Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/59kZXhrQWyZ0zLNP_adrI1b1qcU.roa
File: 59kZXhrQWyZ0zLNP_adrI1b1qcU.roa (raw, json)
Hash identifier: ZAIJxCLv75EE1xYFAspuWsjjsTmiHQr0rh7mURf1sm4=
Subject key identifier: E7:D9:19:5E:1A:D0:5B:26:74:CC:B3:4F:FD:A7:6B:23:56:F5:A9:C5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7D2DF4A2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/59kZXhrQWyZ0zLNP_adrI1b1qcU.roa
Signing time: Thu 21 Apr 2022 07:12:21 +0000
ROA not before: Thu 21 Apr 2022 07:12:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2100163746 (0x7d2df4a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 21 07:12:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7d9195e1ad05b2674ccb34ffda76b2356f5a9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a7:58:34:62:10:b9:87:89:48:77:58:a8:2b:
c6:01:e2:47:34:5e:d1:f9:59:28:92:3d:b6:b3:38:
83:32:f3:51:3a:75:a4:f5:78:90:16:de:5d:87:63:
88:35:73:20:6e:aa:82:ca:44:02:ca:ac:f5:94:cc:
e9:b3:9c:03:33:f9:b8:2a:ef:03:fa:27:c6:88:ba:
f1:79:96:2d:bd:ac:85:d5:0d:ee:dd:0c:66:85:e5:
48:b4:a4:f5:10:6f:3e:77:bc:4f:03:ab:26:8d:58:
19:7c:c6:24:e1:c2:c2:58:e8:00:23:e9:3d:aa:7d:
c7:8a:a3:9a:e6:8f:b5:06:0f:0a:84:37:e8:93:ca:
1b:c1:31:3c:a5:b5:1b:a0:6b:b9:c7:f2:0e:f3:06:
20:4e:6a:ce:84:86:a2:14:b3:06:20:a0:97:7c:31:
b6:18:eb:3e:da:61:69:99:80:80:fa:12:14:a5:48:
91:8c:e6:77:96:74:39:2d:97:7e:de:41:9a:91:3c:
23:62:f4:de:1c:66:84:90:85:3a:03:97:a2:94:90:
1c:61:28:ca:1d:bd:d5:2b:57:0c:54:d0:17:61:06:
0e:26:68:a4:9e:b8:3e:38:15:c8:69:01:23:ca:78:
f3:dd:4b:2d:37:5c:4e:af:e1:48:e1:a9:e9:ff:18:
25:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D9:19:5E:1A:D0:5B:26:74:CC:B3:4F:FD:A7:6B:23:56:F5:A9:C5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/59kZXhrQWyZ0zLNP_adrI1b1qcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:a9:9a:c7:de:fc:94:19:d5:07:b2:a7:65:53:2e:9b:76:88:
e7:fe:0b:82:90:02:7b:0e:c2:bb:3c:70:e4:c8:c5:8a:11:21:
0e:f0:48:9b:52:14:83:ed:1c:7d:7b:93:46:64:0a:23:0d:92:
72:2f:cc:4a:26:79:3b:48:51:24:e0:06:fc:9e:d1:87:1b:0c:
dd:ad:37:65:21:95:e4:ea:9d:40:df:59:b1:7c:0b:6a:64:11:
d3:ac:3e:99:c7:62:5e:ba:0a:8c:cb:d5:fb:c8:e9:bf:74:96:
1c:f4:9c:6c:e5:0c:f2:e9:bb:8b:ab:ad:8d:9c:64:d5:f9:d0:
59:4b:c9:a0:30:a2:58:43:65:b8:3d:20:eb:6f:c4:06:c4:3c:
1e:db:b5:38:ed:7c:42:b5:cd:54:da:62:00:aa:d0:63:d6:2c:
2c:08:9a:a8:61:32:7b:06:a8:de:14:13:6c:28:31:c7:1e:8d:
83:34:5f:0e:4f:09:b5:91:f1:9b:1d:df:b4:c8:79:87:d4:6a:
79:e2:68:d5:d7:47:06:e5:89:ff:6c:31:ae:72:fb:ed:14:ab:
6b:66:d9:4e:df:d3:56:22:d3:25:95:97:c9:ac:80:28:46:83:
78:61:c7:98:59:1a:96:f7:61:b0:c5:7b:31:a7:90:59:af:2c:
68:70:27:d0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEfS30ojANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDQy
MTA3MTIyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTdkOTE5NWUxYWQw
NWIyNjc0Y2NiMzRmZmRhNzZiMjM1NmY1YTljNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOOnWDRiELmHiUh3WKgrxgHiRzRe0flZKJI9trM4gzLzUTp1
pPV4kBbeXYdjiDVzIG6qgspEAsqs9ZTM6bOcAzP5uCrvA/onxoi68XmWLb2shdUN
7t0MZoXlSLSk9RBvPne8TwOrJo1YGXzGJOHCwljoACPpPap9x4qjmuaPtQYPCoQ3
6JPKG8ExPKW1G6BrucfyDvMGIE5qzoSGohSzBiCgl3wxthjrPtphaZmAgPoSFKVI
kYzmd5Z0OS2Xft5BmpE8I2L03hxmhJCFOgOXopSQHGEoyh291StXDFTQF2EGDiZo
pJ64PjgVyGkBI8p4891LLTdcTq/hSOGp6f8YJQUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTn2RleGtBbJnTMs0/9p2sjVvWpxTAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
LzU5a1pYaHJRV3laMHpMTlBfYWRySTFiMXFjVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCDqZrH3vyUGdUHsqdlUy6bdojn/guCkAJ7DsK7
PHDkyMWKESEO8EibUhSD7Rx9e5NGZAojDZJyL8xKJnk7SFEk4Ab8ntGHGwzdrTdl
IZXk6p1A31mxfAtqZBHTrD6Zx2JeugqMy9X7yOm/dJYc9Jxs5Qzy6buLq62NnGTV
+dBZS8mgMKJYQ2W4PSDrb8QGxDwe27U47XxCtc1U2mIAqtBj1iwsCJqoYTJ7Bqje
FBNsKDHHHo2DNF8OTwm1kfGbHd+0yHmH1Gp54mjV10cG5Yn/bDGucvvtFKtrZtlO
39NWItMllZfJrIAoRoN4YceYWRqW92GwxXsxp5BZryxocCfQ
-----END CERTIFICATE-----
Generated at Thu Jun 12 17:40:46 2025 by rpki-client