Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7KlKqjDtcqmCmd0yHgV4eZqdx5Q.roa
File: 7KlKqjDtcqmCmd0yHgV4eZqdx5Q.roa (raw, json)
Hash identifier: 2MqXLjWS7JzYY3FwBlqn/gUdSNXxJnNC1GA8U/yZLik=
Subject key identifier: EC:A9:4A:AA:30:ED:72:A9:82:99:DD:32:1E:05:78:79:9A:9D:C7:94
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B09522D06F6CB530B22E4B1DBBF422FE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7KlKqjDtcqmCmd0yHgV4eZqdx5Q.roa
Signing time: Mon 12 Jun 2023 17:09:03 +0000
ROA not before: Mon 12 Jun 2023 17:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b0:95:22:d0:6f:6c:b5:30:b2:2e:4b:1d:bb:f4:22:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 12 17:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eca94aaa30ed72a98299dd321e0578799a9dc794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3c:ed:72:82:54:7c:88:91:d9:3e:4d:e3:1c:
04:b2:ab:ab:26:41:56:97:90:1d:6b:86:13:ff:7e:
06:2c:a4:30:d3:28:5a:7c:9a:34:8a:8b:8a:c3:bc:
73:13:e1:6e:c3:65:df:09:81:e7:4b:87:ee:3a:6b:
39:be:c7:b3:14:02:a3:a8:5f:14:f7:12:17:04:c7:
eb:34:92:11:f5:80:04:a9:e3:f6:4e:2f:75:09:e8:
b5:82:2d:5a:29:24:ea:89:06:c1:10:38:ca:5e:ef:
8f:2d:64:ef:02:c2:12:34:ae:ca:58:8a:40:67:55:
9e:25:57:ac:5f:f7:67:a0:68:07:7d:dd:48:b5:3d:
db:d7:dd:a6:8f:16:29:95:db:33:bb:f6:19:1d:6e:
d6:08:c0:28:e6:e5:ad:06:62:27:56:1c:30:5e:cc:
49:6f:61:83:3e:07:2b:03:01:25:d7:cf:27:c6:b2:
f5:63:17:29:b3:04:45:e3:d3:67:16:ee:c4:f0:0e:
8b:16:16:a5:d8:80:31:9a:6d:8c:7f:51:9d:20:54:
2c:26:61:26:fc:05:60:2c:9f:86:f8:a6:9e:60:51:
9d:c1:a1:5b:a6:1e:67:5c:9b:75:e2:a0:f3:04:41:
79:d5:21:ea:e2:95:09:89:6d:e9:e5:30:c9:78:f4:
52:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A9:4A:AA:30:ED:72:A9:82:99:DD:32:1E:05:78:79:9A:9D:C7:94
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7KlKqjDtcqmCmd0yHgV4eZqdx5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:ee:a3:82:3c:f5:8f:aa:ff:37:fd:34:9b:5d:1c:1f:87:13:
3f:6a:79:b6:eb:88:84:aa:0d:f2:4e:5e:23:8a:2f:54:fc:b8:
8f:de:67:13:8b:f6:f8:c5:ad:40:04:de:df:f2:f7:85:28:de:
1e:ac:3c:d3:b6:16:ef:27:f0:6a:3c:99:59:f4:62:01:5d:1b:
9a:81:76:a3:ee:a1:be:31:88:af:9b:4f:20:9c:50:3e:dd:66:
f6:83:2e:e2:a5:53:20:c2:1f:eb:4c:e9:18:f0:31:e4:1c:1d:
7c:ac:59:a5:83:b3:01:c6:ff:c1:2b:1c:ca:a4:90:02:ee:e7:
db:86:4c:94:97:57:88:32:08:60:cd:09:ef:ec:2e:df:ff:b9:
fb:d7:de:2d:d8:09:f5:64:67:a3:17:2e:7b:42:c8:19:e0:de:
6d:eb:fc:ad:f3:d0:b9:3d:4d:1c:07:34:bc:15:92:5a:8e:ab:
ca:48:53:d1:e3:9a:10:78:64:97:36:26:32:9e:11:53:63:61:
3b:bd:89:1a:c5:dc:f9:0d:9c:5d:94:e8:41:a1:7b:8f:bb:ae:
e4:96:af:51:e6:1a:9d:48:a6:35:53:1a:ec:8f:57:3a:65:5f:
c8:83:2c:33:a8:3f:f4:d3:75:68:b7:0b:9c:47:66:47:02:6f:
03:2e:ba:c4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYiwlSLQb2y1MLIuSx279CL+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjEyMTcwOTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2E5NGFhYTMwZWQ3MmE5ODI5OWRkMzIxZTA1Nzg3OTlhOWRjNzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTztcoJUfIiR2T5N4xwEsqurJkFW
l5Ada4YT/34GLKQw0yhafJo0iouKw7xzE+Fuw2XfCYHnS4fuOms5vsezFAKjqF8U
9xIXBMfrNJIR9YAEqeP2Ti91Cei1gi1aKSTqiQbBEDjKXu+PLWTvAsISNK7KWIpA
Z1WeJVesX/dnoGgHfd1ItT3b192mjxYpldszu/YZHW7WCMAo5uWtBmInVhwwXsxJ
b2GDPgcrAwEl188nxrL1YxcpswRF49NnFu7E8A6LFhal2IAxmm2Mf1GdIFQsJmEm
/AVgLJ+G+KaeYFGdwaFbph5nXJt14qDzBEF51SHq4pUJiW3p5TDJePRSlwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOypSqow7XKpgpndMh4FeHmanceUMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvN0tsS3FqRHRjcW1DbWQweUhnVjRlWnFkeDVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIHuo4I89Y+q/zf9NJtd
HB+HEz9qebbriISqDfJOXiOKL1T8uI/eZxOL9vjFrUAE3t/y94Uo3h6sPNO2Fu8n
8Go8mVn0YgFdG5qBdqPuob4xiK+bTyCcUD7dZvaDLuKlUyDCH+tM6RjwMeQcHXys
WaWDswHG/8ErHMqkkALu59uGTJSXV4gyCGDNCe/sLt//ufvX3i3YCfVkZ6MXLntC
yBng3m3r/K3z0Lk9TRwHNLwVklqOq8pIU9HjmhB4ZJc2JjKeEVNjYTu9iRrF3PkN
nF2U6EGhe4+7ruSWr1HmGp1IpjVTGuyPVzplX8iDLDOoP/TTdWi3C5xHZkcCbwMu
usQ=
-----END CERTIFICATE-----
Generated at Tue Jun 10 04:02:36 2025 by rpki-client