Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hJyNUf4UiuQOTnk-bE7WSLxBHug.roa
File: hJyNUf4UiuQOTnk-bE7WSLxBHug.roa (raw, json)
Hash identifier: tK7iHxOr/AcgyAlH5qJF+w/23p1+tWhFT1873p8uOiI=
Subject key identifier: 84:9C:8D:51:FE:14:8A:E4:0E:4E:79:3E:6C:4E:D6:48:BC:41:1E:E8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7ACCDE7B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hJyNUf4UiuQOTnk-bE7WSLxBHug.roa
Signing time: Wed 13 Apr 2022 00:11:57 +0000
ROA not before: Wed 13 Apr 2022 00:11:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2060246651 (0x7accde7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 13 00:11:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=849c8d51fe148ae40e4e793e6c4ed648bc411ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9b:98:87:86:57:70:01:2b:86:94:a5:39:2d:
cd:c1:34:64:09:a1:ab:fd:22:b1:a0:f8:95:ac:47:
60:f0:bd:89:91:cb:ab:37:c1:90:b1:56:fb:3a:0b:
2c:c9:8c:c0:5f:ca:eb:96:05:9e:c0:03:09:6a:f6:
57:d9:86:30:2b:2c:2d:cc:fc:e8:61:84:25:bf:59:
0f:72:98:76:6f:8f:78:f2:04:58:2f:7f:4b:7b:5d:
af:da:e8:11:c9:1f:8a:10:35:7c:d6:94:e9:c5:af:
bc:c9:47:66:6e:b5:bc:c9:f3:1c:5f:fa:20:d8:d3:
92:97:5c:67:b3:d3:7f:f3:29:e6:3f:5c:24:b3:e4:
cc:c2:b7:af:f4:32:8f:f5:67:3d:9e:7e:33:d7:b9:
50:b5:86:b7:84:a2:56:bc:05:ab:a4:d7:58:d4:03:
ff:cb:db:e1:b4:f9:85:1e:15:f8:44:21:00:a3:46:
68:1a:3b:d8:14:99:18:3d:8a:0f:03:79:a6:26:9c:
52:20:4a:fa:fb:f1:40:21:9d:64:05:14:ba:a4:2f:
27:eb:1a:c8:c4:29:75:03:d9:78:c6:b6:97:82:59:
c1:76:41:1d:bd:20:5b:26:1b:53:fd:65:cf:55:f7:
f0:e4:42:b3:68:40:88:2c:55:45:3f:6c:6e:75:e5:
19:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9C:8D:51:FE:14:8A:E4:0E:4E:79:3E:6C:4E:D6:48:BC:41:1E:E8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hJyNUf4UiuQOTnk-bE7WSLxBHug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:e1:04:73:66:c6:1a:dd:2f:1f:09:60:d9:62:22:41:55:1f:
eb:ba:bf:b7:e7:8d:0e:29:66:e9:ab:65:20:e1:7d:f9:53:ac:
f9:f9:d6:2c:d9:95:1f:57:d7:51:91:da:df:d0:c7:9c:ce:a8:
3c:52:e5:52:ba:e1:80:ce:0d:f6:a7:0a:f5:4e:0c:d8:9f:df:
73:fb:c5:0c:32:05:12:06:84:88:e2:9e:b6:d7:be:12:59:62:
54:3d:46:4f:d4:48:09:c6:af:48:e1:cf:b6:3a:4a:d8:a0:d3:
cd:d4:88:7f:a9:c3:be:1d:dc:e3:b3:fc:ad:77:ec:71:b3:58:
e2:be:8c:a3:7e:46:d9:1b:1d:11:45:b1:3a:57:83:11:be:79:
be:96:a1:fc:bc:8e:56:71:8f:6d:82:a5:ff:5b:75:2b:67:65:
84:ac:18:f0:88:05:e0:bd:ff:6a:c7:55:df:88:38:98:90:45:
e4:bd:91:dd:b9:e5:76:61:70:d8:df:93:20:28:e1:58:fa:3e:
9d:30:df:ae:5b:f1:10:17:4c:36:84:33:f5:c9:f7:75:8f:4d:
f5:46:65:2e:24:f5:17:ea:ea:93:93:4f:e5:6b:93:ff:84:92:
60:ae:65:15:cb:f4:aa:92:d5:f1:53:8b:3f:8c:75:a0:c2:bd:
b6:48:e3:06
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEeszeezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDQx
MzAwMTE1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODQ5YzhkNTFmZTE0
OGFlNDBlNGU3OTNlNmM0ZWQ2NDhiYzQxMWVlODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANmbmIeGV3ABK4aUpTktzcE0ZAmhq/0isaD4laxHYPC9iZHL
qzfBkLFW+zoLLMmMwF/K65YFnsADCWr2V9mGMCssLcz86GGEJb9ZD3KYdm+PePIE
WC9/S3tdr9roEckfihA1fNaU6cWvvMlHZm61vMnzHF/6INjTkpdcZ7PTf/Mp5j9c
JLPkzMK3r/Qyj/VnPZ5+M9e5ULWGt4SiVrwFq6TXWNQD/8vb4bT5hR4V+EQhAKNG
aBo72BSZGD2KDwN5piacUiBK+vvxQCGdZAUUuqQvJ+sayMQpdQPZeMa2l4JZwXZB
Hb0gWyYbU/1lz1X38ORCs2hAiCxVRT9sbnXlGckCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSEnI1R/hSK5A5OeT5sTtZIvEEe6DAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L2hKeU5VZjRVaXVRT1Ruay1iRTdXU0x4Qkh1Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQA24QRzZsYa3S8fCWDZYiJBVR/rur+3540OKWbp
q2Ug4X35U6z5+dYs2ZUfV9dRkdrf0Meczqg8UuVSuuGAzg32pwr1TgzYn99z+8UM
MgUSBoSI4p62174SWWJUPUZP1EgJxq9I4c+2OkrYoNPN1Ih/qcO+Hdzjs/ytd+xx
s1jivoyjfkbZGx0RRbE6V4MRvnm+lqH8vI5WcY9tgqX/W3UrZ2WErBjwiAXgvf9q
x1XfiDiYkEXkvZHdueV2YXDY35MgKOFY+j6dMN+uW/EQF0w2hDP1yfd1j031RmUu
JPUX6uqTk0/la5P/hJJgrmUVy/SqktXxU4s/jHWgwr22SOMG
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:11 2025 by rpki-client