Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s2Feew9z1EhEdKJP1orrE2rURJw.roa
File: s2Feew9z1EhEdKJP1orrE2rURJw.roa (raw, json)
Hash identifier: f4A6jJFwbVJtWA7dtkLaMcQulfGWT+Plo/sJmO9RDWE=
Subject key identifier: B3:61:5E:7B:0F:73:D4:48:44:74:A2:4F:D6:8A:EB:13:6A:D4:44:9C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6E9CF627
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s2Feew9z1EhEdKJP1orrE2rURJw.roa
Signing time: Tue 01 Mar 2022 01:08:42 +0000
ROA not before: Tue 01 Mar 2022 01:08:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1855780391 (0x6e9cf627)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 1 01:08:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3615e7b0f73d4484474a24fd68aeb136ad4449c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:04:3e:06:89:4e:eb:d7:b0:35:bc:3e:4f:58:
8b:c3:2b:b0:6e:8f:76:88:92:06:5a:9a:ba:f4:f9:
42:98:c7:8e:c0:0d:7e:10:44:95:8b:8f:a7:51:4c:
df:45:35:ba:3a:27:2c:22:75:ac:34:89:0e:a8:71:
74:b5:ea:b7:34:72:58:82:bf:d9:1f:24:8d:14:45:
3c:87:a2:e5:27:0b:3b:41:86:85:52:31:12:5d:3e:
0d:10:03:d0:37:1c:a9:76:81:14:e6:9a:40:e3:70:
ec:8d:08:a8:37:fe:64:e3:3e:06:ef:f8:99:d8:ca:
ae:c8:09:99:28:63:fa:04:9b:c3:23:e0:8a:a9:f8:
33:17:01:4f:50:5c:df:82:c3:8d:ca:62:b9:e5:87:
ed:83:46:0f:a6:fa:8c:82:a0:82:3c:44:13:a2:35:
76:0a:13:11:92:0a:1d:72:08:1c:e3:63:f5:71:45:
cb:fc:97:e4:c3:ff:5a:fc:f1:c4:5a:25:5b:9f:95:
c6:a5:94:2f:ec:54:52:a1:84:5f:c6:1d:1d:5a:10:
78:0f:41:b1:2c:08:82:7c:6f:01:24:b5:2c:51:1b:
36:3c:65:bd:bd:11:67:a3:63:40:39:dd:25:0a:bd:
7c:0b:ef:f4:8b:35:f4:c8:2d:40:2e:bf:85:37:b3:
a1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:61:5E:7B:0F:73:D4:48:44:74:A2:4F:D6:8A:EB:13:6A:D4:44:9C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s2Feew9z1EhEdKJP1orrE2rURJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:28:55:3d:0e:e1:89:ad:bb:d4:00:4a:7a:61:a8:7d:ce:b9:
71:be:68:6f:91:76:9d:0c:97:eb:bd:a1:80:ba:12:19:3c:fd:
ce:7c:71:8d:5e:9b:ee:7a:e9:c0:4c:94:0e:7e:67:c0:ce:43:
2e:7d:d0:ac:86:a2:6e:a4:bb:6c:6e:ce:0a:0a:62:da:bf:e3:
23:f6:54:bd:a9:7c:a7:0f:79:02:ae:f6:dd:76:6e:c0:9b:4c:
11:fc:ab:e2:ba:f6:7a:ae:65:86:7f:2b:26:10:fe:95:8d:4b:
c8:7c:14:d5:38:62:2a:0b:dc:30:40:ff:fe:5b:1b:6c:03:f2:
54:03:97:35:f5:be:50:ca:89:13:e8:b9:09:31:26:fb:81:af:
d8:e2:d5:23:03:68:b2:06:54:1d:c9:94:76:60:34:c5:9c:f8:
7a:4f:7f:f0:a3:2b:bc:6d:b8:4c:7d:84:03:05:e2:a1:fa:4c:
46:ed:cb:23:61:72:93:8e:38:45:26:80:47:81:b0:02:34:19:
ad:6d:c0:48:39:90:26:c6:3d:23:74:47:3a:74:b5:e0:c7:4b:
e4:b4:8e:aa:c9:df:79:59:bd:56:f4:6c:c7:18:80:83:3a:73:
37:89:69:8b:26:56:03:12:51:98:8b:38:9e:08:76:f0:b3:0e:
9d:cc:ac:06
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEbpz2JzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMw
MTAxMDg0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjM2MTVlN2IwZjcz
ZDQ0ODQ0NzRhMjRmZDY4YWViMTM2YWQ0NDQ5YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKwEPgaJTuvXsDW8Pk9Yi8MrsG6PdoiSBlqauvT5QpjHjsAN
fhBElYuPp1FM30U1ujonLCJ1rDSJDqhxdLXqtzRyWIK/2R8kjRRFPIei5ScLO0GG
hVIxEl0+DRAD0DccqXaBFOaaQONw7I0IqDf+ZOM+Bu/4mdjKrsgJmShj+gSbwyPg
iqn4MxcBT1Bc34LDjcpiueWH7YNGD6b6jIKggjxEE6I1dgoTEZIKHXIIHONj9XFF
y/yX5MP/WvzxxFolW5+VxqWUL+xUUqGEX8YdHVoQeA9BsSwIgnxvASS1LFEbNjxl
vb0RZ6NjQDndJQq9fAvv9Is19MgtQC6/hTezockCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSzYV57D3PUSER0ok/WiusTatREnDAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L3MyRmVldzl6MUVoRWRLSlAxb3JyRTJyVVJKdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAMKFU9DuGJrbvUAEp6Yah9zrlxvmhvkXadDJfr
vaGAuhIZPP3OfHGNXpvueunATJQOfmfAzkMufdCshqJupLtsbs4KCmLav+Mj9lS9
qXynD3kCrvbddm7Am0wR/KviuvZ6rmWGfysmEP6VjUvIfBTVOGIqC9wwQP/+Wxts
A/JUA5c19b5QyokT6LkJMSb7ga/Y4tUjA2iyBlQdyZR2YDTFnPh6T3/woyu8bbhM
fYQDBeKh+kxG7csjYXKTjjhFJoBHgbACNBmtbcBIOZAmxj0jdEc6dLXgx0vktI6q
yd95Wb1W9GzHGICDOnM3iWmLJlYDElGYizieCHbwsw6dzKwG
-----END CERTIFICATE-----
Generated at Thu May 1 14:28:41 2025 by rpki-client