Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/frlSdZakeSdeOWIb-5CCkLHnbuI.roa
File: frlSdZakeSdeOWIb-5CCkLHnbuI.roa (raw, json)
Hash identifier: e9jT4XTXtRg6PMT8DjohDy7uPX3y0B+Ond+xiznZvS8=
Subject key identifier: 7E:B9:52:75:96:A4:79:27:5E:39:62:1B:FB:90:82:90:B1:E7:6E:E2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6FFC4DAC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/frlSdZakeSdeOWIb-5CCkLHnbuI.roa
Signing time: Sat 05 Mar 2022 20:04:51 +0000
ROA not before: Sat 05 Mar 2022 20:04:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:5baf:552d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1878805932 (0x6ffc4dac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 5 20:04:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7eb9527596a479275e39621bfb908290b1e76ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d0:2d:3a:d7:30:a4:65:6a:49:45:85:61:33:
9d:96:c9:2d:48:e1:21:13:aa:a1:25:6a:35:19:f8:
85:29:ad:bb:f9:8b:68:d6:c9:79:a2:f0:2f:64:65:
56:15:9c:64:a1:c1:ba:96:43:ff:68:80:24:fd:09:
72:ce:38:88:b1:28:5b:1a:76:86:d5:5b:b3:ad:d9:
38:d3:b9:ee:a8:b2:54:3d:d5:d8:50:fb:22:e1:82:
8d:11:ee:6b:01:69:92:a7:28:59:97:87:37:99:1f:
b4:38:88:4c:3f:02:11:ce:b8:8e:10:e5:01:6e:0f:
9f:92:92:a0:e2:4d:fb:9b:f4:16:55:cb:a2:a9:e9:
02:3f:4f:f9:0c:5c:20:07:57:69:01:f0:7e:33:85:
3e:51:63:ea:f2:05:b2:01:c2:83:25:6e:72:f4:10:
58:6f:b1:be:7a:55:45:c5:c6:66:09:23:e4:54:d0:
49:22:0a:eb:87:c4:83:c4:1d:69:ea:38:43:4c:c5:
40:6b:a3:73:0b:a3:10:c9:6d:68:84:8f:d7:e4:0d:
8a:18:d2:bd:7c:60:8d:3d:09:93:73:ce:14:ad:f8:
52:73:13:8e:31:ea:e3:df:bb:72:44:65:48:8b:4f:
97:be:f4:26:a7:db:38:96:90:96:cd:de:5d:15:27:
d4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B9:52:75:96:A4:79:27:5E:39:62:1B:FB:90:82:90:B1:E7:6E:E2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/frlSdZakeSdeOWIb-5CCkLHnbuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:01:20:9d:b2:a6:cd:a3:0e:38:53:64:63:39:48:41:39:74:
7a:67:1c:09:50:72:b5:96:54:5e:9b:50:25:cb:ab:75:3b:b7:
2e:3b:79:ab:91:84:5c:a3:f4:b5:0a:a7:d9:f4:99:c7:d8:e1:
33:e6:6f:4b:19:fd:15:9a:02:0b:a8:e2:25:99:55:da:7f:d3:
50:03:93:da:7e:a4:d6:13:05:04:bc:17:02:6d:78:41:2f:a4:
e4:be:98:18:7e:79:dc:6d:08:cf:62:cc:9f:ef:47:ef:06:2a:
1a:57:b0:d8:1d:43:99:29:82:12:36:89:ad:85:b2:3b:ca:bf:
a3:7f:53:43:cb:45:51:8e:9c:2b:8f:c9:3e:48:8a:0e:2d:1f:
34:f8:d2:f9:f8:98:29:a6:70:db:e8:11:10:10:52:1e:9a:76:
24:66:8b:48:25:cf:42:bd:dd:b4:3c:72:e5:d2:28:92:ee:ac:
11:d8:fc:ce:41:ee:9b:4c:12:79:27:f0:8a:29:45:77:17:e9:
12:47:40:7c:d5:3b:6c:93:3f:80:8e:0e:f3:6a:26:d7:01:16:
46:7d:1a:33:25:01:83:91:6e:dd:f2:5e:b3:a8:41:97:e7:fb:
b1:36:57:1e:50:86:1d:74:06:70:3c:4d:3c:29:f3:aa:18:0c:
76:a6:0f:37
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEb/xNrDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMw
NTIwMDQ1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2ViOTUyNzU5NmE0
NzkyNzVlMzk2MjFiZmI5MDgyOTBiMWU3NmVlMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPLQLTrXMKRlaklFhWEznZbJLUjhIROqoSVqNRn4hSmtu/mL
aNbJeaLwL2RlVhWcZKHBupZD/2iAJP0Jcs44iLEoWxp2htVbs63ZONO57qiyVD3V
2FD7IuGCjRHuawFpkqcoWZeHN5kftDiITD8CEc64jhDlAW4Pn5KSoOJN+5v0FlXL
oqnpAj9P+QxcIAdXaQHwfjOFPlFj6vIFsgHCgyVucvQQWG+xvnpVRcXGZgkj5FTQ
SSIK64fEg8Qdaeo4Q0zFQGujcwujEMltaISP1+QNihjSvXxgjT0Jk3POFK34UnMT
jjHq49+7ckRlSItPl770JqfbOJaQls3eXRUn1EcCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBR+uVJ1lqR5J145Yhv7kIKQsedu4jAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L2ZybFNkWmFrZVNkZU9XSWItNUNDa0xIbmJ1SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQA/ASCdsqbNow44U2RjOUhBOXR6ZxwJUHK1llRe
m1Aly6t1O7cuO3mrkYRco/S1CqfZ9JnH2OEz5m9LGf0VmgILqOIlmVXaf9NQA5Pa
fqTWEwUEvBcCbXhBL6TkvpgYfnncbQjPYsyf70fvBioaV7DYHUOZKYISNomthbI7
yr+jf1NDy0VRjpwrj8k+SIoOLR80+NL5+JgppnDb6BEQEFIemnYkZotIJc9Cvd20
PHLl0iiS7qwR2PzOQe6bTBJ5J/CKKUV3F+kSR0B81Ttskz+Ajg7zaibXARZGfRoz
JQGDkW7d8l6zqEGX5/uxNlceUIYddAZwPE08KfOqGAx2pg83
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:46:36 2025 by rpki-client