Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0GdOXSuILQSIwU-mCniP2zUUYUE.roa
File: 0GdOXSuILQSIwU-mCniP2zUUYUE.roa (raw, json)
Hash identifier: ySDR/emzrHyQy1SMPCtQeys1jG55tn4SZGxyiHL1qek=
Subject key identifier: D0:67:4E:5D:2B:88:2D:04:88:C1:4F:A6:0A:78:8F:DB:35:14:61:41
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185C75BCA699A6A52C6A2F95C4A70A70AE3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0GdOXSuILQSIwU-mCniP2zUUYUE.roa
Signing time: Thu 19 Jan 2023 00:09:19 +0000
ROA not before: Thu 19 Jan 2023 00:09:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c7:5b:ca:69:9a:6a:52:c6:a2:f9:5c:4a:70:a7:0a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 19 00:09:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0674e5d2b882d0488c14fa60a788fdb35146141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c1:80:39:5b:55:58:8d:b7:a3:a1:92:e5:ff:
a8:83:2c:fe:83:cf:c2:0c:e6:57:40:0c:ff:89:00:
38:72:43:34:c3:cf:b4:85:8e:d2:ef:27:6e:69:21:
88:d3:a3:80:83:01:8a:2d:f9:c9:dd:e3:15:c5:ba:
24:50:90:6e:8d:d5:20:43:b1:70:79:89:4c:0d:f6:
7b:48:bd:15:fb:d8:62:6d:59:17:1c:1e:48:38:ae:
b2:eb:bd:bd:77:9c:70:7e:a1:95:db:ca:39:2d:97:
eb:be:15:46:81:23:41:c0:c3:6f:77:d7:f8:f5:95:
cc:8b:01:35:40:50:76:76:0d:21:6a:44:ef:98:f2:
91:d2:f7:c1:c4:ba:ec:fa:e3:03:6b:7c:b5:66:c0:
25:d5:e7:53:c7:80:e9:96:2d:29:50:0d:68:86:86:
34:7a:79:ee:0d:19:66:98:38:16:dd:b3:2a:16:1d:
88:72:c3:48:d4:48:17:6b:ef:ca:45:6e:85:d5:01:
41:6e:30:4b:2a:fe:1b:a9:71:9b:c3:3f:f7:ca:03:
1c:76:23:28:9b:4f:c7:02:9a:2a:84:38:1e:19:6f:
ef:9c:f2:53:9c:c5:c9:1d:d4:e4:13:b5:f1:8c:2c:
a9:2e:0a:55:e7:5c:fa:4c:f1:f0:f4:03:b5:32:ef:
d9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:67:4E:5D:2B:88:2D:04:88:C1:4F:A6:0A:78:8F:DB:35:14:61:41
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0GdOXSuILQSIwU-mCniP2zUUYUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:d3:56:ff:1c:b3:df:b1:57:58:42:22:f9:49:a3:b7:61:97:
34:a8:58:6f:2a:49:0c:66:94:bf:a4:26:54:fc:ff:13:9f:8a:
56:87:fa:4c:97:67:56:02:f9:67:1c:4c:3b:5f:60:c6:4d:3d:
52:8c:66:4a:26:e4:c8:4f:14:b8:df:7f:08:8a:18:11:a2:28:
6d:b7:85:00:ec:94:9c:13:10:65:41:cf:6e:de:ba:3d:4a:2e:
9b:fd:a2:26:20:d0:29:b5:1d:fb:1f:7a:df:83:56:28:e6:7a:
dd:73:56:87:4a:ef:fc:2e:c1:d9:79:40:70:69:d5:08:45:3b:
78:8d:39:1f:ea:73:de:fe:ef:85:95:8e:2c:88:90:ba:98:b7:
28:00:11:f9:ab:ef:eb:1f:28:0d:d6:97:dd:97:34:62:a2:17:
02:b2:8c:55:8d:01:9d:d6:a3:e7:c3:bc:ad:d7:5a:8a:b1:7a:
10:73:d2:10:fa:90:a7:a3:d6:bb:83:67:4d:e8:fa:d7:79:6a:
3f:29:c1:22:c2:44:ac:cf:82:14:a8:22:ec:fa:28:55:9a:b2:
d1:50:9e:6f:41:93:2c:98:65:20:b8:12:13:7c:00:05:53:3d:
7c:98:f8:61:a8:ae:56:59:47:0d:4f:45:47:e4:e1:48:f4:8f:
99:83:88:ea
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYXHW8ppmmpSxqL5XEpwpwrjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTE5MDAwOTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDY3NGU1ZDJiODgyZDA0ODhjMTRmYTYwYTc4OGZkYjM1MTQ2MTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8GAOVtVWI23o6GS5f+ogyz+g8/C
DOZXQAz/iQA4ckM0w8+0hY7S7yduaSGI06OAgwGKLfnJ3eMVxbokUJBujdUgQ7Fw
eYlMDfZ7SL0V+9hibVkXHB5IOK6y6729d5xwfqGV28o5LZfrvhVGgSNBwMNvd9f4
9ZXMiwE1QFB2dg0hakTvmPKR0vfBxLrs+uMDa3y1ZsAl1edTx4Dpli0pUA1ohoY0
ennuDRlmmDgW3bMqFh2IcsNI1EgXa+/KRW6F1QFBbjBLKv4bqXGbwz/3ygMcdiMo
m0/HApoqhDgeGW/vnPJTnMXJHdTkE7XxjCypLgpV51z6TPHw9AO1Mu/ZewIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNBnTl0riC0EiMFPpgp4j9s1FGFBMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMEdkT1hTdUlMUVNJd1UtbUNuaVAyelVVWVVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADXTVv8cs9+xV1hCIvlJ
o7dhlzSoWG8qSQxmlL+kJlT8/xOfilaH+kyXZ1YC+WccTDtfYMZNPVKMZkom5MhP
FLjffwiKGBGiKG23hQDslJwTEGVBz27euj1KLpv9oiYg0Cm1Hfsfet+DVijmet1z
VodK7/wuwdl5QHBp1QhFO3iNOR/qc97+74WVjiyIkLqYtygAEfmr7+sfKA3Wl92X
NGKiFwKyjFWNAZ3Wo+fDvK3XWoqxehBz0hD6kKej1ruDZ03o+td5aj8pwSLCRKzP
ghSoIuz6KFWastFQnm9BkyyYZSC4EhN8AAVTPXyY+GGorlZZRw1PRUfk4Uj0j5mD
iOo=
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:19:25 2025 by rpki-client