e6:f1:e9:be:ad:4e:18:9f:65:36:2f:5b:8c:
dc:ab:5e:67:63:2b:b7:5d:f7:3c:f2:b1:1a:d9:7d:10:d0:52:
14:a1:6c:78:aa:62:18:68:82:32:30:1d:32:ff:4f:75:4a:c9:
cc:06:b7:39
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYJfIDhObIItSGJMy/UNSuY+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODAyMTUxNTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTE1OGVmYzE2NzQxNDE4ZTg0ZDU4NDIxMTVkYzA2ZjMwYjUzYzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4kV+eMoGRCUfFuQUun5W1NfgFuA
x13ONNuXsWVsdx/1jJZIsP+I2uTQi0jraH2D0qUszeDMBsdjj3J4060t1FXSSQk/
7JzhjSznW9nrwZzp1iVqVBI7EBGE+k4TyGB3IKkbs0HVGpfJM1Yf/As/dOi6RECc
qgI0VYlaBM/o1W9InZjDThTqeQOBavBrJcgNIn644UqKaBhMLYl25ECpsPVKxnmR
0CcpZF+Fr9tCeLVUyDcJmZXZYqesF/h5sWGF1y0wHevg679A/ypE1q0tCkL8zrN8
arL334RHab8l2nSiSyZd41xlicBeSF3TLsR6V0yMYjhHOKs/HP+MjnWy3wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFP4VjvwWdBQY6E1YQhFdwG8wtTwTMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvX2hXT19CWjBGQmpvVFZoQ0VWM0FiekMxUEJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEnGmbYp1lKeB5SgCVoy
6w+9KAnqTyOYUWv4hR04o+zhbSigUbW9ozOGTsMD8n4ICyVeeY4ARAKrV/eI5Q+b
fradta6q2yIGli8gFKq79FSMqYyu4PJEUKFWzeuUN1W9b2WpQJdMtqWzKHzr4L/q
QkQy2FJwas/+0LNBoXzn2Kex9n91ziCpiZJSvZ7slQ0m7aW+vIv4AtBId7LOHrHR
AXNyQydwhSZs9mk7DG+4ZKkIq0TEmeIRbL94UcT858XSq9KCxB580m7wDdXZ5vHp
vq1OGJ9lNi9bjNyrXmdjK7dd9zzysRrZfRDQUhShbHiqYhhogjIwHTL/T3VKycwG
tzk=
-----END CERTIFICATE-----
Generated at Sat May 3 19:18:02 2025 by rpki-client