Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-c2aOfyLUApQQLy0_n5wRsEz474.roa
File: 1-c2aOfyLUApQQLy0_n5wRsEz474.roa (raw, json)
Hash identifier: sX1yFDRL1YLHDYU0sbMmQbCXTBqOakQr8i0cVGnWAWI=
Subject key identifier: F9:CD:9A:39:FC:8B:50:0A:50:40:BC:B4:FE:7E:70:46:C1:33:E3:BE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01856A72BB3ED0D0982784C47EA811068092
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-c2aOfyLUApQQLy0_n5wRsEz474.roa
Signing time: Sat 31 Dec 2022 23:09:41 +0000
ROA not before: Sat 31 Dec 2022 23:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:72:bb:3e:d0:d0:98:27:84:c4:7e:a8:11:06:80:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 31 23:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9cd9a39fc8b500a5040bcb4fe7e7046c133e3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:75:2b:b7:47:12:db:ad:b3:bb:31:91:23:58:
e5:a4:27:28:8f:e8:ca:e0:e0:3d:7c:7b:72:f5:d9:
dd:1d:60:18:fd:48:fd:06:9b:11:91:22:9d:2e:9e:
44:98:2f:1d:c0:a0:d9:6b:b2:d0:aa:0d:76:e4:17:
7d:46:fd:17:d3:f5:61:5c:d0:6a:82:62:8f:5e:5a:
9b:a3:93:01:53:46:7a:56:24:1a:66:c8:5a:b9:c9:
45:39:aa:5b:c3:e1:ec:55:f5:10:d9:13:7a:f2:49:
29:69:ae:9b:0a:ac:44:65:d4:0f:2f:35:4f:89:b3:
8e:b5:43:cb:50:c5:92:19:2e:89:81:fa:8b:b2:b5:
06:d7:5a:e6:ce:57:33:af:ac:bc:9f:8f:bc:39:fb:
2e:3a:f8:f7:31:1f:36:70:19:0d:92:63:49:1b:66:
e1:d0:8e:48:6b:71:c6:69:9a:92:e2:25:8d:96:84:
94:a1:fb:87:45:f8:fd:af:cb:14:a9:bc:b6:83:cc:
fc:52:15:bb:ae:3c:83:93:9a:a6:b9:d6:1a:e9:7b:
8a:2d:a1:9e:ca:48:a9:01:77:18:f7:01:66:7b:50:
8e:99:e4:0d:07:c6:9d:0b:46:95:51:5b:3a:dd:9a:
e4:40:ea:86:ce:93:c6:f7:54:e9:6b:45:93:70:0e:
3b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CD:9A:39:FC:8B:50:0A:50:40:BC:B4:FE:7E:70:46:C1:33:E3:BE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-c2aOfyLUApQQLy0_n5wRsEz474.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:19:9c:7b:02:01:0d:40:0e:73:be:37:d2:d5:38:bf:18:97:
38:13:30:f3:74:96:16:f1:98:e7:80:bb:6f:12:97:43:b2:a3:
ee:fd:32:79:6c:91:75:4b:ac:52:5c:3d:0a:bd:3e:00:0d:54:
46:07:28:eb:fc:41:20:50:8a:dd:d6:06:d3:b2:e2:39:a1:71:
3a:29:32:9a:e8:13:0e:fa:3b:91:33:84:c7:fb:d5:5e:ea:ae:
86:b5:29:02:53:fe:c7:2e:b8:11:ee:88:38:e0:0a:9e:1c:d8:
da:2b:6a:9c:6e:a6:ef:ce:3c:83:78:07:83:92:48:25:9f:dc:
4f:7d:c9:95:ab:83:04:21:2b:aa:2f:4c:25:57:19:e0:f2:49:
60:ad:1c:d8:8d:a8:26:a0:d2:7b:ca:8b:30:58:30:90:ec:b4:
c3:b9:37:65:44:37:2f:ec:ac:f3:07:d9:2a:29:6a:56:d1:ae:
e3:25:66:93:c6:e4:2e:7b:bd:46:26:81:01:b2:48:89:0d:2b:
58:5e:b3:d7:9b:7f:19:20:0e:18:87:70:86:4d:91:47:1b:2a:
47:85:d7:0b:94:30:d1:3a:ac:57:e6:a2:6e:ac:20:a7:68:c8:
c5:c2:4b:92:24:9b:af:f7:df:c3:f7:f8:ac:97:d3:36:f1:6f:
b7:b7:98:a9
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVqcrs+0NCYJ4TEfqgRBoCSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjMxMjMwOTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWNkOWEzOWZjOGI1MDBhNTA0MGJjYjRmZTdlNzA0NmMxMzNlM2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHUrt0cS262zuzGRI1jlpCcoj+jK
4OA9fHty9dndHWAY/Uj9BpsRkSKdLp5EmC8dwKDZa7LQqg125Bd9Rv0X0/VhXNBq
gmKPXlqbo5MBU0Z6ViQaZshauclFOapbw+HsVfUQ2RN68kkpaa6bCqxEZdQPLzVP
ibOOtUPLUMWSGS6JgfqLsrUG11rmzlczr6y8n4+8OfsuOvj3MR82cBkNkmNJG2bh
0I5Ia3HGaZqS4iWNloSUofuHRfj9r8sUqby2g8z8UhW7rjyDk5qmudYa6XuKLaGe
ykipAXcY9wFme1COmeQNB8adC0aVUVs63ZrkQOqGzpPG91Tpa0WTcA47oQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPnNmjn8i1AKUEC8tP5+cEbBM+O+MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMS1jMmFPZnlMVUFwUVFMeTBfbjV3UnNFejQ3NC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFh
Ni8xL2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQCcGZx7AgENQA5zvjfS
1Ti/GJc4EzDzdJYW8ZjngLtvEpdDsqPu/TJ5bJF1S6xSXD0KvT4ADVRGByjr/EEg
UIrd1gbTsuI5oXE6KTKa6BMO+juRM4TH+9Ve6q6GtSkCU/7HLrgR7og44AqeHNja
K2qcbqbvzjyDeAeDkkgln9xPfcmVq4MEISuqL0wlVxng8klgrRzYjagmoNJ7yosw
WDCQ7LTDuTdlRDcv7KzzB9kqKWpW0a7jJWaTxuQue71GJoEBskiJDStYXrPXm38Z
IA4Yh3CGTZFHGypHhdcLlDDROqxX5qJurCCnaMjFwkuSJJuv99/D9/isl9M28W+3
t5ip
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:35:39 2025 by rpki-client