Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C7bXOSErALVTcpfwBYDvBr5uKiM.roa
File: C7bXOSErALVTcpfwBYDvBr5uKiM.roa (raw, json)
Hash identifier: S58+/1HlAkp9lWTkmlDH2NNfldo4qQtC6WO3m0ItiJk=
Subject key identifier: 0B:B6:D7:39:21:2B:00:B5:53:72:97:F0:05:80:EF:06:BE:6E:2A:23
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189BAA49E5B89A0B84AD43C2DB817DDBD2E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C7bXOSErALVTcpfwBYDvBr5uKiM.roa
Signing time: Thu 03 Aug 2023 09:04:57 +0000
ROA not before: Thu 03 Aug 2023 09:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:baa4:b0b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ba:a4:9e:5b:89:a0:b8:4a:d4:3c:2d:b8:17:dd:bd:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 09:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bb6d739212b00b5537297f00580ef06be6e2a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f0:1b:ce:6e:f4:1b:5b:46:3e:c5:cb:b7:67:
65:97:5e:85:56:a0:64:05:a6:e4:68:03:c2:11:7e:
5f:78:20:dc:66:61:74:cd:24:6d:19:ae:66:90:ab:
cc:b9:e9:fd:4b:fd:d6:67:e8:b4:9b:34:c8:c3:c5:
0d:f5:c0:cc:3b:e9:7c:56:f5:82:02:9d:58:76:b9:
d1:5a:22:d4:0e:41:97:27:6e:bc:69:85:3f:99:2c:
f7:6a:18:e7:5f:d6:40:ff:ad:6b:2c:3b:1d:0b:fb:
12:6b:c7:58:88:43:ab:fc:80:15:b5:47:49:b2:17:
03:88:3f:00:1d:ed:fa:2e:fb:99:a0:c9:df:93:36:
f0:5d:00:e6:69:95:33:3c:0e:10:12:aa:dc:2b:fb:
3c:f0:fb:24:17:9d:87:41:3c:2f:de:3a:49:00:73:
45:a4:eb:31:9c:ea:b7:c5:72:aa:f7:06:9f:51:cb:
f1:c3:83:cc:43:05:2a:db:65:fa:2e:44:7d:80:0a:
59:2e:b9:65:34:3f:4f:2a:bc:35:c0:a9:66:85:a3:
0b:94:b6:f1:38:c1:ae:9e:ea:0f:d3:d2:00:53:f5:
2a:0d:d4:c9:62:70:58:ad:e0:2d:07:19:51:ff:53:
03:9b:88:70:62:64:1d:1c:89:49:77:bb:07:9c:23:
6a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B6:D7:39:21:2B:00:B5:53:72:97:F0:05:80:EF:06:BE:6E:2A:23
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C7bXOSErALVTcpfwBYDvBr5uKiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:30:ae:d5:84:d7:27:dc:32:ea:5f:bb:1a:fb:48:b6:49:70:
a7:1f:3b:0e:09:e7:a0:ee:d2:f1:2f:38:5c:37:2b:51:26:81:
05:fb:8c:c9:95:8d:ad:05:3f:63:ab:77:90:c0:f9:f8:09:93:
07:65:34:43:97:73:8a:09:fb:0f:97:58:0e:49:c4:8c:6b:69:
73:23:62:20:b5:de:10:ff:1c:18:7f:f7:fc:a2:ef:65:e2:5b:
54:55:e8:c2:05:df:b3:ac:26:aa:5a:92:6c:b1:7d:a8:ec:4d:
cf:ea:d7:52:86:a2:46:53:0b:74:b3:ca:3f:6a:e0:ad:ee:9c:
24:bc:0d:bf:c4:36:58:8b:ba:31:b4:d3:ea:75:4a:d2:a1:40:
88:e2:61:ab:7d:58:0d:bc:92:c0:be:98:4f:8b:b0:97:ab:ad:
88:1b:3b:b1:ca:fe:56:87:b1:f2:2f:3e:d3:1f:ef:ff:67:c5:
b0:20:15:cf:ce:fe:b0:86:95:b6:4d:e2:07:93:0e:04:76:76:
61:43:fc:43:4c:80:96:e8:b3:2a:36:64:4e:49:55:64:73:c9:
d4:63:f9:62:82:a3:4a:5a:69:53:cd:f3:b3:82:01:2c:10:5f:
73:bb:bc:bf:48:a1:96:e4:1d:a8:ef:10:93:45:a3:45:ba:c1:
00:e8:41:c3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYm6pJ5biaC4StQ8LbgX3b0uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODAzMDkwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmI2ZDczOTIxMmIwMGI1NTM3Mjk3ZjAwNTgwZWYwNmJlNmUyYTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvAbzm70G1tGPsXLt2dll16FVqBk
BabkaAPCEX5feCDcZmF0zSRtGa5mkKvMuen9S/3WZ+i0mzTIw8UN9cDMO+l8VvWC
Ap1YdrnRWiLUDkGXJ268aYU/mSz3ahjnX9ZA/61rLDsdC/sSa8dYiEOr/IAVtUdJ
shcDiD8AHe36LvuZoMnfkzbwXQDmaZUzPA4QEqrcK/s88PskF52HQTwv3jpJAHNF
pOsxnOq3xXKq9wafUcvxw4PMQwUq22X6LkR9gApZLrllND9PKrw1wKlmhaMLlLbx
OMGunuoP09IAU/UqDdTJYnBYreAtBxlR/1MDm4hwYmQdHIlJd7sHnCNqwQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAu21zkhKwC1U3KX8AWA7wa+biojMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQzdiWE9TRXJBTFZUY3Bmd0JZRHZCcjV1S2lNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHAwrtWE1yfcMupfuxr7
SLZJcKcfOw4J56Du0vEvOFw3K1EmgQX7jMmVja0FP2Ord5DA+fgJkwdlNEOXc4oJ
+w+XWA5JxIxraXMjYiC13hD/HBh/9/yi72XiW1RV6MIF37OsJqpakmyxfajsTc/q
11KGokZTC3Szyj9q4K3unCS8Db/ENliLujG00+p1StKhQIjiYat9WA28ksC+mE+L
sJerrYgbO7HK/laHsfIvPtMf7/9nxbAgFc/O/rCGlbZN4geTDgR2dmFD/ENMgJbo
syo2ZE5JVWRzydRj+WKCo0paaVPN87OCASwQX3O7vL9IoZbkHajvEJNFo0W6wQDo
QcM=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:06:31 2025 by rpki-client