Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/48QcdNC5hgmcV1CDBxwkUT4KF20.roa
File: 48QcdNC5hgmcV1CDBxwkUT4KF20.roa (raw, json)
Hash identifier: ZYkgkQw61AFmdaInSbc6g8WiKjaCuDwn0yuqc0ud5w4=
Subject key identifier: E3:C4:1C:74:D0:B9:86:09:9C:57:50:83:07:1C:24:51:3E:0A:17:6D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 715D4306
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/48QcdNC5hgmcV1CDBxwkUT4KF20.roa
Signing time: Thu 10 Mar 2022 17:10:31 +0000
ROA not before: Thu 10 Mar 2022 17:10:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1901937414 (0x715d4306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 10 17:10:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3c41c74d0b986099c575083071c24513e0a176d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:59:f6:72:ad:79:ad:db:90:fa:5b:63:30:67:
e4:10:a9:46:29:2f:9f:40:9c:f8:59:14:c4:ae:fc:
e6:df:8d:e6:46:78:e4:30:7a:4f:5a:3d:b7:9b:6a:
4d:8b:4d:32:e1:33:c9:60:84:ce:72:ad:c8:22:15:
ae:92:fb:50:83:f2:44:52:75:8c:a4:0e:de:4e:38:
b2:46:8a:ed:bd:33:98:a1:8c:3e:79:1a:cf:2a:a6:
96:2c:11:de:85:6e:5a:05:c8:5f:9d:df:4e:49:d6:
08:6a:57:f2:6c:a3:1d:58:d7:3e:3b:17:a3:3a:c8:
a9:fc:0b:3c:c9:98:b3:f9:8f:70:dc:c6:4e:c4:87:
33:07:b5:a0:bc:88:dc:16:9b:1b:c5:b9:28:93:f0:
e9:95:30:5e:1e:f5:c0:6d:e7:4b:d8:c3:1d:a3:3f:
45:78:e0:d3:ef:6e:51:7a:71:f8:cb:53:49:17:e2:
9c:c4:41:65:e3:97:97:9e:4e:8a:97:43:53:94:27:
70:67:d4:f2:1f:7e:25:1f:b7:87:c0:ea:8b:dc:37:
73:b5:c6:fb:43:01:5d:d8:03:43:37:bc:34:b1:7c:
b5:ac:cf:41:ac:14:e3:17:1e:d4:5a:dd:76:17:90:
24:77:b2:a1:c3:49:d3:6b:bf:4d:e3:5a:22:79:e2:
e2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C4:1C:74:D0:B9:86:09:9C:57:50:83:07:1C:24:51:3E:0A:17:6D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/48QcdNC5hgmcV1CDBxwkUT4KF20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:49:5f:61:a6:31:01:37:fa:a4:30:7b:ec:af:f9:b3:d2:1f:
7d:9d:95:f1:46:c1:74:49:ed:72:93:ba:ba:df:e4:ba:96:36:
0a:89:7d:57:eb:13:19:59:f7:19:0f:d5:c1:22:ab:79:34:c7:
0f:27:3b:8a:55:ac:3e:90:9e:47:f8:a9:6b:76:34:a0:61:13:
dc:77:1e:6d:08:a3:b5:4f:ef:b0:5b:24:6a:88:28:10:5c:c1:
82:4a:0c:e4:82:61:64:f8:25:49:47:25:e7:30:a2:95:7b:05:
2b:71:97:86:86:7c:7c:7e:25:8b:d5:54:19:6f:a0:27:e5:f9:
60:34:1f:a0:2f:5b:f7:cf:4c:5d:a4:0b:1a:b9:e0:3b:7c:61:
04:19:42:ba:ee:42:05:c8:3c:1c:c8:4e:f7:4e:88:bd:cc:91:
70:8e:e7:d3:17:70:d2:83:43:04:3e:24:52:a6:de:35:54:9d:
74:3f:ba:79:91:9b:9b:3a:0a:11:dd:27:30:88:46:72:7f:32:
ad:85:33:ec:cc:44:d9:8e:d9:4b:2d:dc:4e:9e:19:ac:d1:5d:
9f:0d:bb:6d:b0:05:f7:07:23:d0:c0:38:72:ff:a7:1b:19:35:
62:9f:60:77:91:d0:57:d7:8e:43:c1:7d:fc:3e:fa:ae:2f:2c:
23:49:8a:c4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEcV1DBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMx
MDE3MTAzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTNjNDFjNzRkMGI5
ODYwOTljNTc1MDgzMDcxYzI0NTEzZTBhMTc2ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALxZ9nKtea3bkPpbYzBn5BCpRikvn0Cc+FkUxK785t+N5kZ4
5DB6T1o9t5tqTYtNMuEzyWCEznKtyCIVrpL7UIPyRFJ1jKQO3k44skaK7b0zmKGM
PnkazyqmliwR3oVuWgXIX53fTknWCGpX8myjHVjXPjsXozrIqfwLPMmYs/mPcNzG
TsSHMwe1oLyI3BabG8W5KJPw6ZUwXh71wG3nS9jDHaM/RXjg0+9uUXpx+MtTSRfi
nMRBZeOXl55OipdDU5QncGfU8h9+JR+3h8Dqi9w3c7XG+0MBXdgDQze8NLF8tazP
QawU4xce1FrddheQJHeyocNJ02u/TeNaInni4ssCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTjxBx00LmGCZxXUIMHHCRRPgoXbTAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
LzQ4UWNkTkM1aGdtY1YxQ0RCeHdrVVQ0S0YyMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCiSV9hpjEBN/qkMHvsr/mz0h99nZXxRsF0Se1y
k7q63+S6ljYKiX1X6xMZWfcZD9XBIqt5NMcPJzuKVaw+kJ5H+KlrdjSgYRPcdx5t
CKO1T++wWyRqiCgQXMGCSgzkgmFk+CVJRyXnMKKVewUrcZeGhnx8fiWL1VQZb6An
5flgNB+gL1v3z0xdpAsaueA7fGEEGUK67kIFyDwcyE73Toi9zJFwjufTF3DSg0ME
PiRSpt41VJ10P7p5kZubOgoR3ScwiEZyfzKthTPszETZjtlLLdxOnhms0V2fDbtt
sAX3ByPQwDhy/6cbGTVin2B3kdBX145DwX38PvquLywjSYrE
-----END CERTIFICATE-----
Generated at Mon Jun 9 12:07:36 2025 by rpki-client