Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_mE3JVmbp-K6o4yXtZ6oBogC2gU.roa
File: _mE3JVmbp-K6o4yXtZ6oBogC2gU.roa (raw, json)
Hash identifier: 2TWYCSMlSyAU4mTx1qKN0n57d1pPX0JG5+c+U9i8vmI=
Subject key identifier: FE:61:37:25:59:9B:A7:E2:BA:A3:8C:97:B5:9E:A8:06:88:02:DA:05
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7117F505
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_mE3JVmbp-K6o4yXtZ6oBogC2gU.roa
Signing time: Wed 09 Mar 2022 17:09:49 +0000
ROA not before: Wed 09 Mar 2022 17:09:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1897395461 (0x7117f505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 9 17:09:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe613725599ba7e2baa38c97b59ea8068802da05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:88:9b:22:99:5b:33:8f:7e:15:8d:7a:16:5a:
e7:a7:55:e4:21:dc:e4:a7:35:07:92:36:a9:f0:cb:
c5:dc:f2:8d:cb:6b:f5:1f:4a:45:ff:fb:1c:6e:d3:
96:ce:6e:ec:e5:65:5f:9b:88:1f:e3:25:3f:33:c9:
05:6f:05:70:cf:28:dd:ea:d9:39:f4:48:3b:8d:f6:
5c:01:1e:5f:c8:94:e5:fd:8d:76:ef:6b:b1:80:8e:
6e:5f:54:3c:11:2c:15:97:1a:5b:03:57:bc:96:b8:
9e:85:6d:59:2f:fa:a9:86:0a:f7:81:1a:d2:df:12:
7f:3d:55:c7:6d:55:2d:08:83:7e:97:ca:97:86:24:
06:6e:8e:98:7b:4b:d3:5b:6a:68:4f:28:23:65:0b:
8d:d1:52:a5:e4:50:31:e7:e1:44:5d:a3:fb:b9:f4:
88:25:6b:57:8f:4c:57:9f:38:68:a7:e0:85:de:39:
73:39:49:3e:7b:a3:af:b3:f9:2b:08:21:08:42:ea:
26:e8:5d:15:b1:ae:98:be:02:b9:f9:35:1b:c1:0f:
78:54:71:36:de:ab:fa:b7:5f:a2:63:8f:79:70:00:
f5:26:86:4a:c1:ad:8d:16:03:b7:cd:16:15:1c:55:
b8:b2:c5:4a:11:ab:7b:03:f0:e6:98:f3:be:44:c6:
19:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:61:37:25:59:9B:A7:E2:BA:A3:8C:97:B5:9E:A8:06:88:02:DA:05
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_mE3JVmbp-K6o4yXtZ6oBogC2gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:c0:7a:a4:17:a3:ab:a3:37:c6:74:d8:fd:60:4c:fa:82:ff:
6e:ac:b9:df:1a:d3:c6:b1:f4:a5:8f:f1:60:ae:da:c5:8f:4f:
07:d3:e8:58:58:f0:c7:77:cf:66:fd:ae:70:d5:59:49:cf:77:
79:fe:c2:65:9f:73:12:c8:77:44:e1:58:60:85:17:0e:d1:bb:
ac:9d:2b:79:2d:79:5a:50:dd:7c:ac:66:1a:30:33:b7:e0:1d:
b3:56:29:ea:d9:52:9b:b1:6b:c6:07:d1:d5:4f:1a:04:8e:51:
1d:99:3d:da:ba:27:00:0f:1e:4e:0b:f2:4b:8c:cb:1e:81:ce:
33:c5:0e:37:0c:90:24:a2:6c:51:10:d3:43:74:08:fe:c5:d6:
01:8c:5b:1e:70:3c:00:c4:1e:42:f7:5d:db:86:74:82:e4:49:
8d:37:52:ca:f5:a9:97:42:43:1f:a9:93:fd:1d:a0:de:c2:3c:
ee:fc:27:7d:44:93:88:fd:14:68:dd:14:f7:65:63:6b:b0:a9:
6f:93:7e:92:90:cf:a6:d4:50:0c:ca:96:ac:97:23:13:c1:40:
a2:34:90:88:ac:66:69:de:04:60:f1:9c:5f:7f:83:d8:e9:70:
0d:da:d7:e6:9d:3d:94:f4:f0:48:09:02:37:50:4e:01:e6:08:
e2:2e:14:6a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEcRf1BTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMw
OTE3MDk0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmU2MTM3MjU1OTli
YTdlMmJhYTM4Yzk3YjU5ZWE4MDY4ODAyZGEwNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOaImyKZWzOPfhWNehZa56dV5CHc5Kc1B5I2qfDLxdzyjctr
9R9KRf/7HG7Tls5u7OVlX5uIH+MlPzPJBW8FcM8o3erZOfRIO432XAEeX8iU5f2N
du9rsYCObl9UPBEsFZcaWwNXvJa4noVtWS/6qYYK94Ea0t8Sfz1Vx21VLQiDfpfK
l4YkBm6OmHtL01tqaE8oI2ULjdFSpeRQMefhRF2j+7n0iCVrV49MV584aKfghd45
czlJPnujr7P5KwghCELqJuhdFbGumL4Cufk1G8EPeFRxNt6r+rdfomOPeXAA9SaG
SsGtjRYDt80WFRxVuLLFShGrewPw5pjzvkTGGXUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBT+YTclWZun4rqjjJe1nqgGiALaBTAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L19tRTNKVm1icC1LNm80eVh0WjZvQm9nQzJnVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQBswHqkF6OrozfGdNj9YEz6gv9urLnfGtPGsfSl
j/FgrtrFj08H0+hYWPDHd89m/a5w1VlJz3d5/sJln3MSyHdE4VhghRcO0busnSt5
LXlaUN18rGYaMDO34B2zVinq2VKbsWvGB9HVTxoEjlEdmT3auicADx5OC/JLjMse
gc4zxQ43DJAkomxRENNDdAj+xdYBjFsecDwAxB5C913bhnSC5EmNN1LK9amXQkMf
qZP9HaDewjzu/Cd9RJOI/RRo3RT3ZWNrsKlvk36SkM+m1FAMypaslyMTwUCiNJCI
rGZp3gRg8Zxff4PY6XAN2tfmnT2U9PBICQI3UE4B5gjiLhRq
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:17:42 2025 by rpki-client