Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fPlmMCHsBUnCRnHMFCmMFcVKGF4.roa
File: fPlmMCHsBUnCRnHMFCmMFcVKGF4.roa (raw, json)
Hash identifier: wXArepOZAikA22zu603gAFprb1fo9QadcvSdCx6f14k=
Subject key identifier: 7C:F9:66:30:21:EC:05:49:C2:46:71:CC:14:29:8C:15:C5:4A:18:5E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6D4707A2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fPlmMCHsBUnCRnHMFCmMFcVKGF4.roa
Signing time: Thu 24 Feb 2022 09:04:47 +0000
ROA not before: Thu 24 Feb 2022 09:04:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64:ffff:0:17f:2af9:c750/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1833371554 (0x6d4707a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 24 09:04:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7cf9663021ec0549c24671cc14298c15c54a185e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0e:37:24:f7:39:95:f4:0f:b9:ff:4f:52:30:
22:44:53:ed:05:53:b9:fa:09:ef:25:a6:d1:17:09:
d1:0e:94:f0:21:6b:87:ad:77:75:01:bb:12:9e:cc:
4d:dc:e1:0b:4d:74:29:2d:5d:c1:4d:d4:35:c6:79:
98:1e:7a:35:54:23:3d:fb:66:17:21:07:77:41:c9:
df:12:e1:5b:9f:68:f9:e2:ff:bd:0d:2b:29:0a:64:
aa:2c:09:23:9c:ce:06:34:d8:6e:68:22:bb:78:5b:
a1:8c:61:71:7c:b8:61:67:1b:b8:7d:0b:94:20:1a:
58:dd:e9:f1:6a:b0:c7:f0:f8:29:06:6d:98:6d:f0:
72:14:14:44:d9:bd:01:76:34:fe:af:a4:44:e7:6a:
16:56:d5:3d:62:52:16:de:ee:b5:8a:a9:7b:0e:9f:
65:87:c3:80:5a:b4:03:c4:1b:26:78:5f:ab:c3:5c:
5c:1d:7b:31:2a:f8:6c:d6:d1:b6:6a:69:2b:5b:bc:
19:33:6c:ec:da:31:6c:fe:34:88:8c:00:a8:56:cb:
bc:27:11:20:e3:3d:2c:d3:c3:28:31:a9:1c:7c:7b:
4a:fc:b0:73:a1:a3:72:cf:4e:bd:46:68:7f:ae:9b:
df:0f:d5:0f:13:7a:a0:81:94:c4:3c:67:d3:c9:95:
79:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F9:66:30:21:EC:05:49:C2:46:71:CC:14:29:8C:15:C5:4A:18:5E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fPlmMCHsBUnCRnHMFCmMFcVKGF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:dd:59:cd:2c:38:de:0c:f2:e2:2c:58:92:06:a0:2c:8d:e2:
79:e2:5d:98:0d:df:87:3f:ae:a3:11:6e:0c:c6:a4:86:4a:aa:
7b:0d:26:1b:2a:d9:74:2e:d3:c2:79:a6:c3:89:98:03:73:16:
46:89:d8:64:98:a9:46:a6:41:62:d7:72:9a:ff:22:e5:4f:aa:
ab:38:d3:01:e8:30:80:18:9e:b8:13:9c:fc:bd:9e:43:9f:57:
af:bc:34:17:56:92:5b:4d:98:61:42:2d:c0:cd:22:be:89:b1:
15:b5:27:ad:c0:6d:34:d1:ba:e1:fe:b4:8a:a8:5a:1e:78:19:
00:e2:68:17:bb:b0:89:63:f6:62:7b:c3:66:62:cb:b5:0b:de:
89:26:e2:64:26:6d:f8:01:f9:28:41:51:61:f9:76:5d:3c:f0:
af:17:aa:87:c3:cb:df:ab:76:a5:b8:8f:b3:ab:d3:b5:ae:33:
04:01:4a:63:46:3e:8c:2e:b2:87:da:49:8c:6c:76:6f:bc:d8:
70:1e:39:76:17:48:9f:d1:61:ea:d3:1c:00:a6:64:de:67:38:
92:c4:d7:ba:2e:4f:18:f0:a2:78:7c:30:cd:51:0d:da:a0:52:
07:17:51:c1:9e:a6:e0:48:0d:f3:b6:1f:c0:9f:5b:bf:70:ec:
21:a7:2c:a5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEbUcHojANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIy
NDA5MDQ0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2NmOTY2MzAyMWVj
MDU0OWMyNDY3MWNjMTQyOThjMTVjNTRhMTg1ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANIONyT3OZX0D7n/T1IwIkRT7QVTufoJ7yWm0RcJ0Q6U8CFr
h613dQG7Ep7MTdzhC010KS1dwU3UNcZ5mB56NVQjPftmFyEHd0HJ3xLhW59o+eL/
vQ0rKQpkqiwJI5zOBjTYbmgiu3hboYxhcXy4YWcbuH0LlCAaWN3p8Wqwx/D4KQZt
mG3wchQURNm9AXY0/q+kROdqFlbVPWJSFt7utYqpew6fZYfDgFq0A8QbJnhfq8Nc
XB17MSr4bNbRtmppK1u8GTNs7NoxbP40iIwAqFbLvCcRIOM9LNPDKDGpHHx7Svyw
c6Gjcs9OvUZof66b3w/VDxN6oIGUxDxn08mVeWUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBR8+WYwIewFScJGccwUKYwVxUoYXjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L2ZQbG1NQ0hzQlVuQ1JuSE1GQ21NRmNWS0dGNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCx3VnNLDjeDPLiLFiSBqAsjeJ54l2YDd+HP66j
EW4MxqSGSqp7DSYbKtl0LtPCeabDiZgDcxZGidhkmKlGpkFi13Ka/yLlT6qrONMB
6DCAGJ64E5z8vZ5Dn1evvDQXVpJbTZhhQi3AzSK+ibEVtSetwG000brh/rSKqFoe
eBkA4mgXu7CJY/Zie8NmYsu1C96JJuJkJm34AfkoQVFh+XZdPPCvF6qHw8vfq3al
uI+zq9O1rjMEAUpjRj6MLrKH2kmMbHZvvNhwHjl2F0if0WHq0xwApmTeZziSxNe6
Lk8Y8KJ4fDDNUQ3aoFIHF1HBnqbgSA3zth/An1u/cOwhpyyl
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:44 2025 by rpki-client