Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iRr5_xDIA-niUGWrhuG4bDIEIQg.roa
File: iRr5_xDIA-niUGWrhuG4bDIEIQg.roa (raw, json)
Hash identifier: nDIoz8omQVJmErTYTsS4dYBXMvtyAILc3mpREoOdSus=
Subject key identifier: 89:1A:F9:FF:10:C8:03:E9:E2:50:65:AB:86:E1:B8:6C:32:04:21:08
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7EF5C6CB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iRr5_xDIA-niUGWrhuG4bDIEIQg.roa
Signing time: Wed 27 Apr 2022 14:09:42 +0000
ROA not before: Wed 27 Apr 2022 14:09:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2130036427 (0x7ef5c6cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 27 14:09:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=891af9ff10c803e9e25065ab86e1b86c32042108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:52:d1:3e:08:df:1e:cf:41:4f:ca:61:8b:cc:
39:37:c8:27:7d:a0:1f:c8:90:20:df:8a:bc:b2:51:
6f:11:65:59:f1:4c:9b:a8:bc:81:ed:a9:57:5f:26:
2e:bb:7d:1d:74:5a:a9:a4:87:81:57:80:bf:c1:99:
79:f8:7e:71:2a:2c:74:6e:d7:26:40:6b:82:2b:28:
1a:9a:65:e6:53:cd:17:b2:cc:6d:73:61:00:bc:9d:
cb:80:ed:60:0e:eb:db:a4:38:13:fb:5e:f3:e4:11:
81:7c:cc:f7:ec:9f:dc:ae:e7:55:61:0a:48:ec:d6:
36:01:fb:37:15:06:2d:d4:f6:22:ac:47:12:66:f6:
b4:9e:5f:0f:a8:d5:3f:bc:c8:06:6f:35:39:c1:c1:
d3:5a:96:25:0c:f8:f2:1e:aa:70:98:a0:69:00:69:
01:a7:35:d8:01:d0:87:a2:82:d3:d5:b0:95:5a:bb:
f8:ab:da:f0:d7:79:fd:6d:47:82:71:67:37:9c:31:
8d:9d:e9:05:0d:f4:1d:5b:74:33:53:fc:48:5f:b8:
c0:5c:61:92:88:bf:a5:3b:20:5d:de:4a:ca:82:2a:
44:b6:f1:50:62:14:e5:5d:0e:4f:39:85:3b:d0:c2:
55:0e:70:6d:89:a3:f9:a7:c4:96:57:88:f3:3d:7b:
2c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1A:F9:FF:10:C8:03:E9:E2:50:65:AB:86:E1:B8:6C:32:04:21:08
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iRr5_xDIA-niUGWrhuG4bDIEIQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:78:94:61:54:50:6c:d8:61:10:c5:c8:27:2b:c6:b8:05:79:
9d:9b:35:07:e7:19:3d:ad:c1:61:64:3f:51:2a:4b:f0:4b:a8:
95:47:b1:ec:97:37:c9:80:3d:8e:e0:fd:f4:41:d3:72:34:7f:
e3:3c:bc:11:ca:e3:ce:b6:24:5b:ab:24:26:01:09:99:d3:2f:
59:cc:a5:68:27:2f:30:ea:85:90:7c:33:3e:e6:57:e2:ea:12:
20:13:6a:d4:56:5c:f6:e4:ce:c6:b1:2d:c2:bb:fc:07:19:09:
55:67:3e:06:6c:78:63:bb:8b:ba:e6:1d:1a:55:8d:4c:8a:e1:
db:fb:7d:8a:63:57:5f:c8:45:e9:bd:1e:e2:7f:84:5b:45:4a:
45:aa:7d:19:f4:e4:cc:7b:ee:ae:c1:11:81:93:87:91:87:a1:
9e:b2:de:d3:58:60:6b:7a:fb:fd:06:87:15:d0:de:52:f5:9f:
b6:a8:3c:98:ac:23:e7:c7:22:7b:81:e1:56:98:81:82:f1:80:
23:7d:f0:c9:ea:3b:15:95:bc:af:36:3c:df:93:f8:70:1e:c5:
22:58:cd:ed:96:e1:da:91:cc:9c:d3:66:d2:6c:09:ae:6e:1a:
b7:74:c6:df:b7:fd:0c:f4:eb:79:fd:62:17:0c:f5:b7:44:85:
4d:0a:80:7c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEfvXGyzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDQy
NzE0MDk0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODkxYWY5ZmYxMGM4
MDNlOWUyNTA2NWFiODZlMWI4NmMzMjA0MjEwODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMtS0T4I3x7PQU/KYYvMOTfIJ32gH8iQIN+KvLJRbxFlWfFM
m6i8ge2pV18mLrt9HXRaqaSHgVeAv8GZefh+cSosdG7XJkBrgisoGppl5lPNF7LM
bXNhALydy4DtYA7r26Q4E/te8+QRgXzM9+yf3K7nVWEKSOzWNgH7NxUGLdT2IqxH
Emb2tJ5fD6jVP7zIBm81OcHB01qWJQz48h6qcJigaQBpAac12AHQh6KC09WwlVq7
+Kva8Nd5/W1HgnFnN5wxjZ3pBQ30HVt0M1P8SF+4wFxhkoi/pTsgXd5KyoIqRLbx
UGIU5V0OTzmFO9DCVQ5wbYmj+afElleI8z17LDsCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSJGvn/EMgD6eJQZauG4bhsMgQhCDAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L2lScjVfeERJQS1uaVVHV3JodUc0YkRJRUlRZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQBFeJRhVFBs2GEQxcgnK8a4BXmdmzUH5xk9rcFh
ZD9RKkvwS6iVR7HslzfJgD2O4P30QdNyNH/jPLwRyuPOtiRbqyQmAQmZ0y9ZzKVo
Jy8w6oWQfDM+5lfi6hIgE2rUVlz25M7GsS3Cu/wHGQlVZz4GbHhju4u65h0aVY1M
iuHb+32KY1dfyEXpvR7if4RbRUpFqn0Z9OTMe+6uwRGBk4eRh6Gest7TWGBrevv9
BocV0N5S9Z+2qDyYrCPnxyJ7geFWmIGC8YAjffDJ6jsVlbyvNjzfk/hwHsUiWM3t
luHakcyc02bSbAmubhq3dMbft/0M9Ot5/WIXDPW3RIVNCoB8
-----END CERTIFICATE-----
Generated at Sun Jun 8 22:32:42 2025 by rpki-client