Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1TEAdnrkcptrys_K71JGzFHVkUM.roa
File: 1TEAdnrkcptrys_K71JGzFHVkUM.roa (raw, json)
Hash identifier: oBmg+wXSqQxvJ4aSf50saXO6+8LtCy5MWW/A0ZLUaPg=
Subject key identifier: D5:31:00:76:7A:E4:72:9B:6B:CA:CF:CA:EF:52:46:CC:51:D5:91:43
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 75476A81
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1TEAdnrkcptrys_K71JGzFHVkUM.roa
Signing time: Thu 24 Mar 2022 10:10:33 +0000
ROA not before: Thu 24 Mar 2022 10:10:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1967614593 (0x75476a81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 24 10:10:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d53100767ae4729b6bcacfcaef5246cc51d59143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:7f:7b:cc:a3:e3:f8:d3:83:54:c8:8f:63:
38:e8:0c:8e:7f:ba:ca:b8:d1:6c:69:f0:4f:df:85:
ed:ab:f9:37:7e:cf:0c:92:f8:47:e7:68:9b:33:21:
2e:75:fe:68:45:9a:12:3e:9e:e8:2e:13:03:8a:83:
0e:c4:7d:5a:b4:2b:b6:6a:5f:b8:1a:ef:b2:19:d0:
99:05:4c:58:e4:15:c6:58:eb:3e:8f:94:9a:fc:a5:
03:d1:f8:71:4a:99:6d:12:5d:7c:89:b8:73:84:49:
ec:6a:53:c7:9b:5f:9f:73:87:cb:11:2f:30:e4:69:
5a:d2:a2:14:67:59:2e:0e:12:2c:bd:7c:16:46:43:
c7:08:0e:39:1e:da:c6:b0:54:d7:f0:7f:4b:6a:6d:
7a:fd:d1:54:d0:2c:6d:b4:ff:01:7d:ee:bb:41:0b:
f6:9b:41:fb:7a:83:ee:76:54:94:fd:01:63:58:23:
97:69:ea:70:d8:47:2d:cc:d0:c4:23:e1:41:22:13:
db:0b:cc:05:5c:7e:52:bf:49:7e:de:df:3a:e3:80:
ce:12:f8:b0:ad:eb:01:6c:27:8f:e4:9a:e1:da:09:
01:24:fc:73:f3:45:dc:6f:2b:5e:bd:3e:52:fd:4b:
b1:4d:cc:ff:37:52:bd:59:b1:3f:21:b9:3d:8c:e3:
13:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:31:00:76:7A:E4:72:9B:6B:CA:CF:CA:EF:52:46:CC:51:D5:91:43
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1TEAdnrkcptrys_K71JGzFHVkUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:7d:89:ee:51:94:47:1e:df:38:9f:16:7c:0f:4c:6d:b5:30:
47:8b:ec:9e:e0:fc:d3:39:a5:a4:d2:d3:85:23:e2:92:0d:02:
aa:28:49:6b:2a:49:c1:6e:00:34:50:a7:4e:2e:9b:0e:1a:34:
3d:58:a9:44:aa:32:3c:f8:a3:ed:7a:fe:2f:b7:6a:6f:95:23:
21:0f:17:8f:13:76:5c:71:d9:d5:ad:04:b0:17:01:17:69:53:
a6:a6:0f:84:2b:4c:43:5b:ed:3b:96:56:6c:3b:90:1e:a7:cf:
36:58:e0:2e:07:0e:fa:69:a2:ac:4c:50:a2:02:0e:53:f1:14:
d8:78:e1:8f:35:80:7b:3b:de:98:c2:0e:40:02:f4:f6:30:8c:
3c:aa:da:61:55:cf:5e:0c:b0:29:51:b7:17:2a:6b:6f:39:a1:
c3:7c:7b:00:27:1a:10:09:3b:0c:39:2f:75:d1:3e:8c:6a:b3:
a9:e3:fa:17:04:58:be:a8:ea:3b:ae:c0:c8:7b:15:bc:86:b0:
dd:8b:90:f7:98:d8:90:ca:5d:7a:66:87:ef:0c:1a:55:5e:af:
65:3b:40:72:a0:40:12:c4:92:ab:d4:38:85:a1:f9:4a:82:6c:
21:09:64:65:19:9f:e6:dc:7a:f0:8a:72:e0:f1:12:07:a2:76:
35:3d:c8:27
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEdUdqgTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMy
NDEwMTAzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDUzMTAwNzY3YWU0
NzI5YjZiY2FjZmNhZWY1MjQ2Y2M1MWQ1OTE0MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALWjf3vMo+P404NUyI9jOOgMjn+6yrjRbGnwT9+F7av5N37P
DJL4R+domzMhLnX+aEWaEj6e6C4TA4qDDsR9WrQrtmpfuBrvshnQmQVMWOQVxljr
Po+UmvylA9H4cUqZbRJdfIm4c4RJ7GpTx5tfn3OHyxEvMORpWtKiFGdZLg4SLL18
FkZDxwgOOR7axrBU1/B/S2ptev3RVNAsbbT/AX3uu0EL9ptB+3qD7nZUlP0BY1gj
l2nqcNhHLczQxCPhQSIT2wvMBVx+Ur9Jft7fOuOAzhL4sK3rAWwnj+Sa4doJAST8
c/NF3G8rXr0+Uv1LsU3M/zdSvVmxPyG5PYzjE+MCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTVMQB2euRym2vKz8rvUkbMUdWRQzAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
LzFURUFkbnJrY3B0cnlzX0s3MUpHekZIVmtVTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAVfYnuUZRHHt84nxZ8D0xttTBHi+ye4PzTOaWk
0tOFI+KSDQKqKElrKknBbgA0UKdOLpsOGjQ9WKlEqjI8+KPtev4vt2pvlSMhDxeP
E3ZccdnVrQSwFwEXaVOmpg+EK0xDW+07llZsO5Aep882WOAuBw76aaKsTFCiAg5T
8RTYeOGPNYB7O96Ywg5AAvT2MIw8qtphVc9eDLApUbcXKmtvOaHDfHsAJxoQCTsM
OS910T6MarOp4/oXBFi+qOo7rsDIexW8hrDdi5D3mNiQyl16ZofvDBpVXq9lO0By
oEASxJKr1DiFoflKgmwhCWRlGZ/m3HrwinLg8RIHonY1Pcgn
-----END CERTIFICATE-----
Generated at Wed Jun 11 12:54:44 2025 by rpki-client