Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f7Y3uzvej3y7qC5CqEQ-eiXPvHk.roa
File: f7Y3uzvej3y7qC5CqEQ-eiXPvHk.roa (raw, json)
Hash identifier: Yh6ZWszNT652MZ5kwBL4tsdnIeksASPNPoaNcOvsv6Q=
Subject key identifier: 7F:B6:37:BB:3B:DE:8F:7C:BB:A8:2E:42:A8:44:3E:7A:25:CF:BC:79
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01857F0A56318A22E08DD01A4DB2EB24414C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f7Y3uzvej3y7qC5CqEQ-eiXPvHk.roa
Signing time: Wed 04 Jan 2023 23:07:41 +0000
ROA not before: Wed 04 Jan 2023 23:07:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7f:0a:56:31:8a:22:e0:8d:d0:1a:4d:b2:eb:24:41:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 4 23:07:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fb637bb3bde8f7cbba82e42a8443e7a25cfbc79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0d:50:d2:60:06:dd:58:6b:99:86:dd:0e:aa:
9b:62:b8:48:40:00:55:3b:58:3b:d0:db:93:33:7b:
55:e2:13:7f:ac:a3:be:47:33:84:ba:ff:d1:41:43:
70:0b:97:ab:59:51:b0:7b:9b:89:75:da:99:f1:3b:
63:05:2d:c7:3c:4e:76:13:bc:6e:2b:b4:0e:6b:fd:
30:56:a9:1e:7e:51:91:ad:67:91:57:55:48:76:9d:
c9:02:c0:0d:7a:5f:db:71:ac:76:91:29:34:aa:fa:
f4:f9:1b:96:ee:4c:39:d5:d8:88:9c:1d:b6:40:81:
dd:45:45:ac:dd:59:f7:66:c9:3a:2c:2d:9f:a6:14:
62:50:b4:5c:08:49:2b:2d:ce:c0:6d:4e:d0:95:68:
a7:12:5e:cb:77:e3:be:71:6f:11:f6:32:23:e0:32:
c1:66:d3:4d:b8:a3:47:8e:3d:53:58:de:4c:cb:19:
79:06:3b:b3:b4:c7:06:c5:89:bf:f4:b1:2f:89:55:
73:b1:0e:fe:39:80:58:22:9f:16:d5:43:40:f3:e2:
ea:bd:6a:01:da:f6:bf:7b:90:24:c1:00:67:21:85:
01:7c:20:91:d0:87:b3:dc:25:7c:fe:97:b9:b6:42:
7e:05:7c:ba:91:cc:c5:d2:0e:46:db:a6:a3:68:e9:
ae:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B6:37:BB:3B:DE:8F:7C:BB:A8:2E:42:A8:44:3E:7A:25:CF:BC:79
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f7Y3uzvej3y7qC5CqEQ-eiXPvHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:59:34:35:29:0b:d1:3d:09:16:dc:f0:af:75:05:b8:be:ab:
2e:4b:f2:78:22:17:c2:69:cc:43:ee:21:68:0e:b1:fe:7f:7c:
af:ad:44:e8:33:e8:06:cd:a6:9a:5f:d0:2b:3c:12:2c:53:f8:
f3:66:9e:fc:f3:7f:1b:c2:fa:4a:e5:42:99:5b:52:79:06:2e:
62:13:a4:1f:72:af:f9:b4:97:d2:3e:ff:00:b1:69:70:79:12:
76:8a:4a:3e:6d:dc:40:51:5b:de:ac:59:2c:df:02:d5:7f:80:
fe:53:0e:83:a3:a7:64:30:5d:8a:b3:1b:78:e4:15:9e:01:7b:
d9:11:df:4b:44:8f:81:e2:2d:5f:17:71:b2:88:b1:f8:0c:ad:
a6:1f:37:b9:9b:30:1e:2d:b3:28:fc:53:47:e3:91:5a:9a:91:
12:f4:97:b5:ba:9f:59:5c:1a:49:ec:28:d8:47:6c:e4:1d:5a:
fc:84:b1:9b:29:c0:e2:6b:2f:00:3c:f8:c6:6c:e4:d9:80:f1:
eb:44:19:d4:27:9a:6b:7f:7a:71:4f:63:fb:55:6e:62:65:ad:
c5:27:de:76:9e:c6:5c:23:c9:05:61:e2:69:b5:38:8a:e1:5a:
61:d8:a4:ea:89:08:99:6f:b9:e9:da:e7:bc:0a:8c:f7:e3:3d:
91:39:cf:79
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYV/ClYxiiLgjdAaTbLrJEFMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTA0MjMwNzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmI2MzdiYjNiZGU4ZjdjYmJhODJlNDJhODQ0M2U3YTI1Y2ZiYzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7A1Q0mAG3VhrmYbdDqqbYrhIQABV
O1g70NuTM3tV4hN/rKO+RzOEuv/RQUNwC5erWVGwe5uJddqZ8TtjBS3HPE52E7xu
K7QOa/0wVqkeflGRrWeRV1VIdp3JAsANel/bcax2kSk0qvr0+RuW7kw51diInB22
QIHdRUWs3Vn3Zsk6LC2fphRiULRcCEkrLc7AbU7QlWinEl7Ld+O+cW8R9jIj4DLB
ZtNNuKNHjj1TWN5Myxl5BjuztMcGxYm/9LEviVVzsQ7+OYBYIp8W1UNA8+LqvWoB
2va/e5AkwQBnIYUBfCCR0Iez3CV8/pe5tkJ+BXy6kczF0g5G26ajaOmutwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFH+2N7s73o98u6guQqhEPnolz7x5MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZjdZM3V6dmVqM3k3cUM1Q3FFUS1laVhQdkhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACtZNDUpC9E9CRbc8K91
Bbi+qy5L8ngiF8JpzEPuIWgOsf5/fK+tROgz6AbNpppf0Cs8EixT+PNmnvzzfxvC
+krlQplbUnkGLmITpB9yr/m0l9I+/wCxaXB5EnaKSj5t3EBRW96sWSzfAtV/gP5T
DoOjp2QwXYqzG3jkFZ4Be9kR30tEj4HiLV8XcbKIsfgMraYfN7mbMB4tsyj8U0fj
kVqakRL0l7W6n1lcGknsKNhHbOQdWvyEsZspwOJrLwA8+MZs5NmA8etEGdQnmmt/
enFPY/tVbmJlrcUn3naexlwjyQVh4mm1OIrhWmHYpOqJCJlvuena57wKjPfjPZE5
z3k=
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:27:50 2025 by rpki-client