Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-lTcXiT8JUpFrRsC4uhl_nFOiIc.roa
File: 1-lTcXiT8JUpFrRsC4uhl_nFOiIc.roa (raw, json)
Hash identifier: K7oPDA6w0iSh1z9C/yjR6jMhAyJ8G793lC0THqOPUBA=
Subject key identifier: FA:54:DC:5E:24:FC:25:4A:45:AD:1B:02:E2:E8:65:FE:71:4E:88:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6BEA93C3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-lTcXiT8JUpFrRsC4uhl_nFOiIc.roa
Signing time: Sat 19 Feb 2022 09:04:28 +0000
ROA not before: Sat 19 Feb 2022 09:04:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:1139:b37a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1810535363 (0x6bea93c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 19 09:04:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa54dc5e24fc254a45ad1b02e2e865fe714e8887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1f:e0:20:c6:fc:17:45:20:08:d6:17:2c:84:
93:90:03:1c:a7:c4:cd:e8:df:8a:58:81:54:66:32:
be:f9:7a:50:29:5e:bb:ec:97:20:64:07:ac:c0:cf:
b7:07:2e:96:8c:de:aa:80:2e:07:79:73:b9:35:42:
68:0b:47:fe:74:87:8e:b8:ac:c4:10:73:42:39:0a:
2a:3e:f4:2f:82:48:62:14:b7:3b:1e:f4:0a:6a:6b:
88:c6:5c:ad:1a:c5:6e:9e:c6:bc:b0:80:69:7a:f0:
d7:2e:f7:f1:c3:b0:99:b9:fd:a3:32:05:4e:9e:2d:
92:44:91:37:fd:77:63:32:56:96:08:f3:8e:94:3e:
87:f7:f0:e2:24:9c:4a:98:cf:5a:28:a0:58:b6:2c:
ad:7f:a6:ab:fa:c7:c1:37:9a:5a:bf:9e:eb:e1:cd:
86:3c:3b:54:76:49:72:aa:7f:d7:87:06:0c:0f:e1:
1f:08:94:68:da:74:90:36:d6:e2:55:1c:92:8a:fb:
d1:c3:9f:e5:4e:50:97:60:27:20:4b:df:e0:0f:dc:
33:2b:cc:71:6f:27:91:8c:38:44:9f:98:09:7c:03:
27:11:e3:a6:4e:4d:6b:5e:04:c5:ce:1d:14:95:2a:
71:d5:9a:9b:c5:89:a7:34:d6:de:d1:40:1c:43:23:
8c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:54:DC:5E:24:FC:25:4A:45:AD:1B:02:E2:E8:65:FE:71:4E:88:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-lTcXiT8JUpFrRsC4uhl_nFOiIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:50:77:5b:2f:8b:3d:fd:99:94:6a:d7:ee:93:92:77:f9:a7:
1f:38:e4:f7:ba:6a:44:64:18:8c:65:3a:f2:d5:d2:ef:9d:a8:
03:1f:f3:62:a5:bc:9e:43:f3:6f:ba:39:17:d7:8d:25:0c:21:
1d:7c:f1:5f:16:6b:05:a5:52:ff:cb:a5:cb:88:70:6f:f1:c3:
e6:9f:7e:79:f1:5f:4d:7f:df:3d:17:3f:c6:08:ab:9b:7d:1d:
11:16:69:d6:00:16:3e:7a:69:53:fb:a8:68:e7:58:c7:25:57:
83:62:46:43:63:52:56:60:dd:16:37:94:8a:13:5d:48:bc:9e:
3f:4b:47:95:60:ca:b6:fd:72:bf:3e:62:b3:12:65:b6:0c:a0:
1b:6d:1b:a6:87:4f:c0:57:4e:53:51:34:58:8e:5c:45:f5:f8:
3c:23:ee:60:09:ff:4e:6c:77:2a:23:80:9c:8b:ed:72:4a:37:
ac:fb:44:cf:21:c4:fa:0b:17:0a:e4:d7:c4:d8:bf:b7:13:fe:
98:92:85:aa:f2:2e:57:0d:6f:2c:69:28:b9:91:7a:f7:b3:91:
55:23:ee:f1:cc:ad:2a:fb:c5:f1:f2:a8:9e:f8:9a:b6:29:2a:
ab:c3:fd:48:c2:0d:89:6b:c7:3f:d9:52:94:b4:aa:92:6a:bc:
01:7f:34:76
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEa+qTwzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIx
OTA5MDQyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmE1NGRjNWUyNGZj
MjU0YTQ1YWQxYjAyZTJlODY1ZmU3MTRlODg4NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOEf4CDG/BdFIAjWFyyEk5ADHKfEzejfiliBVGYyvvl6UCle
u+yXIGQHrMDPtwculozeqoAuB3lzuTVCaAtH/nSHjrisxBBzQjkKKj70L4JIYhS3
Ox70CmpriMZcrRrFbp7GvLCAaXrw1y738cOwmbn9ozIFTp4tkkSRN/13YzJWlgjz
jpQ+h/fw4iScSpjPWiigWLYsrX+mq/rHwTeaWr+e6+HNhjw7VHZJcqp/14cGDA/h
HwiUaNp0kDbW4lUckor70cOf5U5Ql2AnIEvf4A/cMyvMcW8nkYw4RJ+YCXwDJxHj
pk5Na14Exc4dFJUqcdWam8WJpzTW3tFAHEMjjAkCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBT6VNxeJPwlSkWtGwLi6GX+cU6IhzAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
LzEtbFRjWGlUOEpVcEZyUnNDNHVobF9uRk9pSWMucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAXlB3Wy+LPf2ZlGrX7pOSd/mnHzjk97pqRGQY
jGU68tXS752oAx/zYqW8nkPzb7o5F9eNJQwhHXzxXxZrBaVS/8uly4hwb/HD5p9+
efFfTX/fPRc/xgirm30dERZp1gAWPnppU/uoaOdYxyVXg2JGQ2NSVmDdFjeUihNd
SLyeP0tHlWDKtv1yvz5isxJltgygG20bpodPwFdOU1E0WI5cRfX4PCPuYAn/Tmx3
KiOAnIvtcko3rPtEzyHE+gsXCuTXxNi/txP+mJKFqvIuVw1vLGkouZF697ORVSPu
8cytKvvF8fKonviatikqq8P9SMINiWvHP9lSlLSqkmq8AX80dg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:16:41 2025 by rpki-client