Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U7xabZOS0B12k8ZVhpmXyLmvhaA.roa
File: U7xabZOS0B12k8ZVhpmXyLmvhaA.roa (raw, json)
Hash identifier: 5MAq44T2N27ahXKcSfIzRmGmTDrsZF4b+CM+MeRy8fY=
Subject key identifier: 53:BC:5A:6D:93:92:D0:1D:76:93:C6:55:86:99:97:C8:B9:AF:85:A0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018265FD1E1EAD2C1E638757EC1F769B270B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U7xabZOS0B12k8ZVhpmXyLmvhaA.roa
Signing time: Wed 03 Aug 2022 23:14:23 +0000
ROA not before: Wed 03 Aug 2022 23:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:65:fd:1e:1e:ad:2c:1e:63:87:57:ec:1f:76:9b:27:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 23:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53bc5a6d9392d01d7693c655869997c8b9af85a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:df:93:75:cb:2c:4b:03:6b:e0:e0:81:79:43:
91:86:11:c7:a0:d2:ad:c7:ae:16:2f:45:82:ab:53:
98:3a:c0:bf:13:1e:f5:eb:66:2c:dc:73:38:84:f6:
ad:de:75:49:9d:6e:68:c2:7b:e9:9c:6a:82:6f:21:
e9:0f:a1:de:aa:df:16:73:c8:36:fc:34:b9:ff:57:
a2:57:31:4c:c5:f5:75:b8:43:8b:83:33:2c:d9:53:
00:db:84:53:11:9e:81:fb:80:07:f3:71:7c:4f:6b:
c5:2b:2c:45:1c:3a:d1:fd:c7:01:12:c3:54:6b:dc:
8e:54:59:d3:ff:e1:72:9f:92:50:5d:41:65:fb:c5:
9e:e9:85:99:0c:81:45:e3:ae:ca:f1:36:1e:ac:1f:
96:05:b6:d7:fc:b2:db:31:17:4a:85:fb:83:c0:97:
c4:c2:ed:f1:80:f1:f8:5d:b0:66:ab:e9:fd:4e:44:
dc:1d:8f:6f:7f:d6:3a:8d:11:43:fa:0d:0f:ee:04:
da:96:26:27:25:cc:40:95:47:10:3f:fd:e6:28:3d:
40:6d:c6:fe:34:26:39:c0:f5:76:fe:1f:73:8f:1f:
0a:94:28:08:37:78:96:03:e0:8c:4d:7e:5e:b7:0f:
1e:b2:87:8d:a9:bc:46:59:c4:a1:8c:01:a9:95:83:
9b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BC:5A:6D:93:92:D0:1D:76:93:C6:55:86:99:97:C8:B9:AF:85:A0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U7xabZOS0B12k8ZVhpmXyLmvhaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:98:f9:54:a2:50:41:82:4c:f7:19:e6:d7:49:a2:3e:c7:cc:
ef:3b:1e:d8:5a:bc:da:0e:d0:c1:25:e5:00:1a:a5:76:c5:c2:
4b:f7:3c:2f:45:7d:5f:b2:3f:51:c9:78:d5:47:4a:a2:c0:84:
70:d2:b4:db:bb:2d:9e:02:84:90:5e:77:03:6b:13:bc:4b:19:
2e:5f:ec:e1:37:97:bc:ba:45:a4:6f:ec:fd:db:4b:2e:11:7f:
aa:ac:81:e1:5b:2c:f0:7f:f1:fd:a1:76:9d:7d:67:63:8d:0d:
4e:ce:55:9e:2b:6f:1e:45:36:75:a2:4d:79:e6:60:c8:44:d2:
6c:14:f6:61:f3:df:16:8e:07:ca:81:52:38:b4:bb:3b:ee:ff:
f5:52:db:20:be:94:7e:44:14:08:96:28:64:24:10:f0:bb:30:
a4:4b:54:03:1c:87:cf:80:0b:3a:57:de:58:49:8a:25:8c:17:
2b:ca:c7:88:a9:f0:21:70:ab:f3:a2:b8:ca:78:69:04:51:52:
b1:c9:d0:e6:5a:cd:c8:f1:50:9e:5b:c8:4d:7d:94:73:db:e8:
b5:30:47:44:83:bd:18:69:61:1b:d0:4c:25:5e:98:ad:f0:4d:
ac:2b:8f:4e:15:9d:38:6b:e2:ae:c0:e0:10:99:55:5c:14:fb:
1c:f0:87:bf
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYJl/R4erSweY4dX7B92mycLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODAzMjMxNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2JjNWE2ZDkzOTJkMDFkNzY5M2M2NTU4Njk5OTdjOGI5YWY4NWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29+TdcssSwNr4OCBeUORhhHHoNKt
x64WL0WCq1OYOsC/Ex7162Ys3HM4hPat3nVJnW5ownvpnGqCbyHpD6Heqt8Wc8g2
/DS5/1eiVzFMxfV1uEOLgzMs2VMA24RTEZ6B+4AH83F8T2vFKyxFHDrR/ccBEsNU
a9yOVFnT/+Fyn5JQXUFl+8We6YWZDIFF467K8TYerB+WBbbX/LLbMRdKhfuDwJfE
wu3xgPH4XbBmq+n9TkTcHY9vf9Y6jRFD+g0P7gTaliYnJcxAlUcQP/3mKD1Abcb+
NCY5wPV2/h9zjx8KlCgIN3iWA+CMTX5etw8esoeNqbxGWcShjAGplYObbQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFO8Wm2TktAddpPGVYaZl8i5r4WgMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVTd4YWJaT1MwQjEyazhaVmhwbVh5TG12aGFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGCY+VSiUEGCTPcZ5tdJ
oj7HzO87HthavNoO0MEl5QAapXbFwkv3PC9FfV+yP1HJeNVHSqLAhHDStNu7LZ4C
hJBedwNrE7xLGS5f7OE3l7y6RaRv7P3bSy4Rf6qsgeFbLPB/8f2hdp19Z2ONDU7O
VZ4rbx5FNnWiTXnmYMhE0mwU9mHz3xaOB8qBUji0uzvu//VS2yC+lH5EFAiWKGQk
EPC7MKRLVAMch8+ACzpX3lhJiiWMFyvKx4ip8CFwq/OiuMp4aQRRUrHJ0OZazcjx
UJ5byE19lHPb6LUwR0SDvRhpYRvQTCVemK3wTawrj04VnThr4q7A4BCZVVwU+xzw
h78=
-----END CERTIFICATE-----
Generated at Wed Jun 11 11:09:28 2025 by rpki-client