Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R2svQjqdPx7RruQfckzXmWoZFYE.roa
File: R2svQjqdPx7RruQfckzXmWoZFYE.roa (raw, json)
Hash identifier: r9JWWwSSMf6zU+Ly7SUspJYeBXpyGn47NHhg5R/04ik=
Subject key identifier: 47:6B:2F:42:3A:9D:3F:1E:D1:AE:E4:1F:72:4C:D7:99:6A:19:15:81
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183195F5CC072568375D0D7A59B12D0494E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R2svQjqdPx7RruQfckzXmWoZFYE.roa
Signing time: Wed 07 Sep 2022 19:13:43 +0000
ROA not before: Wed 07 Sep 2022 19:13:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:19:5f:5c:c0:72:56:83:75:d0:d7:a5:9b:12:d0:49:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 7 19:13:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=476b2f423a9d3f1ed1aee41f724cd7996a191581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:5c:e2:a6:e1:33:35:0a:29:d5:3a:59:8b:
1a:7f:ea:31:f3:73:10:95:c7:bf:c8:f9:1d:33:6c:
d3:fb:f9:b3:4b:01:77:77:06:19:85:8d:db:f4:a0:
e6:24:4d:84:b7:d1:6e:3d:bb:07:e9:79:a8:12:22:
ae:c8:14:e9:25:31:c6:61:14:b3:a4:92:33:63:e7:
76:ad:a8:7c:45:9c:58:ab:83:d1:cb:7c:99:8d:d3:
a0:5f:8d:35:92:c3:c1:c6:70:d1:4a:d8:fd:7d:27:
1a:63:c5:c0:b1:08:c0:b2:18:e6:e0:09:27:92:1e:
3b:76:b4:49:d3:ee:c7:49:c3:75:f5:a3:54:0e:90:
45:86:a6:31:12:c7:e1:e2:34:84:9d:c4:79:b6:12:
14:c1:ae:6b:f5:33:ea:0d:b5:7d:7a:dc:47:61:04:
a8:07:85:5b:f5:5d:20:e0:73:dc:b6:6e:15:e8:47:
3a:b5:15:34:f5:79:a2:74:b6:4f:5d:89:f4:9d:4d:
ba:f4:33:71:4d:d4:71:ea:f5:a7:b0:72:94:c2:6b:
e0:f2:37:e8:23:1c:d5:42:b0:b6:b6:e0:ac:94:40:
94:38:97:d7:bd:1c:73:7f:b8:4e:90:ed:e3:9c:32:
1a:30:cb:ac:fc:c9:79:a4:6b:0e:e9:77:22:7a:2d:
97:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6B:2F:42:3A:9D:3F:1E:D1:AE:E4:1F:72:4C:D7:99:6A:19:15:81
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R2svQjqdPx7RruQfckzXmWoZFYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:86:47:a7:79:55:87:50:f8:84:81:e7:c4:a6:87:0a:4a:72:
64:10:8e:1c:09:2e:78:97:58:11:b5:c4:6b:61:b3:2d:32:3c:
83:c5:5b:8e:13:44:8c:34:f8:7b:28:bc:32:f0:60:ac:22:ea:
c1:48:e8:d7:18:b7:21:0b:fd:7b:c8:35:8b:4d:e7:f7:73:bb:
6a:75:ee:ef:87:fe:7d:b2:d2:77:cf:7a:93:ca:5b:7d:8a:2f:
87:51:9f:7e:70:9d:1d:5c:92:58:32:aa:00:a4:c2:c4:05:db:
95:4a:68:8c:25:29:4f:c8:c4:88:5c:34:1f:8b:b0:18:21:ab:
7d:01:83:b0:d0:7c:d1:a1:56:ea:be:3b:f9:e3:77:7e:82:65:
0d:f4:5e:b5:63:03:9e:d0:57:87:c3:07:57:4d:1e:a6:8f:35:
a2:35:27:30:bb:04:a6:b2:cc:23:2e:2c:0a:53:cb:71:18:95:
54:8c:b5:e6:1b:33:7f:1c:2b:72:e4:13:f9:00:5b:ae:56:54:
b4:38:b8:5a:1a:bc:09:2d:fa:40:95:ea:fb:a5:f9:35:8c:df:
58:5d:8a:e5:12:91:be:d2:cb:51:e3:7b:62:d6:d8:67:f5:c6:
81:21:3a:f3:28:7d:a7:c5:89:2a:db:bd:18:fb:65:85:70:ff:
9b:9c:06:6c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYMZX1zAclaDddDXpZsS0ElOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTA3MTkxMzQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzZiMmY0MjNhOWQzZjFlZDFhZWU0MWY3MjRjZDc5OTZhMTkxNTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoERc4qbhMzUKKdU6WYsaf+ox83MQ
lce/yPkdM2zT+/mzSwF3dwYZhY3b9KDmJE2Et9FuPbsH6XmoEiKuyBTpJTHGYRSz
pJIzY+d2rah8RZxYq4PRy3yZjdOgX401ksPBxnDRStj9fScaY8XAsQjAshjm4Akn
kh47drRJ0+7HScN19aNUDpBFhqYxEsfh4jSEncR5thIUwa5r9TPqDbV9etxHYQSo
B4Vb9V0g4HPctm4V6Ec6tRU09XmidLZPXYn0nU269DNxTdRx6vWnsHKUwmvg8jfo
IxzVQrC2tuCslECUOJfXvRxzf7hOkO3jnDIaMMus/Ml5pGsO6Xciei2X/QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEdrL0I6nT8e0a7kH3JM15lqGRWBMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUjJzdlFqcWRQeDdScnVRZmNrelhtV29aRllFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADOGR6d5VYdQ+ISB58Sm
hwpKcmQQjhwJLniXWBG1xGthsy0yPIPFW44TRIw0+HsovDLwYKwi6sFI6NcYtyEL
/XvINYtN5/dzu2p17u+H/n2y0nfPepPKW32KL4dRn35wnR1cklgyqgCkwsQF25VK
aIwlKU/IxIhcNB+LsBghq30Bg7DQfNGhVuq+O/njd36CZQ30XrVjA57QV4fDB1dN
HqaPNaI1JzC7BKayzCMuLApTy3EYlVSMteYbM38cK3LkE/kAW65WVLQ4uFoavAkt
+kCV6vul+TWM31hdiuUSkb7Sy1Hje2LW2Gf1xoEhOvMofafFiSrbvRj7ZYVw/5uc
Bmw=
-----END CERTIFICATE-----
Generated at Thu Jun 12 01:33:49 2025 by rpki-client