Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fHyTgXoNBpTC0XeeyvyQOmCyQFQ.roa
File: fHyTgXoNBpTC0XeeyvyQOmCyQFQ.roa (raw, json)
Hash identifier: HOPXDH1yepjftNOtD0rORQ75oYGTo2N+gWyzH6Toavg=
Subject key identifier: 7C:7C:93:81:7A:0D:06:94:C2:D1:77:9E:CA:FC:90:3A:60:B2:40:54
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7663DE69
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fHyTgXoNBpTC0XeeyvyQOmCyQFQ.roa
Signing time: Mon 28 Mar 2022 08:09:58 +0000
ROA not before: Mon 28 Mar 2022 08:09:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1986256489 (0x7663de69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 28 08:09:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c7c93817a0d0694c2d1779ecafc903a60b24054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:32:0a:f5:30:64:30:44:64:27:41:d9:86:da:
ee:a1:ce:c5:0e:41:1f:ff:bf:6c:ae:d0:94:ca:0d:
a6:3d:62:b6:df:3e:7d:c9:34:46:fe:c6:e8:ae:df:
6f:8e:c5:74:52:8f:39:02:c6:cc:16:dc:59:c9:af:
96:3d:15:86:19:c9:bc:f2:ea:2a:50:e8:a4:3b:87:
46:a8:89:f1:fe:d7:8f:f9:80:ae:a3:21:59:a1:5b:
92:92:5f:9e:bc:90:69:31:d4:b0:ff:e0:b2:04:51:
c5:2b:90:15:fc:29:f6:92:9b:35:be:d0:a0:26:d3:
c8:cd:7b:cf:be:c2:07:39:b1:6c:27:d6:93:8e:62:
11:c0:e5:9a:e8:81:bc:19:8c:24:88:12:43:a2:7a:
8e:54:16:b5:8d:71:0d:b0:d9:97:fc:c0:c4:db:ff:
a5:c1:83:ae:d1:b2:07:34:fc:3e:82:5e:ca:80:26:
09:ac:87:5e:22:b0:7a:61:14:ce:08:48:1a:f5:61:
50:f2:5e:c7:5a:12:88:58:cc:26:a7:86:da:69:4b:
02:ed:65:6e:f9:cd:e1:01:74:e7:70:c2:2d:c8:40:
4d:e2:8a:76:3d:17:ad:39:41:ea:82:fc:90:cf:99:
2a:d9:55:88:29:fa:d6:30:50:0e:d1:62:6f:7a:e9:
87:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7C:93:81:7A:0D:06:94:C2:D1:77:9E:CA:FC:90:3A:60:B2:40:54
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fHyTgXoNBpTC0XeeyvyQOmCyQFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:8d:60:da:86:bf:05:99:c0:9f:b5:47:d1:de:f3:4a:05:dd:
61:76:4a:d1:48:db:66:45:10:92:29:20:b8:4c:23:46:89:34:
97:54:36:85:fd:ec:2b:5d:94:25:85:22:e1:f5:eb:42:8b:be:
a3:9c:80:88:3b:73:0d:d7:83:dd:17:a1:f8:23:ea:da:9b:fe:
16:4b:95:d4:b3:65:1b:5b:5f:be:3f:96:ba:25:eb:7b:b3:3c:
32:cd:e4:61:88:91:ec:6a:fa:3e:90:86:51:6f:9d:e4:6c:59:
a5:9f:31:58:d2:0d:0e:27:5a:48:fd:75:3e:3c:4f:94:42:0c:
49:17:67:21:ce:14:d3:02:85:b0:11:92:ac:29:ae:9f:88:a0:
9c:ae:f9:2c:ba:c2:37:1c:39:b0:dd:de:57:0f:e6:9c:b3:a6:
5e:53:c4:22:c1:5a:07:3f:d4:8c:93:ad:17:b9:81:b2:a7:f1:
18:45:ea:89:1d:b7:d9:0e:5f:25:b2:12:f9:aa:44:7a:cc:04:
d1:d1:64:47:31:dc:41:84:c0:bd:45:44:3b:0b:f8:43:21:89:
05:e0:83:4f:70:d6:74:ab:4f:42:64:43:8f:ec:54:33:54:d6:
a0:9b:a4:76:52:f9:f6:4f:a6:69:d9:33:39:25:b1:63:fa:c2:
ff:99:b0:d5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEdmPeaTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMy
ODA4MDk1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2M3YzkzODE3YTBk
MDY5NGMyZDE3NzllY2FmYzkwM2E2MGIyNDA1NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALsyCvUwZDBEZCdB2Yba7qHOxQ5BH/+/bK7QlMoNpj1itt8+
fck0Rv7G6K7fb47FdFKPOQLGzBbcWcmvlj0VhhnJvPLqKlDopDuHRqiJ8f7Xj/mA
rqMhWaFbkpJfnryQaTHUsP/gsgRRxSuQFfwp9pKbNb7QoCbTyM17z77CBzmxbCfW
k45iEcDlmuiBvBmMJIgSQ6J6jlQWtY1xDbDZl/zAxNv/pcGDrtGyBzT8PoJeyoAm
CayHXiKwemEUzghIGvVhUPJex1oSiFjMJqeG2mlLAu1lbvnN4QF053DCLchATeKK
dj0XrTlB6oL8kM+ZKtlViCn61jBQDtFib3rph8ECAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBR8fJOBeg0GlMLRd57K/JA6YLJAVDAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L2ZIeVRnWG9OQnBUQzBYZWV5dnlRT21DeVFGUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQBTjWDahr8FmcCftUfR3vNKBd1hdkrRSNtmRRCS
KSC4TCNGiTSXVDaF/ewrXZQlhSLh9etCi76jnICIO3MN14PdF6H4I+ram/4WS5XU
s2UbW1++P5a6Jet7szwyzeRhiJHsavo+kIZRb53kbFmlnzFY0g0OJ1pI/XU+PE+U
QgxJF2chzhTTAoWwEZKsKa6fiKCcrvksusI3HDmw3d5XD+acs6ZeU8QiwVoHP9SM
k60XuYGyp/EYReqJHbfZDl8lshL5qkR6zATR0WRHMdxBhMC9RUQ7C/hDIYkF4INP
cNZ0q09CZEOP7FQzVNagm6R2Uvn2T6Zp2TM5JbFj+sL/mbDV
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:01 2025 by rpki-client