Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9vdW6r-UAaHdD53h21XEAAvR1Hg.roa
File: 9vdW6r-UAaHdD53h21XEAAvR1Hg.roa (raw, json)
Hash identifier: siS9lrEVWBISrkoHXSxSvrAFhi9a31oOx80KY/zorIc=
Subject key identifier: F6:F7:56:EA:BF:94:01:A1:DD:0F:9D:E1:DB:55:C4:00:0B:D1:D4:78
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018522239414A9858B0C8D791AA6C75B6740
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9vdW6r-UAaHdD53h21XEAAvR1Hg.roa
Signing time: Sat 17 Dec 2022 22:10:35 +0000
ROA not before: Sat 17 Dec 2022 22:10:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:22:23:94:14:a9:85:8b:0c:8d:79:1a:a6:c7:5b:67:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 17 22:10:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6f756eabf9401a1dd0f9de1db55c4000bd1d478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d6:8c:52:8c:c2:c8:62:0b:2b:b9:87:0b:68:
55:c1:a1:93:4f:b2:87:64:79:44:a1:26:f2:7d:7d:
d1:34:cf:9c:24:d4:c3:d7:48:89:f5:27:d4:ff:41:
d9:4f:2f:96:b9:df:d7:ad:8d:90:64:9a:75:90:7d:
59:05:bd:a9:c3:85:72:5f:1b:97:d4:1a:fc:61:22:
32:7d:d8:61:30:5a:1f:f4:4b:c4:98:71:73:f9:32:
0c:08:4e:3a:64:75:47:97:17:92:ea:92:2d:80:61:
a2:49:de:0e:b8:01:d5:07:ef:0e:a2:41:e3:da:d0:
2e:92:b8:86:2a:50:3c:56:4d:c6:5d:2d:e6:69:3c:
75:4d:fc:30:4e:c7:38:17:5f:1d:14:2b:03:b0:1f:
0a:f0:5b:06:ba:e3:4e:1c:a1:85:c7:bb:b9:f8:56:
89:97:f7:be:49:f9:2d:dd:49:93:94:1a:7e:2c:8c:
4c:c9:f8:55:bc:1c:fb:6d:68:a0:a3:a3:4b:d0:63:
31:01:01:c8:56:cb:e8:92:e7:4d:28:fd:3f:f1:de:
fc:97:7d:61:1c:7b:a4:f0:0e:fc:54:dc:13:d4:51:
62:d5:3f:0b:b6:a9:e3:18:19:d4:e5:23:69:d0:42:
07:32:e6:a5:37:f2:fb:de:b1:0a:a3:f5:71:20:93:
0c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F7:56:EA:BF:94:01:A1:DD:0F:9D:E1:DB:55:C4:00:0B:D1:D4:78
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9vdW6r-UAaHdD53h21XEAAvR1Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:61:90:14:fc:2b:8e:4a:48:15:16:78:42:44:2d:9d:dd:08:
f0:00:86:2e:b2:e5:34:7a:00:25:66:c1:b7:d6:8e:47:d5:8c:
b8:ae:5c:88:78:ec:f7:e2:26:d1:4d:ee:78:96:7d:3e:2a:3f:
ec:e8:94:ec:26:21:a0:fb:f6:17:11:2e:3a:a9:fe:ca:a4:d3:
73:25:37:ab:4b:bd:f9:56:4d:33:c8:c0:90:2c:df:55:32:94:
eb:bc:c2:9a:6c:44:e7:ea:05:9c:04:cb:31:ed:5e:bf:1a:6f:
72:40:41:9c:e7:3b:33:97:87:56:b2:cc:66:d5:83:d0:31:e1:
c0:da:36:16:86:61:85:5f:9b:ed:6e:14:73:52:cb:2a:ea:38:
c8:56:21:0c:3f:4a:6c:cc:95:b6:82:02:08:e4:6a:69:6c:7b:
b4:3f:3b:9d:dd:46:79:0c:68:c5:cd:df:e3:6c:3b:91:b5:46:
0c:6c:6b:a3:c3:b3:bd:d0:aa:7e:9f:5f:20:f3:0e:2a:63:e3:
a0:9f:5c:38:8b:ba:e3:dd:f5:6f:9d:11:83:39:c9:b8:af:70:
ff:cc:78:b6:32:cc:c3:26:42:8c:a9:a4:5a:57:de:7c:34:44:
bc:2c:72:1d:9d:e2:cd:66:bb:1d:16:3f:78:cf:49:b8:25:19:
b0:f6:2f:68
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUiI5QUqYWLDI15GqbHW2dAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjE3MjIxMDM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmY3NTZlYWJmOTQwMWExZGQwZjlkZTFkYjU1YzQwMDBiZDFkNDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNaMUozCyGILK7mHC2hVwaGTT7KH
ZHlEoSbyfX3RNM+cJNTD10iJ9SfU/0HZTy+Wud/XrY2QZJp1kH1ZBb2pw4VyXxuX
1Br8YSIyfdhhMFof9EvEmHFz+TIMCE46ZHVHlxeS6pItgGGiSd4OuAHVB+8OokHj
2tAukriGKlA8Vk3GXS3maTx1TfwwTsc4F18dFCsDsB8K8FsGuuNOHKGFx7u5+FaJ
l/e+Sfkt3UmTlBp+LIxMyfhVvBz7bWigo6NL0GMxAQHIVsvokudNKP0/8d78l31h
HHuk8A78VNwT1FFi1T8LtqnjGBnU5SNp0EIHMualN/L73rEKo/VxIJMMJQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPb3Vuq/lAGh3Q+d4dtVxAAL0dR4MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOXZkVzZyLVVBYUhkRDUzaDIxWEVBQXZSMUhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADlhkBT8K45KSBUWeEJE
LZ3dCPAAhi6y5TR6ACVmwbfWjkfVjLiuXIh47PfiJtFN7niWfT4qP+zolOwmIaD7
9hcRLjqp/sqk03MlN6tLvflWTTPIwJAs31UylOu8wppsROfqBZwEyzHtXr8ab3JA
QZznOzOXh1ayzGbVg9Ax4cDaNhaGYYVfm+1uFHNSyyrqOMhWIQw/SmzMlbaCAgjk
amlse7Q/O53dRnkMaMXN3+NsO5G1Rgxsa6PDs73Qqn6fXyDzDipj46CfXDiLuuPd
9W+dEYM5ybivcP/MeLYyzMMmQoyppFpX3nw0RLwsch2d4s1mux0WP3jPSbglGbD2
L2g=
-----END CERTIFICATE-----
Generated at Fri May 2 15:52:48 2025 by rpki-client