Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0J61teVaDJY8JP9lNqvh8XV6Dzk.roa
File: 0J61teVaDJY8JP9lNqvh8XV6Dzk.roa (raw, json)
Hash identifier: tqfFIMC96iluWLAS3ly349Y6EFiL9rAF9GYNaOkOKbg=
Subject key identifier: D0:9E:B5:B5:E5:5A:0C:96:3C:24:FF:65:36:AB:E1:F1:75:7A:0F:39
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182BDB7D6F9CE7EE0EC2ED2F7F891D23BDA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0J61teVaDJY8JP9lNqvh8XV6Dzk.roa
Signing time: Sun 21 Aug 2022 00:05:18 +0000
ROA not before: Sun 21 Aug 2022 00:05:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:bdb7:dd9/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:bd:b7:d6:f9:ce:7e:e0:ec:2e:d2:f7:f8:91:d2:3b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 21 00:05:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d09eb5b5e55a0c963c24ff6536abe1f1757a0f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c1:67:84:f3:74:5f:1c:65:d5:a6:33:3f:8d:
fd:24:8a:f3:a1:ef:34:bd:85:ff:9b:27:0e:6b:ba:
fd:27:0f:99:19:2a:40:f9:9f:d0:8d:9a:46:d1:b0:
9a:b7:86:24:1a:e1:01:87:bf:f2:6d:30:02:e8:1d:
aa:84:ca:7d:44:73:b9:e8:54:50:29:35:ed:43:fa:
76:7d:50:b8:d7:3f:b0:e8:2b:8b:65:07:48:0d:47:
c7:f6:da:86:6b:62:00:16:35:44:f0:14:7b:d6:e8:
dc:ee:cb:58:e2:44:bd:ff:9c:c8:86:60:c2:8a:d2:
32:dc:08:ce:1a:a0:76:9e:06:fc:f1:18:0b:c4:ac:
68:c3:5a:3b:f9:0d:3a:6d:29:9e:74:9a:64:35:ea:
79:49:89:09:8c:ec:2d:c0:0c:b0:d7:dd:fd:58:5e:
4c:91:01:85:cb:59:35:f2:73:fa:2d:c5:28:64:3b:
f2:e9:c4:75:2e:70:21:bc:f5:68:d5:72:ea:a8:5e:
ff:a7:3b:b1:cb:3c:3d:6d:33:4f:c6:83:ac:21:dc:
42:ed:79:31:f4:c1:5c:6b:2d:3e:51:6e:24:d0:a1:
61:fa:58:25:7f:5d:8f:2d:c2:f7:ee:ba:af:43:a9:
bd:87:c3:d5:7d:79:d7:67:b9:1a:5b:d1:b3:33:9d:
e1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9E:B5:B5:E5:5A:0C:96:3C:24:FF:65:36:AB:E1:F1:75:7A:0F:39
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0J61teVaDJY8JP9lNqvh8XV6Dzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:f4:e2:53:f9:ea:52:0e:d0:44:c4:8c:40:77:a9:83:9f:30:
07:9f:11:a2:b1:8f:40:12:4a:c6:47:6b:30:27:b1:76:3c:f9:
e6:e6:4a:18:10:45:44:ad:14:7c:9c:3b:a8:e0:2f:c8:c7:d1:
98:34:6f:e4:0a:88:e6:da:fc:9e:91:ca:cc:fb:86:a5:ab:c4:
33:0b:ed:e0:28:9a:24:6c:ec:cb:67:2e:c8:ff:a8:ce:ad:b1:
f1:08:b8:09:0b:7c:43:52:f0:33:c4:8a:4a:bd:54:e7:53:23:
25:46:88:cc:27:60:dc:40:6a:70:3e:23:a9:22:ae:1d:36:a2:
33:20:1c:83:8f:12:cf:04:d3:c2:c5:21:1e:79:cd:4d:38:0f:
06:6c:50:e0:c2:e7:db:ef:97:47:81:cb:3f:c9:6a:c1:a8:85:
59:18:6b:e3:6a:ac:55:8b:06:a1:5f:09:8e:f4:49:01:c8:56:
c2:ea:4f:0b:c1:a4:6c:91:06:8d:9a:ff:e8:6d:8c:05:48:7b:
92:98:43:bf:b9:67:ba:89:9c:50:86:3d:41:8e:1a:2a:39:e1:
f0:5f:89:0f:f3:fc:2d:42:f7:e7:c0:4d:fa:dc:42:4d:51:72:
d0:7f:a0:85:d1:68:0d:54:11:0c:f3:3b:61:af:82:5a:11:97:
3b:96:56:0b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYK9t9b5zn7g7C7S9/iR0jvaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODIxMDAwNTE4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDllYjViNWU1NWEwYzk2M2MyNGZmNjUzNmFiZTFmMTc1N2EwZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8FnhPN0Xxxl1aYzP439JIrzoe80
vYX/mycOa7r9Jw+ZGSpA+Z/QjZpG0bCat4YkGuEBh7/ybTAC6B2qhMp9RHO56FRQ
KTXtQ/p2fVC41z+w6CuLZQdIDUfH9tqGa2IAFjVE8BR71ujc7stY4kS9/5zIhmDC
itIy3AjOGqB2ngb88RgLxKxow1o7+Q06bSmedJpkNep5SYkJjOwtwAyw1939WF5M
kQGFy1k18nP6LcUoZDvy6cR1LnAhvPVo1XLqqF7/pzuxyzw9bTNPxoOsIdxC7Xkx
9MFcay0+UW4k0KFh+lglf12PLcL37rqvQ6m9h8PVfXnXZ7kaW9GzM53hqwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNCetbXlWgyWPCT/ZTar4fF1eg85MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMEo2MXRlVmFESlk4SlA5bE5xdmg4WFY2RHprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABr04lP56lIO0ETEjEB3
qYOfMAefEaKxj0ASSsZHazAnsXY8+ebmShgQRUStFHycO6jgL8jH0Zg0b+QKiOba
/J6Rysz7hqWrxDML7eAomiRs7MtnLsj/qM6tsfEIuAkLfENS8DPEikq9VOdTIyVG
iMwnYNxAanA+I6kirh02ojMgHIOPEs8E08LFIR55zU04DwZsUODC59vvl0eByz/J
asGohVkYa+NqrFWLBqFfCY70SQHIVsLqTwvBpGyRBo2a/+htjAVIe5KYQ7+5Z7qJ
nFCGPUGOGio54fBfiQ/z/C1C9+fATfrcQk1RctB/oIXRaA1UEQzzO2GvgloRlzuW
Vgs=
-----END CERTIFICATE-----
Generated at Tue Jun 10 20:24:15 2025 by rpki-client