Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7LYrVrb0tJghzdrppTeP37hBQl8.roa
File: 7LYrVrb0tJghzdrppTeP37hBQl8.roa (raw, json)
Hash identifier: Sc6gtKKvnvXb3sQIcUWdnfvtXK8c19ylMSU+e6MCQx8=
Subject key identifier: EC:B6:2B:56:B6:F4:B4:98:21:CD:DA:E9:A5:37:8F:DF:B8:41:42:5F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C0402D0944D724883C80433AB7486CDB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7LYrVrb0tJghzdrppTeP37hBQl8.roa
Signing time: Fri 04 Aug 2023 11:12:58 +0000
ROA not before: Fri 04 Aug 2023 11:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c0:40:2d:09:44:d7:24:88:3c:80:43:3a:b7:48:6c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 4 11:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecb62b56b6f4b49821cddae9a5378fdfb841425f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c6:63:1d:45:55:40:8e:1b:e2:29:98:af:04:
38:fc:db:1a:67:5f:8b:92:ea:f2:51:f6:b2:bf:50:
69:db:35:38:4c:ff:12:cf:d5:9d:d0:fc:da:db:58:
36:81:5c:a4:ce:ce:7a:69:32:1b:15:3c:37:05:1e:
1d:b2:61:22:46:fc:b5:21:64:03:e2:46:f9:79:65:
ec:ad:e3:1b:55:ce:97:21:bc:eb:2a:64:84:e2:d0:
d7:dd:e4:a5:e9:e4:5d:da:a9:28:ed:2f:d2:74:0a:
20:fa:8f:45:81:0f:a8:30:f4:0f:7d:87:8a:8e:83:
17:8c:56:3c:c7:3c:15:9f:e4:38:1f:50:dc:a2:23:
b3:aa:6e:93:2e:7f:21:dc:b9:ef:ab:71:09:f6:db:
f4:f9:76:75:ad:72:7d:c5:9c:32:9b:96:6f:aa:a9:
ce:9f:37:36:69:c9:1e:d2:3b:cf:64:2c:4e:94:69:
f6:ab:26:33:ea:93:c6:dd:bd:72:bd:57:04:c4:ef:
fc:c4:29:4e:5e:e8:a5:d4:0d:9d:62:e0:cf:f3:82:
e4:a3:ae:1f:44:dc:6c:e1:23:0c:58:f6:86:29:8e:
09:65:1e:f5:6c:44:21:67:c2:e7:b5:f2:3b:71:75:
e9:c2:e3:70:b4:a3:e6:45:92:53:b0:a4:1d:3e:f3:
e3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B6:2B:56:B6:F4:B4:98:21:CD:DA:E9:A5:37:8F:DF:B8:41:42:5F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7LYrVrb0tJghzdrppTeP37hBQl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:78:35:15:83:6f:9d:38:80:bc:0d:f0:c9:0e:7a:44:ad:ad:
cb:9b:45:91:3a:f2:97:8c:1f:c0:ee:71:3a:34:af:d8:40:5b:
14:f6:37:81:52:3d:32:65:e7:b9:ac:11:3f:ea:dc:20:25:2e:
ca:00:04:11:f4:71:1a:ba:39:70:a0:c4:75:5b:cf:23:44:83:
09:3c:38:35:e9:12:e3:6f:25:91:44:b1:52:74:b7:b7:dc:25:
35:44:8b:b6:7d:3f:82:57:5d:a0:c2:1f:a1:ba:ed:19:7e:27:
b8:ff:5d:ab:c5:d4:8e:95:d8:91:66:3d:c2:4c:62:bb:4e:e5:
1c:6d:59:d9:4f:c0:d2:90:72:a8:f7:a1:a8:c2:fc:d6:aa:39:
02:c0:33:07:d3:f4:19:2b:26:f8:5d:9c:99:df:63:ac:8a:45:
87:a3:fe:14:f5:31:a1:5f:29:da:3f:c9:ae:87:e8:94:73:09:
39:41:cb:0c:21:d8:a7:0a:dd:88:32:06:fb:8d:71:d9:b4:0e:
54:56:25:53:81:e9:dc:fd:6c:df:d7:27:0c:44:de:08:78:1c:
a5:a8:aa:43:1f:60:52:fe:9f:6b:ae:91:62:75:91:97:f8:f0:
5b:59:07:6a:8f:aa:a7:d2:22:84:01:94:52:7a:b8:dd:13:dd:
86:74:48:2d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnAQC0JRNckiDyAQzq3SGzbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODA0MTExMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2I2MmI1NmI2ZjRiNDk4MjFjZGRhZTlhNTM3OGZkZmI4NDE0MjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcZjHUVVQI4b4imYrwQ4/NsaZ1+L
kuryUfayv1Bp2zU4TP8Sz9Wd0Pza21g2gVykzs56aTIbFTw3BR4dsmEiRvy1IWQD
4kb5eWXsreMbVc6XIbzrKmSE4tDX3eSl6eRd2qko7S/SdAog+o9FgQ+oMPQPfYeK
joMXjFY8xzwVn+Q4H1DcoiOzqm6TLn8h3Lnvq3EJ9tv0+XZ1rXJ9xZwym5ZvqqnO
nzc2acke0jvPZCxOlGn2qyYz6pPG3b1yvVcExO/8xClOXuil1A2dYuDP84Lko64f
RNxs4SMMWPaGKY4JZR71bEQhZ8LntfI7cXXpwuNwtKPmRZJTsKQdPvPjtwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOy2K1a29LSYIc3a6aU3j9+4QUJfMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvN0xZclZyYjB0SmdoemRycHBUZVAzN2hCUWw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADl4NRWDb504gLwN8MkO
ekStrcubRZE68peMH8DucTo0r9hAWxT2N4FSPTJl57msET/q3CAlLsoABBH0cRq6
OXCgxHVbzyNEgwk8ODXpEuNvJZFEsVJ0t7fcJTVEi7Z9P4JXXaDCH6G67Rl+J7j/
XavF1I6V2JFmPcJMYrtO5RxtWdlPwNKQcqj3oajC/NaqOQLAMwfT9BkrJvhdnJnf
Y6yKRYej/hT1MaFfKdo/ya6H6JRzCTlBywwh2KcK3YgyBvuNcdm0DlRWJVOB6dz9
bN/XJwxE3gh4HKWoqkMfYFL+n2uukWJ1kZf48FtZB2qPqqfSIoQBlFJ6uN0T3YZ0
SC0=
-----END CERTIFICATE-----
Generated at Mon Jun 9 11:18:12 2025 by rpki-client