Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fXT107sLgZF1sxZzyn5OEvWvhBE.roa
File: fXT107sLgZF1sxZzyn5OEvWvhBE.roa (raw, json)
Hash identifier: hPppENure6ink05FaOwYIYYtLJ8J1U3tOPXmEf/t71c=
Subject key identifier: 7D:74:F5:D3:BB:0B:81:91:75:B3:16:73:CA:7E:4E:12:F5:AF:84:11
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01848A06111B495610AA08D4A236C31A2194
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fXT107sLgZF1sxZzyn5OEvWvhBE.roa
Signing time: Fri 18 Nov 2022 09:16:03 +0000
ROA not before: Fri 18 Nov 2022 09:16:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:75cf:c8d9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8a:06:11:1b:49:56:10:aa:08:d4:a2:36:c3:1a:21:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 18 09:16:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d74f5d3bb0b819175b31673ca7e4e12f5af8411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5e:46:93:51:90:9f:7a:d8:b8:6a:33:8d:cc:
9e:7f:22:2b:9f:14:3f:9c:12:63:64:4b:45:a1:52:
ec:20:d6:ce:c1:e6:80:a9:7f:e3:00:e5:2d:ce:04:
c4:d9:47:49:78:08:14:a5:ab:14:a4:1c:5b:a7:d9:
75:f9:4d:5c:21:87:fb:44:5b:6b:9a:5e:0e:b9:75:
ea:4e:1b:1c:88:6e:79:b1:e7:b4:a5:ca:93:b5:cc:
0f:a3:aa:f1:1d:f0:02:9a:f2:be:7f:2c:83:b2:1f:
f4:25:7c:c1:d0:86:8e:68:59:97:7e:53:97:0f:24:
ea:41:7f:47:e5:a4:2c:c1:4c:97:5c:39:a8:8b:9d:
23:50:9b:5d:1b:55:32:26:1e:ea:09:d3:1f:cb:42:
14:d5:98:33:8f:1d:a8:c5:a1:d0:50:d3:98:d1:46:
70:a2:b1:8e:e2:5f:6f:38:cb:03:61:65:75:6a:81:
d2:2c:80:d1:04:06:ef:6a:89:a4:93:69:a0:cd:3e:
31:09:35:7a:a5:c3:dd:6d:40:b1:c7:d7:e8:ed:9f:
6f:f8:c1:f2:8a:fe:fa:ae:65:f0:f7:72:a5:68:a8:
b1:cb:73:61:67:9c:1c:7a:16:6c:17:8f:05:b2:95:
3b:f8:f1:90:1e:5d:31:4e:9a:80:14:43:94:34:b5:
14:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:74:F5:D3:BB:0B:81:91:75:B3:16:73:CA:7E:4E:12:F5:AF:84:11
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fXT107sLgZF1sxZzyn5OEvWvhBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:0d:d1:b0:22:51:5a:03:78:d7:c5:6f:47:50:af:2c:49:3c:
e0:5b:e5:97:01:48:aa:a4:c0:6e:f4:f6:0a:3e:5a:21:70:27:
9b:97:cf:42:f5:c1:28:17:9f:2d:b1:a9:6e:f0:fa:d4:75:88:
a6:80:2b:b1:b8:f9:79:cc:b0:96:ba:39:04:2a:bb:b1:cb:66:
e9:e1:8c:76:76:aa:56:0a:93:08:30:53:f2:ac:68:be:da:8c:
99:cd:b5:85:e6:f2:e7:4e:3a:10:c1:87:b3:0f:f4:60:e9:85:
28:15:f4:8d:a0:d6:bb:02:63:fc:7e:8b:83:93:e8:a6:8a:ca:
06:fb:97:0c:03:31:00:86:38:04:05:93:52:30:31:08:a1:23:
70:cb:37:20:1b:26:07:50:20:42:1f:7e:43:e8:21:33:b2:91:
33:27:70:b5:e2:62:70:f2:21:ee:f6:39:25:64:97:e6:b0:71:
a1:a1:79:3e:83:41:21:32:77:5e:08:98:40:b7:cb:1e:7b:13:
6e:96:a0:e5:fc:af:aa:c0:33:d9:1a:6f:eb:68:b1:62:dc:dc:
36:a4:21:87:d6:4e:fe:ae:c7:5f:9f:f2:58:56:11:11:98:c6:
3b:c7:c3:98:ed:80:96:d9:71:c7:2b:1c:35:6a:2f:50:18:be:
e2:a1:f9:29
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYSKBhEbSVYQqgjUojbDGiGUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTE4MDkxNjAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDc0ZjVkM2JiMGI4MTkxNzViMzE2NzNjYTdlNGUxMmY1YWY4NDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhV5Gk1GQn3rYuGozjcyefyIrnxQ/
nBJjZEtFoVLsINbOweaAqX/jAOUtzgTE2UdJeAgUpasUpBxbp9l1+U1cIYf7RFtr
ml4OuXXqThsciG55see0pcqTtcwPo6rxHfACmvK+fyyDsh/0JXzB0IaOaFmXflOX
DyTqQX9H5aQswUyXXDmoi50jUJtdG1UyJh7qCdMfy0IU1Zgzjx2oxaHQUNOY0UZw
orGO4l9vOMsDYWV1aoHSLIDRBAbvaomkk2mgzT4xCTV6pcPdbUCxx9fo7Z9v+MHy
iv76rmXw93KlaKixy3NhZ5wcehZsF48FspU7+PGQHl0xTpqAFEOUNLUULwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFH109dO7C4GRdbMWc8p+ThL1r4QRMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZlhUMTA3c0xnWkYxc3haenluNU9Fdld2aEJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGYN0bAiUVoDeNfFb0dQ
ryxJPOBb5ZcBSKqkwG709go+WiFwJ5uXz0L1wSgXny2xqW7w+tR1iKaAK7G4+XnM
sJa6OQQqu7HLZunhjHZ2qlYKkwgwU/KsaL7ajJnNtYXm8udOOhDBh7MP9GDphSgV
9I2g1rsCY/x+i4OT6KaKygb7lwwDMQCGOAQFk1IwMQihI3DLNyAbJgdQIEIffkPo
ITOykTMncLXiYnDyIe72OSVkl+awcaGheT6DQSEyd14ImEC3yx57E26WoOX8r6rA
M9kab+tosWLc3DakIYfWTv6ux1+f8lhWERGYxjvHw5jtgJbZcccrHDVqL1AYvuKh
+Sk=
-----END CERTIFICATE-----
Generated at Fri Jun 13 14:50:11 2025 by rpki-client