Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7R2kXbNElUbLCI8gE_ksXJ1Jkjc.roa
File: 7R2kXbNElUbLCI8gE_ksXJ1Jkjc.roa (raw, json)
Hash identifier: SsYjVL99EfKImr/6qdhQshP4Fdd3LDLgmsE6TZGaDBw=
Subject key identifier: ED:1D:A4:5D:B3:44:95:46:CB:08:8F:20:13:F9:2C:5C:9D:49:92:37
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018701453C08922C466E73A9D44C599D24F2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7R2kXbNElUbLCI8gE_ksXJ1Jkjc.roa
Signing time: Mon 20 Mar 2023 23:05:27 +0000
ROA not before: Mon 20 Mar 2023 23:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:144:b5e4/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:01:45:3c:08:92:2c:46:6e:73:a9:d4:4c:59:9d:24:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 20 23:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed1da45db3449546cb088f2013f92c5c9d499237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:d2:27:05:d2:4a:c7:33:0d:63:f6:b5:06:
2b:90:7a:1e:5c:dd:df:aa:54:01:8a:b8:fc:f6:70:
0b:b6:84:2e:b6:1f:6e:40:7d:1d:23:84:23:46:d7:
bb:ad:5d:13:7d:cc:da:d1:c4:aa:d7:a2:51:0e:bd:
95:8e:b7:74:53:23:c9:77:bc:e5:7e:73:6e:97:18:
af:2f:14:be:59:d6:cd:71:c0:f1:8c:23:d2:4e:03:
50:d9:94:30:e1:34:a7:eb:39:71:ed:76:0a:e1:86:
65:61:86:b4:22:94:86:b6:8d:94:aa:81:04:18:7e:
78:43:f6:39:4b:93:0a:b7:00:7c:69:d7:18:b2:a8:
ac:d3:41:c5:fa:74:cb:0a:93:aa:3b:9c:9d:b7:1a:
90:b2:f8:6b:9a:39:ac:f0:5f:4e:b5:a5:65:f5:42:
0c:3a:a3:27:ee:59:46:d1:bf:bc:c2:f6:2d:d1:13:
8d:11:66:40:10:79:45:64:8d:60:73:e9:5a:74:f6:
71:21:d7:8f:98:9a:6d:3d:c6:07:08:9a:bb:09:96:
73:27:cd:62:2c:d9:11:a2:a2:08:69:89:46:fe:bc:
b4:1c:b7:a1:b1:c4:2a:d8:53:48:d3:5e:c3:ea:20:
21:8a:51:0f:d0:55:2e:5a:d1:9e:93:7c:fc:d4:36:
84:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1D:A4:5D:B3:44:95:46:CB:08:8F:20:13:F9:2C:5C:9D:49:92:37
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7R2kXbNElUbLCI8gE_ksXJ1Jkjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:7a:75:21:e6:5a:28:c8:24:b0:ea:c3:63:09:8c:bd:44:31:
35:a2:9b:8c:29:d2:a6:5b:a2:51:14:fa:a6:0c:fc:c3:f5:1f:
11:e3:35:d5:59:7e:ce:ba:9d:cb:93:a9:cc:27:e4:75:97:8b:
d8:5a:8f:5e:56:53:1f:10:b2:bc:72:7c:7b:56:ae:6f:6e:2f:
7d:32:23:df:45:db:8e:f5:46:6b:af:20:2b:2d:6f:8d:4a:fb:
81:2e:27:5f:3c:d6:57:0c:85:73:1b:3f:a8:7c:60:0d:a2:c8:
a5:61:f9:7e:f6:85:a1:01:b0:10:02:1e:ed:73:6d:74:bc:14:
9a:99:9f:e4:54:25:98:3e:f4:a6:89:fe:a1:23:be:1a:ab:0b:
ba:6f:65:0d:b8:64:67:2b:28:7c:28:10:c7:a8:60:73:b9:95:
b8:6a:10:4d:fe:00:ed:bb:c6:ce:76:40:b5:89:67:a3:45:65:
0c:b9:b7:93:54:df:21:45:95:db:c1:66:db:83:b1:2d:ce:76:
91:a5:91:3b:53:86:df:6a:ec:6c:3e:f8:ab:62:31:94:5e:43:
a7:1f:84:be:01:6d:66:24:c9:18:ae:ad:29:3e:04:47:4a:75:
4c:29:4c:50:e6:7a:65:03:db:d7:c4:73:d7:84:ed:db:70:b3:
1d:ec:f3:cc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYcBRTwIkixGbnOp1ExZnSTyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzIwMjMwNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDFkYTQ1ZGIzNDQ5NTQ2Y2IwODhmMjAxM2Y5MmM1YzlkNDk5MjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui/SJwXSSsczDWP2tQYrkHoeXN3f
qlQBirj89nALtoQuth9uQH0dI4QjRte7rV0Tfcza0cSq16JRDr2Vjrd0UyPJd7zl
fnNulxivLxS+WdbNccDxjCPSTgNQ2ZQw4TSn6zlx7XYK4YZlYYa0IpSGto2UqoEE
GH54Q/Y5S5MKtwB8adcYsqis00HF+nTLCpOqO5ydtxqQsvhrmjms8F9OtaVl9UIM
OqMn7llG0b+8wvYt0RONEWZAEHlFZI1gc+ladPZxIdePmJptPcYHCJq7CZZzJ81i
LNkRoqIIaYlG/ry0HLehscQq2FNI017D6iAhilEP0FUuWtGek3z81DaEawIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFO0dpF2zRJVGywiPIBP5LFydSZI3MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvN1Iya1hiTkVsVWJMQ0k4Z0Vfa3NYSjFKa2pjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFl6dSHmWijIJLDqw2MJ
jL1EMTWim4wp0qZbolEU+qYM/MP1HxHjNdVZfs66ncuTqcwn5HWXi9haj15WUx8Q
srxyfHtWrm9uL30yI99F2471RmuvICstb41K+4EuJ1881lcMhXMbP6h8YA2iyKVh
+X72haEBsBACHu1zbXS8FJqZn+RUJZg+9KaJ/qEjvhqrC7pvZQ24ZGcrKHwoEMeo
YHO5lbhqEE3+AO27xs52QLWJZ6NFZQy5t5NU3yFFldvBZtuDsS3OdpGlkTtTht9q
7Gw++KtiMZReQ6cfhL4BbWYkyRiurSk+BEdKdUwpTFDmemUD29fEc9eE7dtwsx3s
88w=
-----END CERTIFICATE-----
Generated at Wed Jun 11 09:35:30 2025 by rpki-client