Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fHTQ2wjI1IKtvgmgQBL1lvUJcFM.roa
File: fHTQ2wjI1IKtvgmgQBL1lvUJcFM.roa (raw, json)
Hash identifier: IeyirogtFzkWpn0Vy0SWpUhgTdtipWEZHzelTWrIe1o=
Subject key identifier: 7C:74:D0:DB:08:C8:D4:82:AD:BE:09:A0:40:12:F5:96:F5:09:70:53
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899A7D8F8A7AB502703A873296FE51208B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fHTQ2wjI1IKtvgmgQBL1lvUJcFM.roa
Signing time: Fri 28 Jul 2023 03:14:27 +0000
ROA not before: Fri 28 Jul 2023 03:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9a:7d:8f:8a:7a:b5:02:70:3a:87:32:96:fe:51:20:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 03:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c74d0db08c8d482adbe09a04012f596f5097053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f0:df:1c:1b:e3:c6:51:a9:31:8e:08:de:ff:
fd:54:19:04:cc:9d:6d:3e:84:37:c4:c2:bd:1d:a1:
50:e5:e6:87:89:b3:13:17:85:56:84:02:df:91:99:
b4:61:5a:ec:e7:35:f5:43:6d:08:6b:9e:32:4c:db:
c8:e3:49:34:03:2b:d0:88:bf:cb:ee:ad:ea:58:fa:
8a:0a:22:cd:a0:dc:c0:40:6f:93:95:96:b9:f5:c3:
f2:f6:52:6d:17:6f:df:b0:cd:7c:ab:2d:83:c2:bd:
9f:2a:e6:a7:a7:0e:42:1e:be:a6:bf:74:53:d0:60:
30:77:80:74:c0:18:6a:4e:31:75:52:68:d0:c9:0a:
a3:d5:3d:3e:5f:c8:d9:25:48:1d:6b:71:b6:57:ea:
63:53:6d:3d:c9:eb:6f:4d:b2:48:28:20:8b:bb:ec:
c4:da:75:73:bf:31:fc:d1:70:bc:5a:a4:b4:63:f7:
30:c5:e2:56:8c:29:0d:9a:30:0d:dd:25:6f:a2:f3:
6e:3a:2d:06:5b:dd:eb:ff:d0:ef:5b:c5:21:23:80:
f0:e4:d7:e1:87:83:87:03:8f:30:18:6e:9f:22:a7:
37:4b:d2:ff:5f:51:a0:5a:12:05:62:8b:4a:e4:09:
84:21:b5:02:d1:79:df:d1:c2:cf:a2:ca:c4:5f:1e:
9e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:74:D0:DB:08:C8:D4:82:AD:BE:09:A0:40:12:F5:96:F5:09:70:53
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fHTQ2wjI1IKtvgmgQBL1lvUJcFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:72:0c:88:81:c4:9d:bd:ac:61:41:0a:23:60:75:96:e5:ee:
2f:8d:05:de:5b:ea:b4:a1:49:4a:07:5e:e3:3e:03:f8:b1:6e:
c7:0e:7c:3b:c4:cf:4a:10:22:9f:1a:bc:3e:6b:db:9a:e3:70:
da:5e:a9:0b:a1:40:87:d4:e6:2b:20:f1:91:cb:f1:5a:af:29:
cd:6c:41:17:61:93:f1:6b:ef:ed:88:56:77:3d:03:66:f8:ca:
85:f7:21:5d:85:63:da:8b:3f:51:4b:d5:fa:ef:b7:03:4f:5b:
5c:bc:3f:96:a1:f5:27:ef:7e:01:f8:e0:dc:e9:7b:7e:db:bf:
c4:73:7e:02:a6:05:6b:d9:4d:98:22:e2:7b:ed:46:0a:20:bd:
15:6b:08:1f:66:dd:a5:fc:80:29:90:c7:64:76:9f:5e:58:30:
57:f0:ca:1a:d4:e8:9e:ab:91:e1:e8:7b:1c:df:51:ca:7a:c0:
28:1c:59:e4:0c:8d:06:40:76:96:59:1e:f0:96:a6:1d:35:f4:
12:bf:14:d9:fd:87:74:f1:00:7f:d9:61:e2:60:2c:c1:84:f5:
b6:4b:9f:5a:2c:4c:9d:a8:60:13:35:49:e2:a9:6f:b4:ec:89:
b7:ad:af:38:5b:87:4e:51:af:c8:37:1a:6a:1d:4b:88:cb:4f:
82:20:5e:84
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmafY+KerUCcDqHMpb+USCLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzI4MDMxNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Yzc0ZDBkYjA4YzhkNDgyYWRiZTA5YTA0MDEyZjU5NmY1MDk3MDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfDfHBvjxlGpMY4I3v/9VBkEzJ1t
PoQ3xMK9HaFQ5eaHibMTF4VWhALfkZm0YVrs5zX1Q20Ia54yTNvI40k0AyvQiL/L
7q3qWPqKCiLNoNzAQG+TlZa59cPy9lJtF2/fsM18qy2Dwr2fKuanpw5CHr6mv3RT
0GAwd4B0wBhqTjF1UmjQyQqj1T0+X8jZJUgda3G2V+pjU209yetvTbJIKCCLu+zE
2nVzvzH80XC8WqS0Y/cwxeJWjCkNmjAN3SVvovNuOi0GW93r/9DvW8UhI4Dw5Nfh
h4OHA48wGG6fIqc3S9L/X1GgWhIFYotK5AmEIbUC0Xnf0cLPosrEXx6eHQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHx00NsIyNSCrb4JoEAS9Zb1CXBTMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZkhUUTJ3akkxSUt0dmdtZ1FCTDFsdlVKY0ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGJyDIiBxJ29rGFBCiNg
dZbl7i+NBd5b6rShSUoHXuM+A/ixbscOfDvEz0oQIp8avD5r25rjcNpeqQuhQIfU
5isg8ZHL8VqvKc1sQRdhk/Fr7+2IVnc9A2b4yoX3IV2FY9qLP1FL1frvtwNPW1y8
P5ah9SfvfgH44Nzpe37bv8RzfgKmBWvZTZgi4nvtRgogvRVrCB9m3aX8gCmQx2R2
n15YMFfwyhrU6J6rkeHoexzfUcp6wCgcWeQMjQZAdpZZHvCWph019BK/FNn9h3Tx
AH/ZYeJgLMGE9bZLn1osTJ2oYBM1SeKpb7Tsibetrzhbh05Rr8g3GmodS4jLT4Ig
XoQ=
-----END CERTIFICATE-----
Generated at Mon Jun 9 13:41:12 2025 by rpki-client