Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yJ0k7Z3fiWwlz2lcVompnOmCEdg.roa
File: yJ0k7Z3fiWwlz2lcVompnOmCEdg.roa (raw, json)
Hash identifier: NDxBZX/nb7ni07iL8SO4c4dLCpZ22lXoTxEDjHSoqoA=
Subject key identifier: C8:9D:24:ED:9D:DF:89:6C:25:CF:69:5C:56:89:A9:9C:E9:82:11:D8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 90F4E0C3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yJ0k7Z3fiWwlz2lcVompnOmCEdg.roa
Signing time: Wed 29 Jun 2022 19:12:02 +0000
ROA not before: Wed 29 Jun 2022 19:12:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2431967427 (0x90f4e0c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 29 19:12:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c89d24ed9ddf896c25cf695c5689a99ce98211d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f4:1b:04:b2:f5:fc:84:2c:a0:ad:d6:2f:0a:
00:60:39:e7:d0:8c:16:72:83:26:a3:8d:cf:2f:22:
57:61:9d:0e:7a:02:17:59:70:e7:6f:eb:46:e9:bf:
fc:34:2a:db:01:6b:52:9c:ad:1a:2c:54:f6:12:3e:
5d:4b:c7:18:ae:6c:36:83:90:df:b3:07:4e:8c:08:
0d:ac:72:21:3a:bf:3e:23:5e:a8:3b:99:46:22:4c:
8c:2d:41:f0:08:38:d9:0a:ea:dd:10:b4:01:d7:71:
ae:79:28:a9:0a:4a:e8:81:55:f8:2a:53:a6:d0:93:
87:c9:f7:af:09:40:60:f2:b6:3f:45:3f:1f:ba:78:
8f:4b:0d:09:76:e8:f0:bb:54:2a:c9:32:f7:7a:ed:
da:a3:88:df:ff:5e:bc:50:4c:78:3e:fa:1b:19:5e:
10:53:ce:41:e0:0c:95:9f:9a:df:78:e9:c1:04:f5:
02:98:1b:52:0a:18:46:d4:63:0f:64:56:75:23:87:
54:83:c3:8c:27:56:c3:f4:15:11:f1:7e:d7:5a:9f:
4b:b2:0b:5f:b2:49:2b:50:01:9f:b2:c8:13:ae:ab:
13:20:ac:a4:a3:f7:8a:b1:63:f4:14:d0:ee:2d:9b:
cb:8d:99:ae:e3:e1:2a:55:93:e1:9e:e7:31:17:f2:
23:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9D:24:ED:9D:DF:89:6C:25:CF:69:5C:56:89:A9:9C:E9:82:11:D8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yJ0k7Z3fiWwlz2lcVompnOmCEdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:3a:5c:46:d5:e8:1b:db:34:92:20:9e:c1:fb:7b:cb:ff:7d:
cc:20:dc:cb:ee:6d:c1:b3:d3:13:f7:ca:85:51:34:28:f1:fa:
87:d5:09:cc:1c:9f:59:51:03:7f:91:e7:cd:fb:82:78:82:99:
cb:f0:fc:93:2a:43:6e:b8:e0:66:cd:8c:c8:cc:63:0b:73:2c:
a1:3a:bf:57:5d:bf:55:3f:6f:b6:9a:19:b1:56:ba:bc:f4:c2:
af:3d:65:4c:50:59:f8:d7:5b:c3:61:65:a6:6b:b7:40:46:83:
ac:e0:00:2e:f9:e7:30:6e:17:87:4d:a3:3c:55:4d:2a:f8:72:
90:7f:af:31:2e:53:88:74:18:1b:e2:4c:06:75:2c:70:c1:9b:
a6:e1:d0:b8:6d:b9:52:00:1d:a1:17:28:a3:a7:9f:02:a4:8e:
5e:42:f6:1c:81:cf:e3:36:72:10:dd:fa:53:99:7c:b0:ca:ce:
cf:ec:86:85:34:73:4e:23:d6:82:8e:08:78:ac:f2:61:28:80:
77:45:70:fd:84:ab:1e:cd:3a:30:88:26:cd:39:10:05:21:7b:
81:32:a3:c5:d4:0e:9d:91:58:fa:3f:3c:c0:40:0a:b7:67:5e:
d2:b6:d2:ee:6d:54:7e:13:16:ea:58:9b:74:4e:47:06:cb:37:
2f:30:86:1d
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAJD04MMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MjkxOTEyMDJaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGM4OWQyNGVkOWRk
Zjg5NmMyNWNmNjk1YzU2ODlhOTljZTk4MjExZDgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCV9BsEsvX8hCygrdYvCgBgOefQjBZygyajjc8vIldhnQ56
AhdZcOdv60bpv/w0KtsBa1KcrRosVPYSPl1LxxiubDaDkN+zB06MCA2sciE6vz4j
Xqg7mUYiTIwtQfAIONkK6t0QtAHXca55KKkKSuiBVfgqU6bQk4fJ968JQGDytj9F
Px+6eI9LDQl26PC7VCrJMvd67dqjiN//XrxQTHg++hsZXhBTzkHgDJWfmt946cEE
9QKYG1IKGEbUYw9kVnUjh1SDw4wnVsP0FRHxftdan0uyC1+ySStQAZ+yyBOuqxMg
rKSj94qxY/QU0O4tm8uNma7j4SpVk+Ge5zEX8iN3AgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUyJ0k7Z3fiWwlz2lcVompnOmCEdgwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS95SjBrN1ozZmlXd2x6MmxjVm9tcG5PbUNFZGcucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAgjpcRtXoG9s0kiCewft7y/99zCDcy+5twbPT
E/fKhVE0KPH6h9UJzByfWVEDf5HnzfuCeIKZy/D8kypDbrjgZs2MyMxjC3MsoTq/
V12/VT9vtpoZsVa6vPTCrz1lTFBZ+Ndbw2Flpmu3QEaDrOAALvnnMG4Xh02jPFVN
KvhykH+vMS5TiHQYG+JMBnUscMGbpuHQuG25UgAdoRcoo6efAqSOXkL2HIHP4zZy
EN36U5l8sMrOz+yGhTRzTiPWgo4IeKzyYSiAd0Vw/YSrHs06MIgmzTkQBSF7gTKj
xdQOnZFY+j88wEAKt2de0rbS7m1UfhMW6libdE5HBss3LzCGHQ==
-----END CERTIFICATE-----
Generated at Thu May 1 00:42:12 2025 by rpki-client