Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2p7pnk2uDIi7wcXNNAKodzDYQXI.roa
File: 2p7pnk2uDIi7wcXNNAKodzDYQXI.roa (raw, json)
Hash identifier: RANGrxk2EY0eHUFOnSHj+xFH2PJ+VpRlGxIbIfWEU60=
Subject key identifier: DA:9E:E9:9E:4D:AE:0C:88:BB:C1:C5:CD:34:02:A8:77:30:D8:41:72
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E3B0E81F5C172BF010E8B68CB1298519
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2p7pnk2uDIi7wcXNNAKodzDYQXI.roa
Signing time: Wed 15 Mar 2023 05:14:27 +0000
ROA not before: Wed 15 Mar 2023 05:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e3:b0:e8:1f:5c:17:2b:f0:10:e8:b6:8c:b1:29:85:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 15 05:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da9ee99e4dae0c88bbc1c5cd3402a87730d84172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1b:47:eb:31:f6:4b:14:b1:0e:c3:29:37:eb:
b4:34:ec:47:08:fb:13:82:bd:9f:ba:02:7f:8e:28:
9b:76:f5:f2:14:fd:7c:cb:b7:2b:b4:44:d3:82:03:
42:c4:db:bc:ac:24:be:59:19:24:bb:37:23:94:5a:
0f:c1:34:41:e1:b7:ca:d1:87:e2:59:6a:1b:67:b8:
cb:02:7c:da:e4:09:98:42:26:b9:a5:b6:9a:09:15:
c7:77:a5:31:d8:88:d8:91:7b:b3:e6:1e:f7:87:94:
04:f0:2e:0c:82:9e:8e:ad:91:1e:79:10:85:f7:a4:
8b:97:b5:a5:90:31:4c:55:f2:0a:15:5c:f4:0e:b2:
36:ca:8b:b3:29:2a:7e:d0:ba:91:cd:02:25:e2:d5:
cd:1f:3f:a9:a1:06:26:88:cd:bc:d2:20:b7:31:1b:
8c:a8:45:46:34:95:cc:9d:4a:c3:7b:48:68:6b:6e:
7b:91:e3:05:ac:76:dc:65:ba:dd:07:64:d6:35:b2:
e8:be:58:32:e7:3f:7e:21:e0:46:fc:7f:b8:9f:53:
b4:60:48:32:56:eb:2f:0e:8e:d6:8a:d5:48:14:af:
d8:e2:b1:e0:92:30:27:02:e6:f2:14:9e:20:90:f2:
65:eb:a5:55:94:cc:04:ab:fa:54:ec:3e:52:62:95:
e6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9E:E9:9E:4D:AE:0C:88:BB:C1:C5:CD:34:02:A8:77:30:D8:41:72
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2p7pnk2uDIi7wcXNNAKodzDYQXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b2:80:97:ee:be:b6:4b:86:45:af:55:6e:c2:e5:d5:8e:59:a2:
9a:1c:82:65:e6:0e:07:0f:98:96:be:07:f0:ee:2b:a1:2a:e7:
a4:58:01:ab:e1:d9:35:71:c3:61:0f:31:e2:0c:76:02:71:80:
d7:98:7b:2b:1c:69:b7:0c:45:d1:69:e2:97:75:b4:f6:15:69:
73:45:80:28:72:16:ce:31:2b:73:2e:02:65:b5:b1:7a:72:8e:
6c:a5:23:93:1f:ca:36:7c:a1:03:a4:db:1d:04:16:13:db:6d:
7d:02:dd:db:b4:1f:eb:0d:0a:38:2a:37:02:f7:d5:79:20:35:
c2:22:74:0b:fe:4f:85:1e:70:e4:5c:c9:d4:c1:ad:fa:8e:46:
05:05:a4:8a:52:4a:4d:8e:1b:80:fd:f4:64:43:91:a7:58:6a:
9f:81:49:2a:40:5d:3b:5c:ff:77:ee:e7:fd:d6:1a:6c:00:3f:
96:72:7c:94:10:39:9e:56:40:32:2b:8d:c2:d5:03:64:4c:5c:
94:14:35:8c:00:d6:fb:83:94:cd:70:a5:ec:48:12:6c:03:48:
fc:03:75:99:8d:9d:12:02:be:4f:de:84:3d:c1:61:e1:11:65:
2c:c3:3b:3f:22:84:97:a4:44:1f:f5:1c:9a:1a:fd:e9:4f:51:
a0:00:ff:79
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbjsOgfXBcr8BDotoyxKYUZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzE1MDUxNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTllZTk5ZTRkYWUwYzg4YmJjMWM1Y2QzNDAyYTg3NzMwZDg0MTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshtH6zH2SxSxDsMpN+u0NOxHCPsT
gr2fugJ/jiibdvXyFP18y7crtETTggNCxNu8rCS+WRkkuzcjlFoPwTRB4bfK0Yfi
WWobZ7jLAnza5AmYQia5pbaaCRXHd6Ux2IjYkXuz5h73h5QE8C4Mgp6OrZEeeRCF
96SLl7WlkDFMVfIKFVz0DrI2youzKSp+0LqRzQIl4tXNHz+poQYmiM280iC3MRuM
qEVGNJXMnUrDe0hoa257keMFrHbcZbrdB2TWNbLovlgy5z9+IeBG/H+4n1O0YEgy
VusvDo7WitVIFK/Y4rHgkjAnAubyFJ4gkPJl66VVlMwEq/pU7D5SYpXmQQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNqe6Z5NrgyIu8HFzTQCqHcw2EFyMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMnA3cG5rMnVESWk3d2NYTk5BS29kekRZUVhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALKAl+6+tkuGRa9VbsLl
1Y5ZopocgmXmDgcPmJa+B/DuK6Eq56RYAavh2TVxw2EPMeIMdgJxgNeYeyscabcM
RdFp4pd1tPYVaXNFgChyFs4xK3MuAmW1sXpyjmylI5MfyjZ8oQOk2x0EFhPbbX0C
3du0H+sNCjgqNwL31XkgNcIidAv+T4UecORcydTBrfqORgUFpIpSSk2OG4D99GRD
kadYap+BSSpAXTtc/3fu5/3WGmwAP5ZyfJQQOZ5WQDIrjcLVA2RMXJQUNYwA1vuD
lM1wpexIEmwDSPwDdZmNnRICvk/ehD3BYeERZSzDOz8ihJekRB/1HJoa/elPUaAA
/3k=
-----END CERTIFICATE-----
Generated at Mon Jun 9 10:08:54 2025 by rpki-client