Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yhDoOuQhJJpQSqzPKE2QkSRQgXo.roa
File: yhDoOuQhJJpQSqzPKE2QkSRQgXo.roa (raw, json)
Hash identifier: iEQQA3zGLT2ZDqAENpG/LKkYyJ+QAOu49dMkFAWsgjs=
Subject key identifier: CA:10:E8:3A:E4:21:24:9A:50:4A:AC:CF:28:4D:90:91:24:50:81:7A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 796E4A80
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yhDoOuQhJJpQSqzPKE2QkSRQgXo.roa
Signing time: Fri 08 Apr 2022 04:16:22 +0000
ROA not before: Fri 08 Apr 2022 04:16:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2037271168 (0x796e4a80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 8 04:16:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca10e83ae421249a504aaccf284d90912450817a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c8:50:43:e6:19:64:c9:e2:d5:7a:d5:78:28:
bc:b9:56:e3:50:98:5d:79:d1:73:13:9f:b2:8f:45:
fa:a5:8d:95:52:72:f0:be:58:d2:ae:e5:80:16:6d:
fb:e9:db:3f:79:a5:ae:04:62:8a:41:cc:df:1e:28:
09:c9:6c:0a:d5:9d:7e:e1:4a:50:0a:a1:f9:29:ad:
7b:7c:60:0f:f4:32:bf:22:51:f6:2a:f8:6b:76:90:
ce:fe:be:5e:82:cf:24:41:7f:4c:50:de:41:42:13:
a4:45:50:b9:17:01:9a:cc:94:fe:be:b3:c8:34:c2:
77:a2:fd:c0:d9:d4:d6:4a:27:bc:df:0a:95:6d:89:
10:51:9b:41:bb:6d:e2:95:2d:42:fc:d8:4e:7f:59:
9f:3b:1e:b3:c3:68:04:b1:d2:b6:44:35:fb:8d:69:
93:ee:2c:61:ba:bd:88:7e:1b:df:5a:8e:e3:88:1a:
48:9f:4d:5b:4e:8c:fc:d4:6f:d8:a6:16:3e:36:5a:
8c:92:25:20:d7:f3:74:b4:59:7a:a5:a8:f8:dd:9d:
dd:af:7b:9b:81:f2:f8:9e:4c:83:f0:cf:e6:12:24:
0d:5d:27:1b:15:7b:58:64:9a:a0:d0:e2:58:a4:76:
46:73:3d:ca:cb:71:54:ac:e3:86:3b:17:ed:32:f0:
42:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:10:E8:3A:E4:21:24:9A:50:4A:AC:CF:28:4D:90:91:24:50:81:7A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yhDoOuQhJJpQSqzPKE2QkSRQgXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:13:72:3a:cf:aa:92:bd:07:1d:16:41:94:e6:40:9d:8b:d8:
03:55:31:1d:c6:15:02:87:2a:f6:17:57:aa:bf:3b:62:e9:7c:
5f:4e:8a:7b:09:4c:c1:d5:00:7f:e3:ae:79:be:52:55:a7:7b:
87:3b:f0:7c:e1:dc:06:3f:01:e1:4b:b5:05:19:33:65:69:ec:
02:5c:a4:9d:46:21:3e:d4:79:25:e9:95:30:bf:5e:3f:5f:9d:
f7:36:08:ad:9f:8a:f0:d6:83:7b:68:d8:3d:cd:15:59:79:34:
e1:b6:3e:31:d3:84:60:db:a0:ea:14:03:9f:75:72:8e:04:80:
ea:a9:2b:57:c8:5f:9b:78:92:5a:8a:3f:82:da:68:33:d4:a0:
cf:9f:f0:4a:b2:5a:f4:54:40:19:c3:12:3c:ee:97:4e:d1:51:
3b:f0:93:39:26:11:3c:da:8a:27:bc:ba:8c:a4:dd:2e:f2:f7:
6f:59:67:b0:6e:f5:6c:c5:1e:ad:39:a4:56:e0:ae:4c:7a:e2:
0f:db:78:f5:bc:1d:82:de:0d:54:13:c5:76:21:fb:bc:bd:98:
b4:80:45:9c:6a:88:7d:1f:0a:f9:57:4a:85:22:32:bf:ee:74:
4b:5f:87:f4:92:c1:f4:5e:de:98:b1:d3:e7:73:fc:64:34:a1:
3e:c7:42:70
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEeW5KgDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDQw
ODA0MTYyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2ExMGU4M2FlNDIx
MjQ5YTUwNGFhY2NmMjg0ZDkwOTEyNDUwODE3YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKDIUEPmGWTJ4tV61XgovLlW41CYXXnRcxOfso9F+qWNlVJy
8L5Y0q7lgBZt++nbP3mlrgRiikHM3x4oCclsCtWdfuFKUAqh+Smte3xgD/QyvyJR
9ir4a3aQzv6+XoLPJEF/TFDeQUITpEVQuRcBmsyU/r6zyDTCd6L9wNnU1konvN8K
lW2JEFGbQbtt4pUtQvzYTn9Znzses8NoBLHStkQ1+41pk+4sYbq9iH4b31qO44ga
SJ9NW06M/NRv2KYWPjZajJIlINfzdLRZeqWo+N2d3a97m4Hy+J5Mg/DP5hIkDV0n
GxV7WGSaoNDiWKR2RnM9ystxVKzjhjsX7TLwQqsCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTKEOg65CEkmlBKrM8oTZCRJFCBejAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L3loRG9PdVFoSkpwUVNxelBLRTJRa1NSUWdYby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCTE3I6z6qSvQcdFkGU5kCdi9gDVTEdxhUChyr2
F1eqvzti6XxfTop7CUzB1QB/4655vlJVp3uHO/B84dwGPwHhS7UFGTNlaewCXKSd
RiE+1Hkl6ZUwv14/X533Ngitn4rw1oN7aNg9zRVZeTThtj4x04Rg26DqFAOfdXKO
BIDqqStXyF+beJJaij+C2mgz1KDPn/BKslr0VEAZwxI87pdO0VE78JM5JhE82oon
vLqMpN0u8vdvWWewbvVsxR6tOaRW4K5MeuIP23j1vB2C3g1UE8V2Ifu8vZi0gEWc
aoh9Hwr5V0qFIjK/7nRLX4f0ksH0Xt6YsdPnc/xkNKE+x0Jw
-----END CERTIFICATE-----
Generated at Fri May 2 13:43:10 2025 by rpki-client