Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cLx0YyU5UffbiDqda5cuOoA5p0E.roa
File: cLx0YyU5UffbiDqda5cuOoA5p0E.roa (raw, json)
Hash identifier: 164fB1bFb/cpWT4grzdHEds7iwKPckyvhcW2X0cDato=
Subject key identifier: 70:BC:74:63:25:39:51:F7:DB:88:3A:9D:6B:97:2E:3A:80:39:A7:41
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7F5AC679
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cLx0YyU5UffbiDqda5cuOoA5p0E.roa
Signing time: Thu 28 Apr 2022 21:10:23 +0000
ROA not before: Thu 28 Apr 2022 21:10:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2136655481 (0x7f5ac679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 28 21:10:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70bc7463253951f7db883a9d6b972e3a8039a741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2b:3e:de:74:79:c4:51:c5:9a:bf:e4:80:1e:
fe:f2:2f:f6:b6:46:2d:d9:16:cc:38:80:f6:ca:81:
6c:d4:8a:1d:41:2c:33:30:c8:3f:24:86:a0:74:58:
f0:57:88:e2:72:db:40:59:95:de:06:09:db:d8:ed:
2f:58:14:11:8c:5f:a6:52:31:37:4c:e0:77:0d:5c:
0e:72:43:33:9b:4d:69:99:52:ca:11:00:ef:21:9a:
6e:70:8e:24:20:66:e0:8c:c5:19:54:83:60:c6:0e:
0a:5b:4d:81:e6:38:96:88:b0:18:07:1c:83:fe:4d:
a3:ab:b8:d0:77:51:28:e2:10:4a:90:d2:4a:19:d7:
26:14:99:5a:94:b6:09:fe:41:f6:79:f7:ca:0c:21:
f7:3b:c7:f3:99:a3:ec:f4:f6:27:d6:81:23:7c:94:
61:76:52:cc:98:0e:b3:ed:f2:d4:7d:44:81:d5:cc:
96:ea:27:e2:9f:ba:f6:7f:c2:09:f5:b2:38:8a:8e:
36:c5:7c:50:87:8f:43:c4:c4:51:3d:79:1a:8d:4f:
71:d6:dd:26:45:09:85:e2:cb:2c:b6:5e:bd:01:ee:
0f:31:43:94:40:96:e4:cf:e0:44:aa:56:29:ec:56:
97:47:5b:01:65:65:a7:25:08:22:9a:47:70:93:82:
e6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BC:74:63:25:39:51:F7:DB:88:3A:9D:6B:97:2E:3A:80:39:A7:41
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cLx0YyU5UffbiDqda5cuOoA5p0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:e2:6c:c6:96:93:ef:4d:69:57:6c:47:9e:34:16:77:30:38:
63:50:d6:d8:aa:92:df:50:32:1d:6d:9f:0d:d0:75:c2:7b:0a:
b6:f9:11:b4:f1:b9:57:28:9e:25:ed:13:f9:44:67:88:1d:46:
18:55:4b:4d:c0:4c:0d:4e:ab:92:39:67:fe:55:f4:d7:8f:26:
09:e7:38:70:0c:d4:14:b7:74:f8:05:31:4c:8c:9f:32:62:50:
db:af:1b:b2:60:c4:13:60:68:fb:79:d7:2e:dc:c0:4e:da:0b:
30:30:eb:78:d1:f5:c4:92:9d:a4:06:8a:43:d6:89:9c:9b:20:
6a:e1:1a:6c:f2:1e:37:c0:c9:82:20:4e:41:1f:0f:4c:8b:0c:
4b:0b:7e:97:e7:d1:a0:1a:e0:a2:1c:87:ae:92:46:ee:c9:12:
b5:18:27:9d:1a:68:e3:7d:a5:8f:36:5c:96:d6:b5:d2:64:83:
19:5d:ff:54:f4:2a:ff:4c:b2:a7:88:44:af:f9:92:a7:47:b9:
55:d8:11:49:75:26:ad:54:97:80:6c:69:d0:1d:2d:1b:3a:fd:
b8:82:49:a6:d5:a3:c3:cf:37:f5:3c:a6:49:4a:09:27:6e:98:
ba:6a:f5:c7:d8:a1:76:ff:25:f9:c2:0f:1a:70:1a:58:3c:94:
9b:56:9e:08
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEf1rGeTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDQy
ODIxMTAyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzBiYzc0NjMyNTM5
NTFmN2RiODgzYTlkNmI5NzJlM2E4MDM5YTc0MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMMrPt50ecRRxZq/5IAe/vIv9rZGLdkWzDiA9sqBbNSKHUEs
MzDIPySGoHRY8FeI4nLbQFmV3gYJ29jtL1gUEYxfplIxN0zgdw1cDnJDM5tNaZlS
yhEA7yGabnCOJCBm4IzFGVSDYMYOCltNgeY4loiwGAccg/5No6u40HdRKOIQSpDS
ShnXJhSZWpS2Cf5B9nn3ygwh9zvH85mj7PT2J9aBI3yUYXZSzJgOs+3y1H1EgdXM
luon4p+69n/CCfWyOIqONsV8UIePQ8TEUT15Go1PcdbdJkUJheLLLLZevQHuDzFD
lECW5M/gRKpWKexWl0dbAWVlpyUIIppHcJOC5qkCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRwvHRjJTlR99uIOp1rly46gDmnQTAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L2NMeDBZeVU1VWZmYmlEcWRhNWN1T29BNXAwRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQBZ4mzGlpPvTWlXbEeeNBZ3MDhjUNbYqpLfUDId
bZ8N0HXCewq2+RG08blXKJ4l7RP5RGeIHUYYVUtNwEwNTquSOWf+VfTXjyYJ5zhw
DNQUt3T4BTFMjJ8yYlDbrxuyYMQTYGj7edcu3MBO2gswMOt40fXEkp2kBopD1omc
myBq4Rps8h43wMmCIE5BHw9MiwxLC36X59GgGuCiHIeukkbuyRK1GCedGmjjfaWP
NlyW1rXSZIMZXf9U9Cr/TLKniESv+ZKnR7lV2BFJdSatVJeAbGnQHS0bOv24gkmm
1aPDzzf1PKZJSgknbpi6avXH2KF2/yX5wg8acBpYPJSbVp4I
-----END CERTIFICATE-----
Generated at Thu May 1 07:46:38 2025 by rpki-client