Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bO4yN4RF42oo59UdQ9uxRH2VAnk.roa
File: bO4yN4RF42oo59UdQ9uxRH2VAnk.roa (raw, json)
Hash identifier: qQ6TddmnWa+6K7NvUz2Txq/y+WHI+67FBMuhy3uGq78=
Subject key identifier: 6C:EE:32:37:84:45:E3:6A:28:E7:D5:1D:43:DB:B1:44:7D:95:02:79
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855AFEBD5AC0121EF9B35C46A091EE54A1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bO4yN4RF42oo59UdQ9uxRH2VAnk.roa
Signing time: Wed 28 Dec 2022 23:08:42 +0000
ROA not before: Wed 28 Dec 2022 23:08:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5a:fe:bd:5a:c0:12:1e:f9:b3:5c:46:a0:91:ee:54:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 28 23:08:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6cee32378445e36a28e7d51d43dbb1447d950279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:64:93:26:7a:b7:a2:d9:23:a4:92:2f:90:
02:ef:2c:e8:9c:fc:c1:c6:1a:3e:03:6b:0c:ec:fa:
68:2a:1e:21:c0:ba:53:0a:76:f9:2b:49:6b:d2:72:
7e:61:79:b5:a4:4b:7b:91:2f:55:17:b9:9d:fe:83:
28:fa:e0:2b:a3:5c:25:f7:35:84:5a:1b:5b:bd:2b:
3d:03:fb:9b:32:47:4d:81:5c:a0:c0:c8:61:ff:fc:
9f:7e:fa:11:e4:13:c6:a2:45:72:f7:75:b5:c1:f2:
41:23:00:bb:4a:90:97:c2:02:a5:84:d7:a7:a1:f3:
b8:32:cf:bf:d1:4c:de:5e:66:33:3d:fb:cb:57:f7:
65:94:7a:f7:fe:57:cd:77:2e:d7:4c:43:06:34:2f:
96:28:96:dd:23:56:4e:51:e8:63:26:76:f3:ae:7c:
14:6c:32:73:33:2e:bb:b0:28:60:46:42:13:82:7a:
c0:eb:92:6e:18:f0:58:da:54:8b:de:b5:6c:08:53:
16:f8:97:c4:e7:1e:78:35:91:13:1f:a9:cb:98:e8:
24:f4:c2:e6:38:5e:39:06:50:23:13:2c:71:0f:d9:
4a:8f:96:88:19:4c:79:e6:12:15:79:fa:60:78:e6:
46:0c:94:e0:a6:21:9d:69:76:f8:8f:e5:cb:71:74:
bd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EE:32:37:84:45:E3:6A:28:E7:D5:1D:43:DB:B1:44:7D:95:02:79
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bO4yN4RF42oo59UdQ9uxRH2VAnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:56:af:79:d6:06:b7:47:c8:79:5f:6d:96:65:ff:2f:25:49:
a4:a7:09:04:2b:f7:ae:8a:3c:6a:36:a6:7c:06:f9:45:b4:e3:
65:bf:51:ab:97:2f:33:39:fc:7e:57:ab:94:37:38:1f:b5:65:
c0:32:7c:e3:2b:07:b8:8f:40:b2:9d:8c:a2:4c:ef:ff:af:4c:
d4:2c:07:f7:ff:f5:26:6d:c3:61:0e:44:8f:36:4c:b7:3b:fe:
44:c4:6f:46:19:0c:06:1d:d6:04:a5:ff:28:b3:10:76:30:8d:
f0:b6:d3:fa:b1:bb:ce:67:3b:31:a5:b2:c7:bd:87:95:25:06:
b1:70:79:66:69:e5:03:f2:c8:bc:2c:8e:05:26:cf:b9:9d:90:
08:70:d7:11:e6:2b:da:b7:d8:3c:c3:b1:00:69:f5:4a:75:3c:
6f:c2:2c:d3:cd:fc:72:cd:b7:30:f8:8b:cd:fc:97:87:18:75:
b7:4d:28:10:9a:92:29:7a:fb:17:67:97:4c:25:de:6c:8f:f8:
98:38:c1:e0:3b:48:8b:67:38:5e:5b:a2:00:28:10:77:79:4c:
58:bc:a6:35:59:40:e6:a6:cb:be:f2:49:44:c8:b9:c5:1f:e5:
fd:10:3f:90:51:bc:0d:97:4d:58:87:b5:c7:1a:85:95:30:a3:
46:48:96:4b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVa/r1awBIe+bNcRqCR7lShMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjI4MjMwODQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2VlMzIzNzg0NDVlMzZhMjhlN2Q1MWQ0M2RiYjE0NDdkOTUwMjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYhkkyZ6t6LZI6SSL5AC7yzonPzB
xho+A2sM7PpoKh4hwLpTCnb5K0lr0nJ+YXm1pEt7kS9VF7md/oMo+uAro1wl9zWE
WhtbvSs9A/ubMkdNgVygwMhh//yffvoR5BPGokVy93W1wfJBIwC7SpCXwgKlhNen
ofO4Ms+/0UzeXmYzPfvLV/dllHr3/lfNdy7XTEMGNC+WKJbdI1ZOUehjJnbzrnwU
bDJzMy67sChgRkITgnrA65JuGPBY2lSL3rVsCFMW+JfE5x54NZETH6nLmOgk9MLm
OF45BlAjEyxxD9lKj5aIGUx55hIVefpgeOZGDJTgpiGdaXb4j+XLcXS98QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGzuMjeEReNqKOfVHUPbsUR9lQJ5MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYk80eU40UkY0Mm9vNTlVZFE5dXhSSDJWQW5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF1Wr3nWBrdHyHlfbZZl
/y8lSaSnCQQr966KPGo2pnwG+UW042W/UauXLzM5/H5Xq5Q3OB+1ZcAyfOMrB7iP
QLKdjKJM7/+vTNQsB/f/9SZtw2EORI82TLc7/kTEb0YZDAYd1gSl/yizEHYwjfC2
0/qxu85nOzGlsse9h5UlBrFweWZp5QPyyLwsjgUmz7mdkAhw1xHmK9q32DzDsQBp
9Up1PG/CLNPN/HLNtzD4i838l4cYdbdNKBCakil6+xdnl0wl3myP+Jg4weA7SItn
OF5bogAoEHd5TFi8pjVZQOamy77ySUTIucUf5f0QP5BRvA2XTViHtccahZUwo0ZI
lks=
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:10:57 2025 by rpki-client