Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fRrMKXMvmYz_3ihUgUhHsvLt7jw.roa
File: fRrMKXMvmYz_3ihUgUhHsvLt7jw.roa (raw, json)
Hash identifier: /6AyWlaaphbLKeRm4uzrSILnwbz1fzx4/OhoChYA/kI=
Subject key identifier: 7D:1A:CC:29:73:2F:99:8C:FF:DE:28:54:81:48:47:B2:F2:ED:EE:3C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182C68D3018E4B06206886BD285653B0972
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fRrMKXMvmYz_3ihUgUhHsvLt7jw.roa
Signing time: Mon 22 Aug 2022 17:15:17 +0000
ROA not before: Mon 22 Aug 2022 17:15:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c6:8d:30:18:e4:b0:62:06:88:6b:d2:85:65:3b:09:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 22 17:15:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d1acc29732f998cffde2854814847b2f2edee3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8f:6a:d1:77:b2:a9:78:e1:67:49:38:d8:f6:
45:12:d8:60:31:cb:d3:26:9a:61:e6:65:83:3c:dc:
37:5f:b3:40:66:c9:0b:ce:0a:ce:aa:4a:33:ff:e3:
0d:9f:2d:93:cf:2f:15:cc:5a:c5:49:79:5f:2c:65:
d3:78:bb:44:36:9a:d4:3e:7d:e8:20:60:0d:7e:51:
fc:e2:c2:d4:30:49:67:de:73:e0:97:9b:1e:f6:8b:
ad:03:cb:85:c7:16:1c:20:c5:fd:ba:75:c8:cf:ff:
c8:3c:ee:a6:54:89:2b:0a:88:c4:d8:41:77:99:71:
3b:40:09:ac:1d:4b:b1:d3:ec:3a:00:46:de:d7:94:
de:5c:e8:3c:0d:4a:2a:90:5c:1c:5b:ce:b5:b6:e6:
3e:fb:02:b5:32:5f:55:2e:fd:7d:a4:6a:69:25:0c:
93:c4:9f:b0:c4:4e:09:bf:d8:4a:f0:eb:00:d3:17:
0f:b0:a6:83:4f:98:6e:26:47:0c:11:52:5e:b8:25:
c5:44:d2:cc:19:c2:b8:67:2a:70:ba:f8:5c:db:72:
1d:be:ba:01:f0:ea:42:b6:1d:4c:f7:29:0e:d1:a5:
e4:8a:49:c0:6f:93:8b:97:ac:9b:4d:43:98:27:97:
66:a9:e9:5a:64:81:4a:05:db:a8:37:59:dd:18:eb:
dd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1A:CC:29:73:2F:99:8C:FF:DE:28:54:81:48:47:B2:F2:ED:EE:3C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fRrMKXMvmYz_3ihUgUhHsvLt7jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:24:9a:61:8a:b4:6c:9d:85:33:02:16:3d:dd:6c:c8:46:e1:
57:89:2d:7d:e3:b9:86:e1:ef:d0:4b:3a:59:63:69:5d:8a:89:
d6:0c:b6:cc:87:f4:c6:29:f4:02:99:a1:0c:e6:bd:fe:43:17:
f5:b7:63:6e:02:45:f9:d8:1d:cf:b7:50:5b:f7:9f:44:f4:87:
2d:9d:55:55:76:a7:24:af:68:b6:c7:51:b3:36:99:41:26:0a:
37:6b:98:d2:d2:cd:9c:4a:22:c9:b8:75:51:31:3d:e7:02:e1:
59:a8:23:f6:fe:ba:1e:8e:c7:40:9e:d9:ac:d4:c4:3d:d8:53:
fd:a3:77:c8:32:d7:61:86:0b:a4:37:ea:ee:f4:5c:27:a5:a4:
a5:7c:7b:fb:41:c0:7c:9d:61:72:db:e0:12:73:b0:c5:d9:02:
e5:15:77:5c:7d:59:cc:7a:c5:56:a4:a2:85:96:af:4f:88:3e:
9d:bf:f1:36:f4:dc:93:a8:09:0e:ca:19:b3:37:e1:7b:24:77:
39:f5:10:e0:09:99:a6:3c:a0:02:d2:cc:72:c0:58:e1:c9:f2:
7f:b2:f4:cb:2a:a4:4d:16:ba:26:3a:c4:ab:ed:32:35:03:b3:
a4:74:22:12:30:81:74:95:00:4a:a0:89:13:c0:b3:e2:fe:06:
df:b2:db:94
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYLGjTAY5LBiBohr0oVlOwlyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODIyMTcxNTE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDFhY2MyOTczMmY5OThjZmZkZTI4NTQ4MTQ4NDdiMmYyZWRlZTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo9q0XeyqXjhZ0k42PZFEthgMcvT
Jpph5mWDPNw3X7NAZskLzgrOqkoz/+MNny2Tzy8VzFrFSXlfLGXTeLtENprUPn3o
IGANflH84sLUMEln3nPgl5se9outA8uFxxYcIMX9unXIz//IPO6mVIkrCojE2EF3
mXE7QAmsHUux0+w6AEbe15TeXOg8DUoqkFwcW861tuY++wK1Ml9VLv19pGppJQyT
xJ+wxE4Jv9hK8OsA0xcPsKaDT5huJkcMEVJeuCXFRNLMGcK4Zypwuvhc23IdvroB
8OpCth1M9ykO0aXkiknAb5OLl6ybTUOYJ5dmqelaZIFKBduoN1ndGOvdJwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFH0azClzL5mM/94oVIFIR7Ly7e48MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZlJyTUtYTXZtWXpfM2loVWdVaEhzdkx0N2p3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE4kmmGKtGydhTMCFj3d
bMhG4VeJLX3juYbh79BLOlljaV2KidYMtsyH9MYp9AKZoQzmvf5DF/W3Y24CRfnY
Hc+3UFv3n0T0hy2dVVV2pySvaLbHUbM2mUEmCjdrmNLSzZxKIsm4dVExPecC4Vmo
I/b+uh6Ox0Ce2azUxD3YU/2jd8gy12GGC6Q36u70XCelpKV8e/tBwHydYXLb4BJz
sMXZAuUVd1x9Wcx6xVakooWWr0+IPp2/8Tb03JOoCQ7KGbM34Xskdzn1EOAJmaY8
oALSzHLAWOHJ8n+y9MsqpE0WuiY6xKvtMjUDs6R0IhIwgXSVAEqgiRPAs+L+Bt+y
25Q=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:00:54 2025 by rpki-client