Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0QruhC0Hxuxwtn-Xd5oMfAwbeTQ.roa
File: 0QruhC0Hxuxwtn-Xd5oMfAwbeTQ.roa (raw, json)
Hash identifier: qcOsG6NMZI4640Y6ThK25UVRuwcQqhj0KV6b2JEC8eU=
Subject key identifier: D1:0A:EE:84:2D:07:C6:EC:70:B6:7F:97:77:9A:0C:7C:0C:1B:79:34
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018541ADB5D6627BF237964EAAF9669F7AFF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0QruhC0Hxuxwtn-Xd5oMfAwbeTQ.roa
Signing time: Sat 24 Dec 2022 01:09:41 +0000
ROA not before: Sat 24 Dec 2022 01:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:41:ad:b5:d6:62:7b:f2:37:96:4e:aa:f9:66:9f:7a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 24 01:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d10aee842d07c6ec70b67f97779a0c7c0c1b7934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0e:a1:b3:a1:8d:4a:9e:e7:48:04:45:c7:fb:
e0:db:60:ca:53:de:60:5c:71:a2:9a:ab:fe:d5:a0:
46:50:6b:49:a6:74:ae:e8:c9:22:a6:7b:18:54:dc:
97:1f:2b:d2:3b:80:3e:40:03:40:f3:97:fa:d0:90:
e8:bd:3d:d5:81:fa:39:4f:f3:63:5f:df:48:58:7b:
c2:46:45:23:e8:74:47:27:ba:d2:e4:9e:9d:d1:d8:
43:fa:73:fc:96:66:c5:96:7e:f1:ab:25:75:c6:5f:
52:2b:bd:21:82:cf:60:e5:2f:12:88:a6:36:70:32:
10:33:fc:10:7c:76:a7:79:94:d8:17:db:bb:96:73:
25:f3:81:83:32:87:5a:2d:ff:b0:99:76:f4:16:29:
f8:5d:69:1b:31:7c:27:ab:6b:b0:dd:bf:84:98:ca:
1a:a9:76:85:d8:bf:2f:ed:84:0b:12:d8:a4:33:cc:
11:1d:46:2c:40:3c:fc:90:d0:88:7f:a0:0c:8e:8e:
4e:6d:13:1b:92:8b:cd:f3:91:bc:04:57:93:a3:ba:
26:39:ea:a1:c0:a4:19:ba:af:36:18:d9:86:9a:75:
42:c5:0d:d2:d4:73:3a:e1:6d:dd:2e:4a:12:33:a6:
fa:8d:ac:87:df:54:3a:45:79:83:07:04:d7:f7:1b:
57:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0A:EE:84:2D:07:C6:EC:70:B6:7F:97:77:9A:0C:7C:0C:1B:79:34
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0QruhC0Hxuxwtn-Xd5oMfAwbeTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:3e:df:23:ec:a6:be:0c:92:f5:7b:ec:26:87:8e:f6:59:51:
25:3f:ca:66:6e:d0:fa:2a:5a:5c:6e:52:f2:1a:7c:9a:e3:4f:
3a:54:67:f4:db:e0:b2:e3:b0:b6:fa:95:79:01:91:41:ec:7c:
f0:2e:54:1e:f0:ef:05:6a:46:f4:ce:79:33:c9:b3:58:c1:65:
92:2f:41:df:29:99:ce:b0:8a:8f:71:ea:9d:e6:b8:a6:36:0b:
2a:bc:df:c4:83:ca:81:e9:cc:58:fd:8c:33:6d:12:e7:fb:da:
48:51:e2:77:cf:7c:7c:66:25:1c:61:98:93:ba:79:00:25:82:
e3:03:d7:fe:86:1e:ea:8c:f6:7b:74:77:9a:14:b6:3c:76:2b:
38:8b:52:9e:63:d3:da:ca:93:47:9b:33:53:bf:6c:a4:fc:eb:
fe:a8:44:75:56:dd:d9:25:ca:6b:28:9e:3e:b8:92:34:92:3a:
62:a4:0d:38:0c:16:f8:89:0e:62:ed:7c:bc:13:cd:21:71:bf:
86:11:77:a5:6f:1f:d8:59:1f:e0:2d:ec:01:52:99:52:62:53:
b0:7c:db:22:61:dd:e0:51:3a:19:2b:c9:bb:2b:cc:27:48:84:
da:ce:b8:c7:ff:da:2e:e5:d7:41:f8:e4:d9:bc:83:9b:d7:10:
a0:74:37:71
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVBrbXWYnvyN5ZOqvlmn3r/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjI0MDEwOTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTBhZWU4NDJkMDdjNmVjNzBiNjdmOTc3NzlhMGM3YzBjMWI3OTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ6hs6GNSp7nSARFx/vg22DKU95g
XHGimqv+1aBGUGtJpnSu6MkipnsYVNyXHyvSO4A+QANA85f60JDovT3Vgfo5T/Nj
X99IWHvCRkUj6HRHJ7rS5J6d0dhD+nP8lmbFln7xqyV1xl9SK70hgs9g5S8SiKY2
cDIQM/wQfHaneZTYF9u7lnMl84GDModaLf+wmXb0Fin4XWkbMXwnq2uw3b+EmMoa
qXaF2L8v7YQLEtikM8wRHUYsQDz8kNCIf6AMjo5ObRMbkovN85G8BFeTo7omOeqh
wKQZuq82GNmGmnVCxQ3S1HM64W3dLkoSM6b6jayH31Q6RXmDBwTX9xtXqQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNEK7oQtB8bscLZ/l3eaDHwMG3k0MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMFFydWhDMEh4dXh3dG4tWGQ1b01mQXdiZVRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJk+3yPspr4MkvV77CaH
jvZZUSU/ymZu0PoqWlxuUvIafJrjTzpUZ/Tb4LLjsLb6lXkBkUHsfPAuVB7w7wVq
RvTOeTPJs1jBZZIvQd8pmc6wio9x6p3muKY2Cyq838SDyoHpzFj9jDNtEuf72khR
4nfPfHxmJRxhmJO6eQAlguMD1/6GHuqM9nt0d5oUtjx2KziLUp5j09rKk0ebM1O/
bKT86/6oRHVW3dklymsonj64kjSSOmKkDTgMFviJDmLtfLwTzSFxv4YRd6VvH9hZ
H+At7AFSmVJiU7B82yJh3eBROhkrybsrzCdIhNrOuMf/2i7l10H45Nm8g5vXEKB0
N3E=
-----END CERTIFICATE-----
Generated at Wed Jun 11 06:58:05 2025 by rpki-client