Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rLZWzELBGHkJtZWq0pmxsD-fqw8.roa
File: rLZWzELBGHkJtZWq0pmxsD-fqw8.roa (raw, json)
Hash identifier: nnOXV5DF103ZokUtHsfHF1PnyhUyn6Puv/qRW9m3Q1U=
Subject key identifier: AC:B6:56:CC:42:C1:18:79:09:B5:95:AA:D2:99:B1:B0:3F:9F:AB:0F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01835D5F074387344831FF8CC4B0F536B843
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rLZWzELBGHkJtZWq0pmxsD-fqw8.roa
Signing time: Wed 21 Sep 2022 00:07:32 +0000
ROA not before: Wed 21 Sep 2022 00:07:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:5d5c:6634/128 maxlen: 128
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5d:5f:07:43:87:34:48:31:ff:8c:c4:b0:f5:36:b8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 21 00:07:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acb656cc42c1187909b595aad299b1b03f9fab0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:12:25:87:14:66:fc:a5:b7:d8:16:0a:d4:ae:
3a:a5:3e:fb:e0:0a:4a:93:67:77:89:73:d9:02:50:
52:6f:9d:b1:bb:b8:51:18:d1:be:3e:2b:65:e1:1d:
f2:c6:f8:14:49:d0:bd:a6:8f:c6:8f:88:79:66:50:
1e:a9:a0:f4:6d:a5:8b:71:13:c4:8c:7a:e7:0e:48:
42:63:7a:7d:93:1d:f0:43:3e:17:ca:16:2e:0a:ae:
48:05:c0:a3:a6:20:4e:14:ba:43:18:82:a6:5e:4d:
93:4e:92:03:34:77:07:84:9e:8c:3e:e1:1f:09:66:
03:b5:c5:a9:d7:4f:0d:2e:81:85:d2:04:6a:05:27:
35:75:4e:16:dc:62:d4:4f:bc:43:b6:db:13:c8:bc:
10:b6:be:3d:57:cd:87:84:6b:ef:d7:ce:7f:84:26:
f6:e4:32:b8:7e:de:f3:40:e2:25:59:16:f9:48:44:
57:c7:07:55:61:d8:b4:25:b0:61:b8:06:6a:b6:95:
16:f3:ca:ce:23:5f:4b:9c:30:8f:12:8a:a8:ac:b4:
aa:1f:cb:30:82:53:1c:17:97:59:77:50:e8:21:72:
56:d0:e6:d9:34:c8:c4:c4:a4:f3:b8:31:4a:10:9c:
a9:5b:6c:8d:a9:05:3a:a0:9d:55:33:ca:98:21:29:
90:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B6:56:CC:42:C1:18:79:09:B5:95:AA:D2:99:B1:B0:3F:9F:AB:0F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rLZWzELBGHkJtZWq0pmxsD-fqw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:8c:be:68:88:be:9d:17:e6:1f:96:76:76:ff:d3:06:52:19:
71:8e:c2:e9:12:b9:22:62:75:d7:73:2f:a1:57:d3:62:4b:ad:
74:07:8a:3f:9e:f2:c9:a3:52:ed:59:34:42:24:1e:04:39:92:
75:f8:2f:59:75:ca:b8:74:57:bb:f9:1e:12:10:65:4e:16:31:
ce:8c:56:d9:ff:94:44:d6:c1:f9:a4:63:e6:c9:0d:7a:67:a2:
d4:36:d0:1e:6e:0e:6c:6c:d0:3f:1d:a9:d5:ad:64:25:4e:0a:
42:fd:44:8c:79:8e:3b:ae:a5:94:24:5a:91:45:b7:92:0f:0e:
0e:73:ea:5d:06:c2:de:b2:3e:36:8f:94:10:f6:3e:fc:ad:ab:
8b:54:49:fd:e8:32:18:ea:79:06:ec:95:14:1d:2f:73:b3:5f:
b3:29:92:ac:c5:3c:74:d5:58:d3:17:1e:fc:22:ee:31:4e:3e:
d1:e7:42:e6:6e:da:5b:ce:6f:c2:4e:96:82:7b:15:8a:2b:f7:
3f:ca:0c:9d:1b:75:cf:75:ef:0e:2e:1d:a4:5a:12:45:9d:30:
d0:30:7e:cb:47:fc:d1:ee:31:25:66:a7:e5:29:9f:e8:4d:37:
17:59:7c:8a:50:fb:49:f0:5e:9e:53:a3:20:90:d6:38:68:62:
a9:c6:07:fc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYNdXwdDhzRIMf+MxLD1NrhDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTIxMDAwNzMyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2I2NTZjYzQyYzExODc5MDliNTk1YWFkMjk5YjFiMDNmOWZhYjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxIlhxRm/KW32BYK1K46pT774ApK
k2d3iXPZAlBSb52xu7hRGNG+Pitl4R3yxvgUSdC9po/Gj4h5ZlAeqaD0baWLcRPE
jHrnDkhCY3p9kx3wQz4XyhYuCq5IBcCjpiBOFLpDGIKmXk2TTpIDNHcHhJ6MPuEf
CWYDtcWp108NLoGF0gRqBSc1dU4W3GLUT7xDttsTyLwQtr49V82HhGvv185/hCb2
5DK4ft7zQOIlWRb5SERXxwdVYdi0JbBhuAZqtpUW88rOI19LnDCPEoqorLSqH8sw
glMcF5dZd1DoIXJW0ObZNMjExKTzuDFKEJypW2yNqQU6oJ1VM8qYISmQSQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKy2VsxCwRh5CbWVqtKZsbA/n6sPMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvckxaV3pFTEJHSGtKdFpXcTBwbXhzRC1mcXc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHKMvmiIvp0X5h+Wdnb/
0wZSGXGOwukSuSJidddzL6FX02JLrXQHij+e8smjUu1ZNEIkHgQ5knX4L1l1yrh0
V7v5HhIQZU4WMc6MVtn/lETWwfmkY+bJDXpnotQ20B5uDmxs0D8dqdWtZCVOCkL9
RIx5jjuupZQkWpFFt5IPDg5z6l0Gwt6yPjaPlBD2Pvytq4tUSf3oMhjqeQbslRQd
L3OzX7MpkqzFPHTVWNMXHvwi7jFOPtHnQuZu2lvOb8JOloJ7FYor9z/KDJ0bdc91
7w4uHaRaEkWdMNAwfstH/NHuMSVmp+Upn+hNNxdZfIpQ+0nwXp5ToyCQ1jhoYqnG
B/w=
-----END CERTIFICATE-----
Generated at Mon Jun 9 05:27:44 2025 by rpki-client