Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T7bdircwl1-b5s__Pzz6mW6EFgw.roa
File: T7bdircwl1-b5s__Pzz6mW6EFgw.roa (raw, json)
Hash identifier: XJ+rmF7I11sZtOhGa06aQUp8ibyBPxW5YViOId4wAUU=
Subject key identifier: 4F:B6:DD:8A:B7:30:97:5F:9B:E6:CF:FF:3F:3C:FA:99:6E:84:16:0C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018310CC66EEC243A4DEDE97B83F7215FEA5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T7bdircwl1-b5s__Pzz6mW6EFgw.roa
Signing time: Tue 06 Sep 2022 03:16:14 +0000
ROA not before: Tue 06 Sep 2022 03:16:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:10:cc:66:ee:c2:43:a4:de:de:97:b8:3f:72:15:fe:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 6 03:16:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4fb6dd8ab730975f9be6cfff3f3cfa996e84160c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7e:4a:88:4e:86:0d:cd:ec:77:13:29:bb:54:
9a:2b:64:ad:b7:c1:9e:60:81:74:83:c0:58:9c:be:
c5:c8:18:df:57:69:1c:82:83:62:be:ac:f6:2c:78:
50:0b:01:d9:5e:44:a5:c1:3d:9f:4e:87:d8:b6:e0:
c5:66:e2:db:7f:67:dc:c8:c1:ba:36:6f:70:ef:f4:
86:1c:1f:30:14:df:1c:82:c0:d4:4b:3d:85:70:4e:
96:54:66:07:5e:aa:a8:23:47:7a:eb:38:c4:0c:e1:
8b:c0:d4:14:71:77:aa:ba:da:27:6d:f2:a9:1a:3d:
80:f3:e0:4e:01:72:bb:71:76:39:3d:64:03:41:74:
67:11:f2:1a:e4:e9:08:7d:94:b7:08:62:fd:bd:87:
a9:9b:81:07:d8:cd:8b:a8:bb:e6:62:03:32:47:6f:
04:f7:dd:d0:6c:d0:a9:63:f9:11:44:fa:e6:0e:8c:
28:78:76:2d:66:af:ab:cd:ed:29:0a:23:e7:24:8f:
76:49:4a:aa:fa:c4:e1:d4:f8:0e:70:61:10:10:15:
1a:9e:34:79:53:63:0b:fd:e0:03:a3:d9:8e:68:a8:
be:1e:e5:f0:f7:62:58:ba:92:24:f6:dc:c4:38:07:
74:89:0f:cd:9e:e6:8d:71:a7:17:1e:86:ab:27:0b:
68:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B6:DD:8A:B7:30:97:5F:9B:E6:CF:FF:3F:3C:FA:99:6E:84:16:0C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T7bdircwl1-b5s__Pzz6mW6EFgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:c0:c7:e3:e1:5b:22:e1:77:84:bf:59:ae:d4:62:b4:d0:0f:
15:96:96:07:bb:88:6b:f7:97:ca:2b:fd:04:6f:0c:b3:03:d2:
24:fe:0e:42:27:7a:e1:20:4a:10:5b:14:31:4a:b7:39:0b:0c:
87:53:e2:2d:16:43:1b:ea:21:f8:32:d3:fc:88:74:f4:d3:7f:
b6:32:47:80:ed:52:27:22:a2:cd:56:c8:ac:7c:b6:39:99:1a:
c4:93:26:33:96:50:7d:c7:65:95:bd:47:a4:b3:64:97:f0:c1:
f3:2c:0c:98:04:8c:10:40:84:ed:67:e1:df:e7:f4:e4:d5:dd:
f5:eb:08:1d:fc:70:44:a1:ba:e9:90:4e:83:12:60:eb:a6:4e:
b0:a4:f8:59:22:9f:df:be:54:d2:b3:b1:e6:81:e7:a6:b3:cd:
ae:c5:87:3c:5d:2f:a2:c0:cf:03:0b:46:7d:84:4d:67:bf:be:
05:f7:2d:06:12:13:80:94:f7:9a:c1:8b:ec:9e:d0:77:98:99:
42:1f:e7:d9:ab:22:ee:38:f4:94:16:92:3f:ea:41:65:c3:6c:
e0:c2:58:f2:73:22:62:ed:c1:cd:f5:1c:a4:22:71:8d:33:cc:
ee:7f:9d:a1:a1:4d:fd:5f:b8:54:1e:68:e9:b4:90:23:f1:5c:
6e:6c:e4:3c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYMQzGbuwkOk3t6XuD9yFf6lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTA2MDMxNjE0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmI2ZGQ4YWI3MzA5NzVmOWJlNmNmZmYzZjNjZmE5OTZlODQxNjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA335KiE6GDc3sdxMpu1SaK2Stt8Ge
YIF0g8BYnL7FyBjfV2kcgoNivqz2LHhQCwHZXkSlwT2fTofYtuDFZuLbf2fcyMG6
Nm9w7/SGHB8wFN8cgsDUSz2FcE6WVGYHXqqoI0d66zjEDOGLwNQUcXequtonbfKp
Gj2A8+BOAXK7cXY5PWQDQXRnEfIa5OkIfZS3CGL9vYepm4EH2M2LqLvmYgMyR28E
993QbNCpY/kRRPrmDowoeHYtZq+rze0pCiPnJI92SUqq+sTh1PgOcGEQEBUanjR5
U2ML/eADo9mOaKi+HuXw92JYupIk9tzEOAd0iQ/NnuaNcacXHoarJwtoaQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFE+23Yq3MJdfm+bP/z88+pluhBYMMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVDdiZGlyY3dsMS1iNXNfX1B6ejZtVzZFRmd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACTAx+PhWyLhd4S/Wa7U
YrTQDxWWlge7iGv3l8or/QRvDLMD0iT+DkIneuEgShBbFDFKtzkLDIdT4i0WQxvq
Ifgy0/yIdPTTf7YyR4DtUicios1WyKx8tjmZGsSTJjOWUH3HZZW9R6SzZJfwwfMs
DJgEjBBAhO1n4d/n9OTV3fXrCB38cEShuumQToMSYOumTrCk+Fkin9++VNKzseaB
56azza7FhzxdL6LAzwMLRn2ETWe/vgX3LQYSE4CU95rBi+ye0HeYmUIf59mrIu44
9JQWkj/qQWXDbODCWPJzImLtwc31HKQicY0zzO5/naGhTf1fuFQeaOm0kCPxXG5s
5Dw=
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:11:42 2025 by rpki-client