Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l5wCwOsrqopaTJDjhODu69JOzgE.roa
File: l5wCwOsrqopaTJDjhODu69JOzgE.roa (raw, json)
Hash identifier: I5hwKHrjfA6QPiguLPeB9110a/YnGm27MuR93ncjmOI=
Subject key identifier: 97:9C:02:C0:EB:2B:AA:8A:5A:4C:90:E3:84:E0:EE:EB:D2:4E:CE:01
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 878E77FA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l5wCwOsrqopaTJDjhODu69JOzgE.roa
Signing time: Fri 27 May 2022 05:10:13 +0000
ROA not before: Fri 27 May 2022 05:10:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2274260986 (0x878e77fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 27 05:10:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=979c02c0eb2baa8a5a4c90e384e0eeebd24ece01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b1:c6:d5:6f:64:31:c1:64:36:63:d2:84:01:
6e:f5:d2:1e:8d:2f:e3:a0:e6:dd:0c:64:9f:65:2c:
df:74:a1:bc:05:05:98:59:7e:1c:2a:7b:19:bc:12:
46:53:a3:5e:a1:43:98:31:d2:47:a4:d6:f8:fc:02:
8d:45:87:f4:3c:2c:98:fa:c3:a6:15:14:ea:ca:88:
11:90:1a:e5:8d:3a:f7:ba:dc:30:e2:17:ea:f8:b8:
03:82:0e:d5:5c:79:ca:30:94:2b:ff:54:26:89:a5:
f5:84:ef:ac:14:f0:ff:5e:5c:1f:5d:9a:21:10:eb:
8f:21:33:7d:6e:bc:90:0d:ec:6d:7e:80:df:20:89:
0a:69:97:98:cf:21:0f:0f:8f:df:de:48:7a:4a:b9:
ff:4a:89:35:d3:62:48:42:a4:2d:dc:e5:c7:1d:f5:
ec:79:9b:16:ba:07:2d:7f:92:95:8b:d9:a5:29:92:
64:ce:87:67:59:73:86:35:12:32:73:bc:00:76:aa:
fd:7a:3b:18:7a:57:0a:e5:8f:b9:cb:be:c6:96:ea:
3f:cc:3f:9d:c7:1e:9b:18:6d:cf:ae:bd:04:47:d2:
d9:67:2b:f6:04:70:4a:d2:ad:aa:a7:ee:e9:44:cf:
21:06:26:7c:5f:a8:8b:1a:87:8b:5c:37:ef:8d:4f:
c3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9C:02:C0:EB:2B:AA:8A:5A:4C:90:E3:84:E0:EE:EB:D2:4E:CE:01
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l5wCwOsrqopaTJDjhODu69JOzgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:a3:fb:e6:98:3a:3e:cd:c2:d4:b7:8c:4f:87:3e:4f:a9:b3:
79:c1:e1:e0:43:62:ab:44:b4:d6:ce:0d:d1:db:78:90:8b:41:
f0:73:55:62:28:a4:94:69:b5:6a:c3:1d:45:ae:29:05:47:46:
fc:fe:6d:16:72:69:36:56:95:79:8c:83:c4:58:9c:47:6d:dc:
2a:b3:e9:4c:97:ea:6e:dc:f9:3f:a9:91:aa:28:40:b6:14:2e:
c8:43:90:3a:f5:6d:1e:e3:6f:ea:c8:a9:1a:93:41:33:54:60:
57:61:21:a1:16:56:8b:a3:03:99:fc:64:09:ee:e1:85:b6:90:
b7:7f:fb:32:9f:b3:1f:38:b0:b0:bf:69:d5:44:27:6a:db:2a:
a4:cb:2d:b6:44:2e:71:6c:b9:92:6c:62:f1:ca:94:b5:45:23:
e1:89:9b:03:f6:34:e1:e0:85:49:fe:61:9e:c6:bf:23:34:1f:
66:72:e8:1b:24:4c:dd:1a:dc:88:b5:cf:68:e1:83:ad:f3:70:
58:d4:14:a9:74:83:79:ab:ff:1f:44:a6:dc:4f:58:f4:89:55:
c5:cd:a6:a3:1c:db:3d:6a:63:95:ef:58:7b:1b:3b:2b:04:d7:
3b:e7:64:e6:9f:6c:22:56:e0:62:c2:95:fc:5d:64:d7:b6:5e:
ec:fb:92:f2
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIeOd/owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MjcwNTEwMTNaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDk3OWMwMmMwZWIy
YmFhOGE1YTRjOTBlMzg0ZTBlZWViZDI0ZWNlMDEwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtscbVb2QxwWQ2Y9KEAW710h6NL+Og5t0MZJ9lLN90obwF
BZhZfhwqexm8EkZTo16hQ5gx0kek1vj8Ao1Fh/Q8LJj6w6YVFOrKiBGQGuWNOve6
3DDiF+r4uAOCDtVcecowlCv/VCaJpfWE76wU8P9eXB9dmiEQ648hM31uvJAN7G1+
gN8giQppl5jPIQ8Pj9/eSHpKuf9KiTXTYkhCpC3c5ccd9ex5mxa6By1/kpWL2aUp
kmTOh2dZc4Y1EjJzvAB2qv16Oxh6Vwrlj7nLvsaW6j/MP53HHpsYbc+uvQRH0tln
K/YEcErSraqn7ulEzyEGJnxfqIsah4tcN++NT8N3AgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUl5wCwOsrqopaTJDjhODu69JOzgEwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9sNXdDd09zcnFvcGFUSkRqaE9EdTY5Sk96Z0Uucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAR6P75pg6Ps3C1LeMT4c+T6mzecHh4ENiq0S0
1s4N0dt4kItB8HNVYiiklGm1asMdRa4pBUdG/P5tFnJpNlaVeYyDxFicR23cKrPp
TJfqbtz5P6mRqihAthQuyEOQOvVtHuNv6sipGpNBM1RgV2EhoRZWi6MDmfxkCe7h
hbaQt3/7Mp+zHziwsL9p1UQnatsqpMsttkQucWy5kmxi8cqUtUUj4YmbA/Y04eCF
Sf5hnsa/IzQfZnLoGyRM3RrciLXPaOGDrfNwWNQUqXSDeav/H0Sm3E9Y9IlVxc2m
oxzbPWpjle9Yexs7KwTXO+dk5p9sIlbgYsKV/F1k17Ze7PuS8g==
-----END CERTIFICATE-----
Generated at Wed Jun 11 07:38:16 2025 by rpki-client