Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fVpLTVgLhiEVzA7MVx6fEM3gTDI.roa
File: fVpLTVgLhiEVzA7MVx6fEM3gTDI.roa (raw, json)
Hash identifier: SnDXUfxYrxN6SvTLaScuMFcLuRfnz1KudVNJp4SdUfI=
Subject key identifier: 7D:5A:4B:4D:58:0B:86:21:15:CC:0E:CC:57:1E:9F:10:CD:E0:4C:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6819296E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fVpLTVgLhiEVzA7MVx6fEM3gTDI.roa
Signing time: Sat 05 Feb 2022 11:04:50 +0000
ROA not before: Sat 05 Feb 2022 11:04:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64:ffff:0:17e:c98e:ded1/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1746479470 (0x6819296e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 5 11:04:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d5a4b4d580b862115cc0ecc571e9f10cde04c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f8:06:63:24:91:2c:d9:6a:29:40:82:59:ec:
6a:02:02:2f:c3:68:f3:83:38:d0:f5:ae:49:0a:a3:
a6:e7:0e:0a:c2:7f:2b:f6:69:79:16:14:94:53:16:
0f:0b:5d:41:05:f1:9c:d6:42:79:b2:7c:fe:99:de:
d3:6d:23:ac:b5:d4:aa:ea:07:7e:93:76:a6:1e:1e:
d8:37:35:5a:03:ef:dc:57:2d:1b:94:d9:12:8b:44:
8e:3a:5f:a0:e0:92:e7:ee:ba:2f:ed:cd:af:0b:88:
d5:b7:ed:66:87:7a:99:35:cf:26:d2:3d:d3:bf:fe:
a4:34:b7:fc:9f:47:74:85:09:46:72:b3:ce:94:b6:
e5:ce:0e:c5:90:01:99:03:a6:f3:95:fa:b5:14:03:
32:33:65:9c:61:23:27:4a:50:78:84:d9:04:9e:38:
f1:e2:d4:c7:e3:b9:4f:61:04:e8:07:af:62:58:07:
da:78:6b:6c:f0:d5:a8:40:3c:2b:c5:9b:99:29:6e:
02:d1:37:59:93:41:e0:2f:d3:5c:c4:c9:89:5e:bc:
44:bb:f7:8c:f2:48:d8:f1:43:ac:e2:81:fe:3b:3c:
bb:97:59:8f:15:01:4a:65:f6:2d:a2:ca:24:87:af:
bb:6b:6a:b8:70:5b:05:28:66:99:22:21:5d:12:ed:
55:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5A:4B:4D:58:0B:86:21:15:CC:0E:CC:57:1E:9F:10:CD:E0:4C:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fVpLTVgLhiEVzA7MVx6fEM3gTDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:c4:b9:d3:18:91:dc:9e:45:6a:2a:f4:79:df:61:d4:d4:e9:
53:35:b9:db:2b:eb:39:7d:97:be:cd:88:a7:65:4f:8a:c7:24:
74:02:2c:a6:47:f4:e7:ea:65:8c:0a:61:2a:a0:26:ad:3b:8e:
8e:30:40:07:bd:9d:ae:76:73:ac:4e:f3:e4:a3:4c:24:5a:eb:
83:47:da:79:31:dd:8a:d5:f8:6e:f4:ac:87:3a:07:b0:e8:05:
82:9c:9b:4a:84:f3:e4:9f:b9:bb:ae:2a:5d:e3:31:2d:1b:b8:
d6:30:2d:f7:e2:d1:a5:70:3d:d3:46:0a:f0:9e:e5:d7:d4:73:
03:35:00:65:5f:2a:cc:64:56:61:ef:7e:0d:f7:f4:9e:51:4f:
d2:59:39:17:0d:b5:f8:a0:c8:90:c8:19:06:45:a9:6e:bf:12:
79:9f:83:a5:3c:21:fa:e1:9d:b2:52:d2:4c:8c:e6:a5:3d:eb:
34:61:b1:97:cb:d5:4a:30:b4:ba:11:31:cc:50:95:88:7a:71:
6f:81:c3:b8:87:f7:f1:8b:5b:4a:5e:c0:a1:c5:2f:bb:cf:62:
da:e1:cc:32:0c:2b:c5:98:74:f0:aa:f2:eb:f5:94:4e:d1:32:
7f:37:2e:35:b2:0f:b5:48:65:81:40:48:83:d2:9b:4c:85:72:
d0:f9:29:74
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEaBkpbjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIw
NTExMDQ1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2Q1YTRiNGQ1ODBi
ODYyMTE1Y2MwZWNjNTcxZTlmMTBjZGUwNGMzMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANT4BmMkkSzZailAglnsagICL8No84M40PWuSQqjpucOCsJ/
K/ZpeRYUlFMWDwtdQQXxnNZCebJ8/pne020jrLXUquoHfpN2ph4e2Dc1WgPv3Fct
G5TZEotEjjpfoOCS5+66L+3NrwuI1bftZod6mTXPJtI907/+pDS3/J9HdIUJRnKz
zpS25c4OxZABmQOm85X6tRQDMjNlnGEjJ0pQeITZBJ448eLUx+O5T2EE6AevYlgH
2nhrbPDVqEA8K8WbmSluAtE3WZNB4C/TXMTJiV68RLv3jPJI2PFDrOKB/js8u5dZ
jxUBSmX2LaLKJIevu2tquHBbBShmmSIhXRLtVXUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBR9WktNWAuGIRXMDsxXHp8QzeBMMjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L2ZWcExUVmdMaGlFVnpBN01WeDZmRU0zZ1RESS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQA0xLnTGJHcnkVqKvR532HU1OlTNbnbK+s5fZe+
zYinZU+KxyR0AiymR/Tn6mWMCmEqoCatO46OMEAHvZ2udnOsTvPko0wkWuuDR9p5
Md2K1fhu9KyHOgew6AWCnJtKhPPkn7m7ripd4zEtG7jWMC334tGlcD3TRgrwnuXX
1HMDNQBlXyrMZFZh734N9/SeUU/SWTkXDbX4oMiQyBkGRaluvxJ5n4OlPCH64Z2y
UtJMjOalPes0YbGXy9VKMLS6ETHMUJWIenFvgcO4h/fxi1tKXsChxS+7z2La4cwy
DCvFmHTwqvLr9ZRO0TJ/Ny41sg+1SGWBQEiD0ptMhXLQ+Sl0
-----END CERTIFICATE-----
Generated at Sat May 3 02:21:47 2025 by rpki-client