Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x9lhzMWHfjP5tdpcbP5HGDvpjq4.roa
File: x9lhzMWHfjP5tdpcbP5HGDvpjq4.roa (raw, json)
Hash identifier: AtdvWfnX+q8WZHYdFLwYKKnxjPUPgrJGW1Br/VCmiyY=
Subject key identifier: C7:D9:61:CC:C5:87:7E:33:F9:B5:DA:5C:6C:FE:47:18:3B:E9:8E:AE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 69620CFD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x9lhzMWHfjP5tdpcbP5HGDvpjq4.roa
Signing time: Thu 10 Feb 2022 09:13:46 +0000
ROA not before: Thu 10 Feb 2022 09:13:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
2001:67c:64:ffff:0:17e:d9a6:5e4a/128 maxlen: 128
2001:67c:64:ffff:0:17e:ddba:7b5e/128 maxlen: 128
2001:67c:64:ffff:0:17e:db26:e5c4/128 maxlen: 128
2001:67c:64:ffff:0:17e:dab9:26f6/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:da82:41aa/128 maxlen: 128
2001:67c:64:ffff:0:17e:dd83:3b9e/128 maxlen: 128
2001:67c:64:ffff:0:17e:dcde:5809/128 maxlen: 128
2001:67c:64:ffff:0:17e:d938:ba2e/128 maxlen: 128
2001:67c:64:ffff:0:17e:d85c:d348/128 maxlen: 128
2001:67c:64:ffff:0:17e:daf0:4034/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc02:dc22/128 maxlen: 128
2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7ee:e040/128 maxlen: 128
2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
2001:67c:64:ffff:0:17e:d901:fecb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7b8:3101/128 maxlen: 128
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64:ffff:0:17e:d826:2565/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc39:b603/128 maxlen: 128
2001:67c:64:ffff:0:17e:db5e:7e8/128 maxlen: 128
2001:67c:64:ffff:0:17e:d713:9aeb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
2001:67c:64:ffff:0:17e:d96f:7a13/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1768033533 (0x69620cfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 10 09:13:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7d961ccc5877e33f9b5da5c6cfe47183be98eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:75:b1:38:53:80:20:67:ef:19:c5:06:27:29:
23:ea:a0:4d:a3:b9:5d:4b:f4:9b:0e:d7:96:5f:b3:
c3:bd:cd:f2:a7:b4:11:b0:8c:fd:c4:5a:72:ca:2b:
cd:1b:f9:b4:9d:73:0c:5f:1b:b9:9c:2a:c7:48:da:
37:e6:4d:4a:58:ad:e9:d4:4b:3a:e4:79:39:7c:b7:
cc:f1:50:22:0a:1c:1a:cb:2e:1e:d4:0d:36:9f:79:
ca:15:e7:d5:51:b1:8e:7a:e9:80:ec:10:da:b1:8a:
d6:39:b7:26:28:e1:77:01:5c:f8:78:ad:27:0d:b8:
a4:fc:76:d6:9f:a0:9b:6b:15:ba:76:44:a7:11:f0:
e5:81:2c:a2:bf:a0:ce:b4:69:fb:5f:b5:6d:64:87:
24:46:e2:18:c7:da:f0:88:e2:29:21:70:be:e1:5c:
de:63:b7:8e:51:55:87:35:07:a3:bf:61:f9:ef:66:
58:e2:bc:ad:e5:2b:20:1c:de:fb:6c:92:8f:bd:3a:
6c:00:2a:0e:8f:64:bf:1e:73:9a:c4:21:bf:fb:43:
05:e4:91:56:dd:0b:7d:b8:b5:dd:5b:7b:7e:ec:fc:
77:b3:6d:f3:53:38:a5:04:cc:d4:b1:39:4c:21:1f:
00:5d:27:c8:7d:47:02:07:f4:57:d7:23:44:61:c9:
04:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D9:61:CC:C5:87:7E:33:F9:B5:DA:5C:6C:FE:47:18:3B:E9:8E:AE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x9lhzMWHfjP5tdpcbP5HGDvpjq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:82:54:f5:93:a4:b9:51:c6:12:56:ee:59:7a:a7:03:4e:91:
9d:63:d3:87:ae:ed:84:18:de:89:f0:27:78:01:cf:20:09:5e:
8d:ad:94:e5:2a:02:d0:04:7b:67:7f:de:52:af:2a:ac:89:ef:
9f:85:ee:c7:b2:ae:b3:1e:8d:44:cd:45:6a:ce:a4:61:12:b9:
72:f7:50:47:02:7a:7d:75:e3:78:d6:72:e0:52:d8:11:48:37:
49:92:02:54:c9:d0:06:08:2f:ac:01:ca:7e:17:6b:2e:62:84:
3e:19:54:94:86:48:e9:5d:46:b2:35:cf:8c:1a:5f:05:7c:61:
ce:72:81:73:d6:b3:c9:a6:af:51:19:ed:04:ab:d5:8f:29:24:
6e:35:af:27:40:5a:ee:aa:3d:26:2c:f0:ac:6f:e4:f1:ac:64:
c0:74:07:03:c9:30:af:b3:a2:60:d5:24:3c:e7:1f:21:29:a5:
44:77:d1:91:92:ed:60:1e:18:02:21:c9:6d:4c:f9:b4:ad:cd:
3a:db:55:ff:3c:e0:2d:3d:7d:59:56:db:50:08:ff:75:d7:3a:
6b:d8:b3:05:8f:21:fb:83:0d:f9:cf:29:04:01:21:b5:4b:02:
06:78:c5:0a:c5:2d:d0:f8:b0:fd:33:bd:43:70:0e:a8:71:f0:
cf:4e:f5:cd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEaWIM/TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIx
MDA5MTM0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzdkOTYxY2NjNTg3
N2UzM2Y5YjVkYTVjNmNmZTQ3MTgzYmU5OGVhZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMh1sThTgCBn7xnFBicpI+qgTaO5XUv0mw7Xll+zw73N8qe0
EbCM/cRacsorzRv5tJ1zDF8buZwqx0jaN+ZNSlit6dRLOuR5OXy3zPFQIgocGssu
HtQNNp95yhXn1VGxjnrpgOwQ2rGK1jm3JijhdwFc+HitJw24pPx21p+gm2sVunZE
pxHw5YEsor+gzrRp+1+1bWSHJEbiGMfa8IjiKSFwvuFc3mO3jlFVhzUHo79h+e9m
WOK8reUrIBze+2ySj706bAAqDo9kvx5zmsQhv/tDBeSRVt0Lfbi13Vt7fuz8d7Nt
81M4pQTM1LE5TCEfAF0nyH1HAgf0V9cjRGHJBMUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTH2WHMxYd+M/m12lxs/kcYO+mOrjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L3g5bGh6TVdIZmpQNXRkcGNiUDVIR0R2cGpxNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQBvglT1k6S5UcYSVu5ZeqcDTpGdY9OHru2EGN6J
8Cd4Ac8gCV6NrZTlKgLQBHtnf95Sryqsie+fhe7Hsq6zHo1EzUVqzqRhErly91BH
Anp9deN41nLgUtgRSDdJkgJUydAGCC+sAcp+F2suYoQ+GVSUhkjpXUayNc+MGl8F
fGHOcoFz1rPJpq9RGe0Eq9WPKSRuNa8nQFruqj0mLPCsb+TxrGTAdAcDyTCvs6Jg
1SQ85x8hKaVEd9GRku1gHhgCIcltTPm0rc0621X/POAtPX1ZVttQCP911zpr2LMF
jyH7gw35zykEASG1SwIGeMUKxS3Q+LD9M71DcA6ocfDPTvXN
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:13:14 2025 by rpki-client