Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f-cVCnU2aHgzdo1CuVtKoYiGkRY.roa
File: f-cVCnU2aHgzdo1CuVtKoYiGkRY.roa (raw, json)
Hash identifier: oXDmJ5Qf8umozTe27jVbA45tH60kzVARN7+SXz1rHfQ=
Subject key identifier: 7F:E7:15:0A:75:36:68:78:33:76:8D:42:B9:5B:4A:A1:88:86:91:16
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01846BF8E1344D6C976C94782E4A74DA30D5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f-cVCnU2aHgzdo1CuVtKoYiGkRY.roa
Signing time: Sat 12 Nov 2022 13:13:03 +0000
ROA not before: Sat 12 Nov 2022 13:13:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6b:f8:e1:34:4d:6c:97:6c:94:78:2e:4a:74:da:30:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 12 13:13:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fe7150a7536687833768d42b95b4aa188869116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ef:3c:6b:23:fd:29:e7:00:8d:18:f4:a9:3e:
d3:1c:b4:cf:a8:76:66:0f:ce:59:41:2c:c2:bb:10:
a9:a5:8a:0b:18:3a:fa:3f:f6:1a:7d:a5:07:10:8d:
e3:ee:d3:81:f0:9e:8e:0a:d7:61:57:64:40:d4:35:
6a:e1:7c:7f:1c:cd:9f:9a:3b:68:f7:93:7c:36:4e:
82:44:88:cf:db:9b:01:c0:9c:55:02:08:44:ad:9c:
da:21:ee:e5:15:aa:d1:43:bf:ab:5c:3f:b3:7a:30:
60:5e:3e:61:82:66:d3:ff:15:be:08:47:46:2c:26:
56:ac:28:a4:8a:1e:23:00:31:97:0a:f4:d5:16:26:
4e:c0:8f:fa:2b:a0:0c:66:e9:72:e4:da:d7:97:5b:
91:73:b6:ec:29:7f:75:17:cf:ef:e9:8b:5b:17:eb:
b7:bd:35:a1:a9:c2:3f:7e:97:f8:0a:9c:74:ad:bd:
09:a1:2b:ce:41:85:33:63:bc:c3:97:46:e2:63:ab:
0d:ff:a8:2a:ac:bf:3f:fa:68:17:6a:35:c1:b9:a3:
62:6d:bd:2b:b9:8b:44:27:c7:41:76:35:57:1d:67:
f7:67:ea:a4:e5:26:a2:19:c9:0b:39:61:08:ff:4f:
5f:01:56:88:af:1f:6a:60:48:c4:58:c8:24:e4:75:
e8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E7:15:0A:75:36:68:78:33:76:8D:42:B9:5B:4A:A1:88:86:91:16
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f-cVCnU2aHgzdo1CuVtKoYiGkRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:4b:8c:4b:1d:33:83:e3:ca:67:bf:e5:5a:a6:f6:99:0e:27:
69:c9:90:d4:ec:05:89:9a:63:6c:6d:51:41:18:1c:42:c5:73:
3f:6e:27:58:00:3f:46:16:45:a1:14:42:55:86:5a:66:91:14:
62:58:da:5b:f9:a7:2c:33:ec:83:e2:c2:51:65:bd:48:d8:55:
1f:66:73:a6:b8:3a:a5:f5:49:c1:a5:70:16:f3:8b:7a:82:51:
e4:9d:6e:f9:ad:df:00:11:77:8d:b6:28:e9:1b:cc:b5:b0:74:
1f:f3:d3:16:f1:bf:39:d6:9c:07:13:e2:77:d5:0b:df:75:27:
7b:35:06:f6:e1:1c:41:a1:30:90:c3:26:11:b9:1d:b9:2c:eb:
dd:cd:60:4c:e5:11:f2:f8:f1:d7:9c:e6:24:ab:64:f7:5e:2c:
5d:ee:a4:8b:cf:b2:b0:b3:e5:6a:70:73:aa:cd:87:45:92:86:
55:b7:42:49:04:81:54:b4:d2:7a:5d:f5:ae:a1:6f:c8:7e:ea:
4a:30:8d:f2:e6:10:b6:e2:69:ef:2f:93:5a:6a:75:77:4b:42:
9c:0f:97:6a:f7:b3:23:8e:5d:ae:85:fc:ae:a4:a3:1b:3c:7d:
41:d1:91:b2:9f:0e:9b:a2:37:15:e9:73:ca:a2:cf:dd:9b:c2:
bc:1e:b6:51
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYRr+OE0TWyXbJR4Lkp02jDVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTEyMTMxMzAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmU3MTUwYTc1MzY2ODc4MzM3NjhkNDJiOTViNGFhMTg4ODY5MTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAge88ayP9KecAjRj0qT7THLTPqHZm
D85ZQSzCuxCppYoLGDr6P/YafaUHEI3j7tOB8J6OCtdhV2RA1DVq4Xx/HM2fmjto
95N8Nk6CRIjP25sBwJxVAghErZzaIe7lFarRQ7+rXD+zejBgXj5hgmbT/xW+CEdG
LCZWrCikih4jADGXCvTVFiZOwI/6K6AMZuly5NrXl1uRc7bsKX91F8/v6YtbF+u3
vTWhqcI/fpf4Cpx0rb0JoSvOQYUzY7zDl0biY6sN/6gqrL8/+mgXajXBuaNibb0r
uYtEJ8dBdjVXHWf3Z+qk5SaiGckLOWEI/09fAVaIrx9qYEjEWMgk5HXonQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFH/nFQp1Nmh4M3aNQrlbSqGIhpEWMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZi1jVkNuVTJhSGd6ZG8xQ3VWdEtvWWlHa1JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJVLjEsdM4Pjyme/5Vqm
9pkOJ2nJkNTsBYmaY2xtUUEYHELFcz9uJ1gAP0YWRaEUQlWGWmaRFGJY2lv5pywz
7IPiwlFlvUjYVR9mc6a4OqX1ScGlcBbzi3qCUeSdbvmt3wARd422KOkbzLWwdB/z
0xbxvznWnAcT4nfVC991J3s1BvbhHEGhMJDDJhG5Hbks693NYEzlEfL48dec5iSr
ZPdeLF3upIvPsrCz5Wpwc6rNh0WShlW3QkkEgVS00npd9a6hb8h+6kowjfLmELbi
ae8vk1pqdXdLQpwPl2r3syOOXa6F/K6koxs8fUHRkbKfDpuiNxXpc8qiz92bwrwe
tlE=
-----END CERTIFICATE-----
Generated at Thu May 1 06:47:00 2025 by rpki-client