Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0nxFXxJ6-9y-oMCW18JeEH9dDKY.roa
File: 0nxFXxJ6-9y-oMCW18JeEH9dDKY.roa (raw, json)
Hash identifier: FgqZ9+0hcR1gL8l1bwlOeYYoziY5P/OQMTyp1/TR9Ow=
Subject key identifier: D2:7C:45:5F:12:7A:FB:DC:BE:A0:C0:96:D7:C2:5E:10:7F:5D:0C:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 69E1C986
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0nxFXxJ6-9y-oMCW18JeEH9dDKY.roa
Signing time: Sat 12 Feb 2022 04:08:18 +0000
ROA not before: Sat 12 Feb 2022 04:08:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1776404870 (0x69e1c986)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 12 04:08:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d27c455f127afbdcbea0c096d7c25e107f5d0ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3f:c0:f0:ec:bf:0b:43:14:b6:73:ba:84:c9:
b7:1f:5d:58:05:a4:5c:39:1c:07:72:eb:34:56:15:
28:13:ae:5a:1f:18:5f:ef:35:5b:8e:83:70:3e:5d:
47:ae:e9:3d:a8:a1:89:8c:81:e9:87:bd:c4:cf:29:
76:42:f8:6c:f6:f6:7a:55:de:cf:35:1e:92:0c:d3:
fc:06:96:50:fa:51:e7:20:2a:91:dc:81:30:42:bb:
8e:17:31:3a:e6:d0:78:d7:fb:bc:fe:75:40:ac:d9:
6b:b1:25:98:81:24:5c:b1:19:f8:40:cc:32:6c:54:
13:16:7c:a7:ec:f2:1b:cc:1c:d0:93:e7:5f:80:09:
49:dd:29:c7:00:43:83:64:ce:03:1e:35:4c:58:e9:
b6:2c:94:4a:21:91:00:7d:39:de:b3:57:f5:c1:57:
b3:a6:c3:46:ff:39:fa:dd:00:ec:a3:86:06:a8:a9:
c7:18:34:79:f7:8d:75:d7:b5:f4:0e:8c:69:f2:3c:
0f:21:94:77:fb:a6:19:71:e8:e4:77:42:ad:7f:6c:
f3:9c:2e:98:e9:7e:b3:b0:3e:54:44:0e:4d:55:e1:
cd:a4:dc:fe:fd:76:f3:a8:4a:5f:5d:f2:ae:a3:29:
5e:70:2a:26:99:07:c5:6e:3e:18:3f:4a:e9:06:69:
fc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7C:45:5F:12:7A:FB:DC:BE:A0:C0:96:D7:C2:5E:10:7F:5D:0C:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0nxFXxJ6-9y-oMCW18JeEH9dDKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:25:84:d1:30:d6:c1:d3:10:4c:ea:99:79:5d:5f:2d:8e:30:
9f:4b:f5:e8:14:7a:fb:62:6b:b9:b4:81:59:50:48:82:18:0b:
ab:0f:07:06:95:0c:e1:14:e8:98:5d:49:10:b8:cf:dd:ca:30:
3c:ed:40:82:33:53:23:97:7f:6f:97:bb:4d:ef:7b:f7:12:b1:
38:15:ba:4b:74:c8:75:6b:c4:77:5f:2e:aa:2b:08:8c:bd:54:
4b:7c:fa:c0:27:b5:a6:07:52:be:03:68:3f:44:1f:d5:98:c3:
c1:2e:e4:99:5a:f0:43:c1:45:ae:e7:9f:75:25:88:a2:12:37:
de:69:58:c1:d5:98:12:06:28:cd:fb:85:df:3b:ea:dd:e7:ed:
4e:89:e6:aa:a1:44:7d:c3:80:c6:80:a1:60:68:e7:6b:9c:6d:
1a:79:7a:13:f6:47:3f:fc:0a:c1:96:ff:73:5e:63:c6:24:39:
80:3e:65:6a:05:c8:7b:6f:1b:fe:a7:e9:6d:4e:8f:e4:d6:f5:
f2:a6:1b:30:d5:96:12:6d:7d:71:33:8c:52:07:1e:09:e3:a2:
36:14:b1:e8:0f:7a:f5:ad:46:f5:80:80:85:bb:51:47:35:a3:
7f:29:33:f6:87:5b:74:4d:88:1f:59:18:6e:4a:6c:0c:fc:6d:
32:4f:8c:12
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEaeHJhjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIx
MjA0MDgxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDI3YzQ1NWYxMjdh
ZmJkY2JlYTBjMDk2ZDdjMjVlMTA3ZjVkMGNhNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKY/wPDsvwtDFLZzuoTJtx9dWAWkXDkcB3LrNFYVKBOuWh8Y
X+81W46DcD5dR67pPaihiYyB6Ye9xM8pdkL4bPb2elXezzUekgzT/AaWUPpR5yAq
kdyBMEK7jhcxOubQeNf7vP51QKzZa7ElmIEkXLEZ+EDMMmxUExZ8p+zyG8wc0JPn
X4AJSd0pxwBDg2TOAx41TFjptiyUSiGRAH053rNX9cFXs6bDRv85+t0A7KOGBqip
xxg0efeNdde19A6MafI8DyGUd/umGXHo5HdCrX9s85wumOl+s7A+VEQOTVXhzaTc
/v1286hKX13yrqMpXnAqJpkHxW4+GD9K6QZp/EUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTSfEVfEnr73L6gwJbXwl4Qf10MpjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
LzBueEZYeEo2LTl5LW9NQ1cxOEplRUg5ZERLWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCxJYTRMNbB0xBM6pl5XV8tjjCfS/XoFHr7Ymu5
tIFZUEiCGAurDwcGlQzhFOiYXUkQuM/dyjA87UCCM1Mjl39vl7tN73v3ErE4FbpL
dMh1a8R3Xy6qKwiMvVRLfPrAJ7WmB1K+A2g/RB/VmMPBLuSZWvBDwUWu5591JYii
EjfeaVjB1ZgSBijN+4XfO+rd5+1OieaqoUR9w4DGgKFgaOdrnG0aeXoT9kc//ArB
lv9zXmPGJDmAPmVqBch7bxv+p+ltTo/k1vXyphsw1ZYSbX1xM4xSBx4J46I2FLHo
D3r1rUb1gICFu1FHNaN/KTP2h1t0TYgfWRhuSmwM/G0yT4wS
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:19:35 2025 by rpki-client