Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7-w4DpAh384uxIHkKPbNPXpeEYk.roa
File: 7-w4DpAh384uxIHkKPbNPXpeEYk.roa (raw, json)
Hash identifier: j+HjQeGgYpOkB6D2n7UGB3R+gB5QRJZ8tT+00n7ZXqU=
Subject key identifier: EF:EC:38:0E:90:21:DF:CE:2E:C4:81:E4:28:F6:CD:3D:7A:5E:11:89
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 91C2DB63
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7-w4DpAh384uxIHkKPbNPXpeEYk.roa
Signing time: Sat 02 Jul 2022 13:10:26 +0000
ROA not before: Sat 02 Jul 2022 13:10:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2445466467 (0x91c2db63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 2 13:10:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=efec380e9021dfce2ec481e428f6cd3d7a5e1189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fe:70:1a:de:05:4e:4a:33:ef:b4:bd:54:f9:
37:65:2c:d3:ef:a2:f3:29:d1:4e:8f:5f:a7:e4:d9:
6f:85:b4:6a:1f:8b:41:12:87:c8:fb:5e:db:34:c3:
6e:be:48:8f:df:bd:86:e6:6a:d9:b9:ac:d0:9e:f2:
d6:8b:7f:e9:b4:b0:11:9b:35:a6:83:3e:f5:04:49:
05:cc:e1:3f:5a:cd:e5:2c:50:73:26:49:05:84:02:
07:33:d7:2e:f9:d9:c0:86:bc:a5:4c:b3:27:9a:3e:
44:73:c2:4b:04:2e:20:a9:26:62:df:85:8c:05:42:
aa:d8:0d:96:f1:40:8e:a9:61:e9:ac:e7:b5:15:ef:
a4:60:ac:15:a1:7a:59:de:89:95:e7:d6:ad:d8:5e:
72:85:d7:6e:53:44:f5:73:e3:46:bc:bb:67:b4:60:
c7:80:b7:9b:05:e1:5e:1c:59:61:76:38:78:78:95:
08:e3:b4:d2:b2:31:a4:1d:16:d9:5b:64:e3:c3:76:
5d:b6:78:a9:5c:64:58:f0:67:f2:e7:a8:0c:bd:e2:
bb:51:41:13:73:74:90:f5:2f:13:81:93:b6:cf:3f:
cb:3e:f2:c3:10:45:79:37:e2:2d:b6:4c:c8:8e:03:
7c:a0:4f:b5:69:4b:f0:10:12:5a:0c:c5:4c:86:fa:
74:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EC:38:0E:90:21:DF:CE:2E:C4:81:E4:28:F6:CD:3D:7A:5E:11:89
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7-w4DpAh384uxIHkKPbNPXpeEYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:a9:14:16:d8:35:c0:1d:5f:d6:a4:c2:aa:11:75:bc:3d:4e:
e2:c0:06:1c:16:7d:8a:45:35:f6:87:52:0c:84:bc:e9:6c:3e:
f4:d5:3c:1a:5d:35:7b:ef:b5:40:2d:69:a7:c4:a2:3c:74:fa:
85:9b:ae:f8:b6:23:c5:99:2e:03:e9:83:65:5e:ec:58:45:9d:
59:63:87:8b:cd:89:97:0e:86:d1:e7:4f:1e:1e:7b:26:1e:0d:
d3:78:71:3a:63:54:c1:6d:26:b9:53:50:f9:b0:59:ac:73:d6:
ff:1a:37:98:67:71:08:66:68:8d:ea:19:6a:a4:a2:30:68:e6:
b6:71:7b:d4:55:4d:bb:b9:e5:40:bd:a1:68:e0:6b:6d:e4:04:
77:a5:17:ad:a8:35:63:f6:e4:ad:f9:96:d4:0c:f9:23:17:59:
44:7d:2b:91:33:cd:32:02:21:e9:75:25:7f:17:a4:ae:8e:fc:
4d:48:63:2b:1f:d4:51:84:67:dc:16:77:9c:0c:ba:36:b4:5e:
2c:a7:6c:37:b1:92:1c:b6:08:55:b3:80:a0:0c:c1:b1:e3:91:
66:26:55:98:14:1e:d9:b5:ae:57:67:fc:6a:a8:f2:d4:20:94:
09:02:88:15:50:91:d2:b9:c5:2e:28:45:4a:43:ed:2d:69:e9:
cf:83:a7:45
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAJHC22MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA3
MDIxMzEwMjZaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGVmZWMzODBlOTAy
MWRmY2UyZWM0ODFlNDI4ZjZjZDNkN2E1ZTExODkwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCG/nAa3gVOSjPvtL1U+TdlLNPvovMp0U6PX6fk2W+FtGof
i0ESh8j7Xts0w26+SI/fvYbmatm5rNCe8taLf+m0sBGbNaaDPvUESQXM4T9azeUs
UHMmSQWEAgcz1y752cCGvKVMsyeaPkRzwksELiCpJmLfhYwFQqrYDZbxQI6pYems
57UV76RgrBWhelneiZXn1q3YXnKF125TRPVz40a8u2e0YMeAt5sF4V4cWWF2OHh4
lQjjtNKyMaQdFtlbZOPDdl22eKlcZFjwZ/LnqAy94rtRQRNzdJD1LxOBk7bPP8s+
8sMQRXk34i22TMiOA3ygT7VpS/AQEloMxUyG+nTjAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQU7+w4DpAh384uxIHkKPbNPXpeEYkwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS83LXc0RHBBaDM4NHV4SUhrS1BiTlBYcGVFWWsucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAIakUFtg1wB1f1qTCqhF1vD1O4sAGHBZ9ikU1
9odSDIS86Ww+9NU8Gl01e++1QC1pp8SiPHT6hZuu+LYjxZkuA+mDZV7sWEWdWWOH
i82Jlw6G0edPHh57Jh4N03hxOmNUwW0muVNQ+bBZrHPW/xo3mGdxCGZojeoZaqSi
MGjmtnF71FVNu7nlQL2haOBrbeQEd6UXrag1Y/bkrfmW1Az5IxdZRH0rkTPNMgIh
6XUlfxekro78TUhjKx/UUYRn3BZ3nAy6NrReLKdsN7GSHLYIVbOAoAzBseORZiZV
mBQe2bWuV2f8aqjy1CCUCQKIFVCR0rnFLihFSkPtLWnpz4OnRQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 02:40:49 2025 by rpki-client