Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ONyHyQhiWqRgYoXg6V1AOnqm53k.roa
File: ONyHyQhiWqRgYoXg6V1AOnqm53k.roa (raw, json)
Hash identifier: kggYdP8fbo+vY7ShspfDRhaq/4ufTEqBmGl5lqzhpnM=
Subject key identifier: 38:DC:87:C9:08:62:5A:A4:60:62:85:E0:E9:5D:40:3A:7A:A6:E7:79
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 70D355D9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ONyHyQhiWqRgYoXg6V1AOnqm53k.roa
Signing time: Tue 08 Mar 2022 18:04:05 +0000
ROA not before: Tue 08 Mar 2022 18:04:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:6ab3:d680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1892898265 (0x70d355d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 8 18:04:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38dc87c908625aa4606285e0e95d403a7aa6e779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a7:a1:a5:4e:7e:2f:bc:88:53:af:96:cd:9f:
80:23:00:8e:6e:8f:2d:38:98:c8:9c:e3:20:13:88:
99:d9:cb:9a:d9:25:f9:f5:81:52:3c:63:2f:15:9e:
e1:3c:fc:fc:1d:ba:50:ae:eb:a6:ad:40:c1:5d:19:
cd:15:cc:d9:3f:28:1c:7d:98:3d:74:36:72:4a:16:
4b:8b:cd:91:e7:f4:64:f9:43:91:fe:37:f9:ab:7c:
b0:8f:51:b1:48:98:41:77:60:96:d6:43:ab:17:ef:
5a:fa:be:7b:85:10:0a:b2:1e:9c:e9:e9:ce:f1:57:
03:16:d9:ab:d6:2b:10:34:a4:26:0e:77:0f:62:14:
bc:28:cf:e5:a7:3b:4d:48:bc:17:63:3d:c0:b3:a3:
4f:79:53:fd:87:46:6d:98:61:6e:29:49:60:04:e7:
3b:c5:d6:c7:25:a7:a3:45:a6:03:a9:fd:44:a1:75:
95:a9:07:bc:58:ad:94:28:a5:18:07:97:80:da:30:
b8:17:01:5e:1e:0a:52:03:92:fb:37:9d:9c:06:03:
67:f9:0b:6c:2e:16:9c:c2:94:5c:9e:24:54:ae:dd:
7e:b1:b8:25:c5:fa:7e:c9:d2:48:5c:b8:ab:05:c5:
9e:1e:ca:00:ac:c1:6e:c3:b1:7e:02:ae:ed:7e:aa:
c9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DC:87:C9:08:62:5A:A4:60:62:85:E0:E9:5D:40:3A:7A:A6:E7:79
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ONyHyQhiWqRgYoXg6V1AOnqm53k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:c0:98:b4:b6:21:23:de:f2:3e:ba:21:da:f8:97:9b:cf:9d:
bd:c0:ce:36:92:99:e9:4a:63:27:77:10:a8:e7:56:86:8f:30:
d3:82:9a:b0:bf:a4:ac:ef:80:5b:b0:e1:02:5e:43:94:ad:e2:
56:7f:c2:18:3c:51:34:e7:e4:88:99:86:88:09:8d:e4:48:fe:
66:7c:a6:85:e8:dd:03:1a:1a:98:d6:84:e8:e2:c4:9f:1b:4c:
2f:37:bc:32:77:be:f4:35:22:2d:80:ab:69:2c:19:0b:5b:a1:
86:4d:4b:4c:53:d1:64:95:8c:36:e4:87:63:e5:c2:33:14:58:
0b:87:3d:05:1f:2e:41:e3:7f:d9:48:69:32:d6:53:c0:83:9d:
c3:ed:c4:08:b8:e9:ed:3a:28:ac:ae:a3:b7:0d:bd:31:c7:b8:
65:13:07:bf:e0:93:74:be:46:85:03:64:51:f7:ec:a0:22:a4:
d5:8d:43:21:7d:7e:5d:a9:50:a6:49:b8:d0:4d:fa:8d:07:86:
d0:1e:fd:0f:b6:34:75:10:49:f2:62:ba:6a:46:c5:20:08:0f:
ec:44:89:5a:ff:8f:85:f1:98:26:42:f3:a0:99:c7:69:a4:0b:
d4:28:36:dc:48:c0:9c:2b:1f:38:4a:9c:5a:79:48:28:9a:6e:
9e:f7:07:f7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEcNNV2TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMw
ODE4MDQwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzhkYzg3YzkwODYy
NWFhNDYwNjI4NWUwZTk1ZDQwM2E3YWE2ZTc3OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOanoaVOfi+8iFOvls2fgCMAjm6PLTiYyJzjIBOImdnLmtkl
+fWBUjxjLxWe4Tz8/B26UK7rpq1AwV0ZzRXM2T8oHH2YPXQ2ckoWS4vNkef0ZPlD
kf43+at8sI9RsUiYQXdgltZDqxfvWvq+e4UQCrIenOnpzvFXAxbZq9YrEDSkJg53
D2IUvCjP5ac7TUi8F2M9wLOjT3lT/YdGbZhhbilJYATnO8XWxyWno0WmA6n9RKF1
lakHvFitlCilGAeXgNowuBcBXh4KUgOS+zednAYDZ/kLbC4WnMKUXJ4kVK7dfrG4
JcX6fsnSSFy4qwXFnh7KAKzBbsOxfgKu7X6qyVUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQ43IfJCGJapGBiheDpXUA6eqbneTAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L09OeUh5UWhpV3FSZ1lvWGc2VjFBT25xbTUzay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAmwJi0tiEj3vI+uiHa+Jebz529wM42kpnpSmMn
dxCo51aGjzDTgpqwv6Ss74BbsOECXkOUreJWf8IYPFE05+SImYaICY3kSP5mfKaF
6N0DGhqY1oTo4sSfG0wvN7wyd770NSItgKtpLBkLW6GGTUtMU9FklYw25Idj5cIz
FFgLhz0FHy5B43/ZSGky1lPAg53D7cQIuOntOiisrqO3Db0xx7hlEwe/4JN0vkaF
A2RR9+ygIqTVjUMhfX5dqVCmSbjQTfqNB4bQHv0PtjR1EEnyYrpqRsUgCA/sRIla
/4+F8ZgmQvOgmcdppAvUKDbcSMCcKx84SpxaeUgomm6e9wf3
-----END CERTIFICATE-----
Generated at Sat May 3 12:01:41 2025 by rpki-client