Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n-yQWJ2KRX2jT4YmBZNR8znPj34.roa
File: n-yQWJ2KRX2jT4YmBZNR8znPj34.roa (raw, json)
Hash identifier: ZME+TA1k+sVFmJmM0VK9WtDpfJteAUJ63P1VOIFWvWs=
Subject key identifier: 9F:EC:90:58:9D:8A:45:7D:A3:4F:86:26:05:93:51:F3:39:CF:8F:7E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8AA2A570
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n-yQWJ2KRX2jT4YmBZNR8znPj34.roa
Signing time: Tue 07 Jun 2022 07:14:20 +0000
ROA not before: Tue 07 Jun 2022 07:14:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2325914992 (0x8aa2a570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 7 07:14:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fec90589d8a457da34f8626059351f339cf8f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8d:ef:ed:ed:d5:39:ff:a3:fc:ea:0e:ac:12:
06:2f:86:19:47:f7:fd:b2:fd:d8:f8:bf:24:9e:39:
59:db:4e:9a:dd:e9:fc:d2:16:60:85:a7:2b:85:e9:
47:09:93:5c:cc:75:a6:5a:46:94:b3:1d:f8:76:31:
3f:29:62:86:0e:65:6d:0e:9b:69:4a:12:e6:e8:6e:
c4:7b:98:56:cc:e3:54:1d:d6:c9:51:92:2a:57:87:
05:e7:54:b4:8b:fc:e8:be:5c:1a:55:5f:01:e6:ee:
d0:a9:b5:4d:db:c0:9f:24:e3:91:39:e5:c9:8b:c1:
75:bd:77:b0:90:b3:a3:58:dc:16:4c:02:7b:90:bb:
9a:10:1c:81:b7:03:8c:c4:25:27:a2:b3:d2:84:8e:
83:55:3a:1d:ad:2a:8c:62:09:17:1a:bd:cc:67:41:
9f:c9:8e:0b:ec:be:cf:35:d4:67:ba:d7:ef:2b:69:
9f:e5:a0:98:67:4c:49:cc:7b:a8:ad:12:21:bd:81:
2f:dc:08:28:05:bf:22:91:af:16:c9:8f:91:6c:e3:
6a:75:dd:2b:09:61:f2:82:62:ca:c3:cd:ff:b2:0a:
0d:2f:68:50:9e:a8:3b:fc:93:51:15:3d:7a:0c:a0:
db:a9:e1:37:70:ea:ee:f5:28:84:ea:8d:ab:79:cc:
f6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EC:90:58:9D:8A:45:7D:A3:4F:86:26:05:93:51:F3:39:CF:8F:7E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n-yQWJ2KRX2jT4YmBZNR8znPj34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:5b:b2:f4:c8:36:cb:d2:da:50:a7:07:95:37:13:d9:4e:50:
17:d8:3c:8e:c3:3c:99:cd:c2:c4:aa:6b:86:ae:3b:bf:4f:99:
da:8c:89:2a:60:8c:ef:22:5d:60:74:87:2a:9f:04:95:64:9b:
dc:01:21:5a:cd:fe:ea:67:d7:16:8f:92:24:2b:62:c2:f4:a3:
94:e0:3d:06:1d:a4:b7:da:5f:30:31:4b:2b:60:10:d1:06:db:
6b:43:ee:15:9f:96:04:2f:10:5d:01:99:1d:a4:ae:e1:35:6f:
34:fc:3e:40:66:d7:3a:39:43:9e:11:c1:06:bf:21:e9:3e:d3:
e3:3a:a9:7e:79:ad:4c:7f:91:bd:08:ce:75:de:72:0c:00:ca:
8b:f4:d1:58:3a:06:0b:4c:a0:76:5f:9d:d5:80:5e:02:7e:31:
c6:69:53:1f:45:a0:89:bb:9a:fe:62:0b:d6:1d:7e:d9:fd:a6:
93:6c:9d:cc:d3:10:19:f5:8d:6c:f5:27:d4:65:7d:d7:b0:85:
2e:9f:f9:0f:2f:ab:5a:5d:ac:93:73:20:64:d1:52:43:9a:fe:
32:f1:e7:62:f8:04:26:2d:ea:5b:27:5a:1c:ff:b2:b2:ff:d6:
68:75:86:ed:a2:47:2b:e8:cb:4b:ee:63:0d:fa:15:68:65:0a:
91:2f:60:7f
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIqipXAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MDcwNzE0MjBaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDlmZWM5MDU4OWQ4
YTQ1N2RhMzRmODYyNjA1OTM1MWYzMzljZjhmN2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDMje/t7dU5/6P86g6sEgYvhhlH9/2y/dj4vySeOVnbTprd
6fzSFmCFpyuF6UcJk1zMdaZaRpSzHfh2MT8pYoYOZW0Om2lKEubobsR7mFbM41Qd
1slRkipXhwXnVLSL/Oi+XBpVXwHm7tCptU3bwJ8k45E55cmLwXW9d7CQs6NY3BZM
AnuQu5oQHIG3A4zEJSeis9KEjoNVOh2tKoxiCRcavcxnQZ/Jjgvsvs811Ge61+8r
aZ/loJhnTEnMe6itEiG9gS/cCCgFvyKRrxbJj5Fs42p13SsJYfKCYsrDzf+yCg0v
aFCeqDv8k1EVPXoMoNup4Tdw6u71KITqjat5zPYxAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUn+yQWJ2KRX2jT4YmBZNR8znPj34wHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9uLXlRV0oyS1JYMmpUNFltQlpOUjh6blBqMzQucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAaVuy9Mg2y9LaUKcHlTcT2U5QF9g8jsM8mc3C
xKprhq47v0+Z2oyJKmCM7yJdYHSHKp8ElWSb3AEhWs3+6mfXFo+SJCtiwvSjlOA9
Bh2kt9pfMDFLK2AQ0Qbba0PuFZ+WBC8QXQGZHaSu4TVvNPw+QGbXOjlDnhHBBr8h
6T7T4zqpfnmtTH+RvQjOdd5yDADKi/TRWDoGC0ygdl+d1YBeAn4xxmlTH0Wgibua
/mIL1h1+2f2mk2ydzNMQGfWNbPUn1GV917CFLp/5Dy+rWl2sk3MgZNFSQ5r+MvHn
YvgEJi3qWydaHP+ysv/WaHWG7aJHK+jLS+5jDfoVaGUKkS9gfw==
-----END CERTIFICATE-----
Generated at Thu May 1 07:23:08 2025 by rpki-client