Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W7umsVQHThAQnN9kOHxa7EU5tp4.roa
File: W7umsVQHThAQnN9kOHxa7EU5tp4.roa (raw, json)
Hash identifier: 20RZ6rzfEoLaEriZJSKOkZB79CqNkZIfhkzXyn1Ob8M=
Subject key identifier: 5B:BB:A6:B1:54:07:4E:10:10:9C:DF:64:38:7C:5A:EC:45:39:B6:9E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6645C677
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W7umsVQHThAQnN9kOHxa7EU5tp4.roa
Signing time: Sun 30 Jan 2022 06:12:03 +0000
ROA not before: Sun 30 Jan 2022 06:12:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1715848823 (0x6645c677)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 30 06:12:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bbba6b154074e10109cdf64387c5aec4539b69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:ce:3a:f1:2b:58:88:a4:f9:d3:6f:05:b3:
4e:14:a3:18:a1:80:23:79:f1:2d:47:24:13:6d:da:
b4:84:38:cb:05:71:a9:9d:0a:8d:1b:20:4b:1d:1a:
40:a3:d5:e2:73:4a:1c:45:ab:1a:d7:b4:dd:a4:6b:
14:de:b3:dc:34:82:d8:78:cd:53:20:58:78:25:14:
2c:20:3a:e1:59:29:a9:a8:9f:69:3c:90:2c:a6:7d:
32:52:c1:4e:ca:08:97:79:a3:74:84:74:66:69:62:
f8:6d:6d:9b:16:7e:12:b7:d5:3c:7f:12:3a:fe:56:
d7:06:33:d5:5f:89:43:0a:fc:22:04:84:71:57:66:
ba:04:27:b5:93:eb:e1:86:d2:df:16:b2:f7:08:f0:
54:29:35:1c:05:5f:99:29:df:63:40:16:fb:64:3c:
ad:06:50:d7:7f:b2:54:4b:65:cd:da:21:8b:3d:48:
a2:16:99:a5:d1:0e:fd:2a:f5:97:55:9f:a5:7e:3d:
8d:71:95:a3:dc:03:72:74:51:87:89:b6:61:12:b1:
5a:7c:fc:fb:5b:00:43:b3:e6:3d:48:e2:79:69:7f:
5d:c2:11:94:82:95:56:c8:8e:20:1e:18:4f:91:3d:
84:4c:63:65:f8:73:2a:dc:17:e9:a7:3c:af:ff:3b:
d8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BB:A6:B1:54:07:4E:10:10:9C:DF:64:38:7C:5A:EC:45:39:B6:9E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W7umsVQHThAQnN9kOHxa7EU5tp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:b9:d6:e7:33:81:7a:7c:fc:b7:50:d5:1e:a2:74:07:27:38:
71:ae:51:70:ee:3f:85:a1:fd:e6:ff:58:e1:ce:cd:b2:76:e9:
6f:da:19:6f:e8:e6:1e:60:0d:55:92:fb:6b:03:29:ee:72:28:
73:c0:9c:c3:0d:7a:2f:74:6a:26:e8:f8:59:11:6b:76:81:cc:
93:c9:73:42:93:b9:ad:e5:53:01:97:5e:23:c3:6b:c0:93:7e:
06:01:db:b0:d4:14:0b:11:ef:00:e4:00:5f:99:03:3e:85:f1:
b2:93:32:a6:3f:00:64:6a:9d:17:50:8d:bf:62:bf:01:3a:21:
1b:5f:1f:b5:dd:b9:35:8a:a5:f4:dc:c7:c1:8f:f0:02:21:79:
21:f6:74:2f:79:44:17:36:b0:4d:05:1d:25:ec:79:82:7f:75:
a9:54:1d:31:ef:94:f8:b4:39:da:66:9c:aa:1e:2a:dc:bf:cb:
75:09:67:f2:db:ae:f2:8f:40:52:92:b0:b4:42:59:91:cb:87:
62:58:07:02:8d:f9:63:5c:28:01:28:8f:c2:1b:db:2c:a1:38:
49:44:fb:bd:39:3c:bf:c2:14:6e:d1:47:a8:46:16:f6:05:26:
bf:f2:d2:03:31:dc:d6:bf:96:e1:e1:55:e3:31:cc:6f:f4:89:
97:3e:9b:df
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEZkXGdzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDEz
MDA2MTIwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWJiYmE2YjE1NDA3
NGUxMDEwOWNkZjY0Mzg3YzVhZWM0NTM5YjY5ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALtyzjrxK1iIpPnTbwWzThSjGKGAI3nxLUckE23atIQ4ywVx
qZ0KjRsgSx0aQKPV4nNKHEWrGte03aRrFN6z3DSC2HjNUyBYeCUULCA64Vkpqaif
aTyQLKZ9MlLBTsoIl3mjdIR0Zmli+G1tmxZ+ErfVPH8SOv5W1wYz1V+JQwr8IgSE
cVdmugQntZPr4YbS3xay9wjwVCk1HAVfmSnfY0AW+2Q8rQZQ13+yVEtlzdohiz1I
ohaZpdEO/Sr1l1WfpX49jXGVo9wDcnRRh4m2YRKxWnz8+1sAQ7PmPUjieWl/XcIR
lIKVVsiOIB4YT5E9hExjZfhzKtwX6ac8r/872PECAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRbu6axVAdOEBCc32Q4fFrsRTm2njAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L1c3dW1zVlFIVGhBUW5OOWtPSHhhN0VVNXRwNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQB0udbnM4F6fPy3UNUeonQHJzhxrlFw7j+Fof3m
/1jhzs2ydulv2hlv6OYeYA1VkvtrAynucihzwJzDDXovdGom6PhZEWt2gcyTyXNC
k7mt5VMBl14jw2vAk34GAduw1BQLEe8A5ABfmQM+hfGykzKmPwBkap0XUI2/Yr8B
OiEbXx+13bk1iqX03MfBj/ACIXkh9nQveUQXNrBNBR0l7HmCf3WpVB0x75T4tDna
ZpyqHircv8t1CWfy267yj0BSkrC0QlmRy4diWAcCjfljXCgBKI/CG9ssoThJRPu9
OTy/whRu0UeoRhb2BSa/8tIDMdzWv5bh4VXjMcxv9ImXPpvf
-----END CERTIFICATE-----
Generated at Wed Jun 11 01:42:52 2025 by rpki-client