Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-mNKHkcUURgPphNeY7DiD1FIxxw.roa
File: 1-mNKHkcUURgPphNeY7DiD1FIxxw.roa (raw, json)
Hash identifier: N32rGOYcTOvB9iaj6NMZozm170zmb6cMyzs0v2SDHgA=
Subject key identifier: FA:63:4A:1E:47:14:51:18:0F:A6:13:5E:63:B0:E2:0F:51:48:C7:1C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01852AEFF36343C34A02228C1A6291B371BA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-mNKHkcUURgPphNeY7DiD1FIxxw.roa
Signing time: Mon 19 Dec 2022 15:10:46 +0000
ROA not before: Mon 19 Dec 2022 15:10:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:ef:f3:63:43:c3:4a:02:22:8c:1a:62:91:b3:71:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 19 15:10:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa634a1e471451180fa6135e63b0e20f5148c71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6c:50:f9:90:0d:fe:22:c2:6b:5d:cf:f7:0c:
75:91:d5:a3:1f:d4:e7:04:38:ba:d3:09:39:26:98:
29:bb:36:3e:88:f5:03:3a:d2:84:ef:74:0c:b9:40:
7d:0b:7d:e2:97:d1:91:fa:62:99:cb:7d:3f:80:88:
59:79:f5:aa:54:92:ca:62:10:e6:33:84:3a:a0:26:
7f:58:a5:ec:d0:b1:a7:18:ad:30:77:64:0a:87:c8:
38:db:a3:64:39:50:2a:49:e7:52:ae:b2:53:0d:6c:
0c:dc:5a:23:ee:19:bf:9b:d3:06:61:77:92:9c:9b:
88:40:a0:d1:50:76:c5:1a:23:31:18:2e:79:82:d0:
0a:13:d4:56:f8:69:a6:83:f9:21:e8:8b:08:84:0c:
b3:a8:ee:ae:0d:f2:b1:3d:7f:07:6f:17:ff:42:cf:
b6:53:b0:e8:e9:ea:b2:35:0e:48:15:4f:3a:52:bd:
b2:ca:41:47:bc:73:14:26:6a:d7:02:6c:97:db:14:
34:7c:8d:8a:6e:99:50:3f:97:88:9c:2a:1b:80:82:
e5:4e:bf:f3:9f:f4:0f:51:4d:91:40:a8:04:70:69:
84:2c:77:89:f5:c8:8f:8b:52:ba:9b:7d:a2:c0:50:
63:b6:b6:c6:9f:f4:84:46:c0:78:90:39:27:ca:e1:
d4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:63:4A:1E:47:14:51:18:0F:A6:13:5E:63:B0:E2:0F:51:48:C7:1C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-mNKHkcUURgPphNeY7DiD1FIxxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:8c:d9:2f:e3:55:ff:84:34:7a:5c:63:a9:12:7d:b7:49:98:
aa:5d:34:f6:dc:ac:74:e5:d6:6d:6b:c6:92:77:9a:43:17:e9:
2b:77:ab:6b:58:93:9b:62:30:3b:08:6d:bd:79:fe:c6:3e:3d:
d4:d2:d0:8c:38:f8:b1:66:89:11:e9:76:f6:8c:08:86:99:51:
97:29:4c:97:8d:2f:ad:9c:a8:5f:53:21:9c:14:29:90:56:46:
fe:6c:8f:1e:fb:69:a9:5a:b7:a7:7d:a9:d1:56:24:48:0a:df:
80:92:c1:33:e4:49:c3:ed:e9:c6:ef:b6:21:ad:0c:d7:6c:c1:
29:95:f9:6d:29:96:d2:d7:a9:88:2e:61:39:2d:c0:cc:9e:dd:
04:a4:d5:4d:d7:97:92:09:9b:f3:0a:a5:c6:fc:0e:68:c8:dd:
87:3a:a0:5d:b9:09:b0:14:6a:c5:59:db:5d:92:de:2d:71:df:
61:ea:b1:74:31:e3:30:cd:a1:b6:8c:f7:98:66:24:9a:6f:25:
16:18:bb:dd:01:97:f4:ca:12:11:b6:ff:3e:94:38:1f:d4:16:
7e:ec:04:28:fb:62:cc:bd:a1:cb:c8:bf:15:89:92:60:1d:48:
4e:98:f9:ff:c2:34:ae:80:4f:8b:c2:7d:9c:be:e0:d1:d9:fd:
0c:7e:34:ab
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYUq7/NjQ8NKAiKMGmKRs3G6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjE5MTUxMDQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTYzNGExZTQ3MTQ1MTE4MGZhNjEzNWU2M2IwZTIwZjUxNDhjNzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WxQ+ZAN/iLCa13P9wx1kdWjH9Tn
BDi60wk5JpgpuzY+iPUDOtKE73QMuUB9C33il9GR+mKZy30/gIhZefWqVJLKYhDm
M4Q6oCZ/WKXs0LGnGK0wd2QKh8g426NkOVAqSedSrrJTDWwM3Foj7hm/m9MGYXeS
nJuIQKDRUHbFGiMxGC55gtAKE9RW+Gmmg/kh6IsIhAyzqO6uDfKxPX8Hbxf/Qs+2
U7Do6eqyNQ5IFU86Ur2yykFHvHMUJmrXAmyX2xQ0fI2KbplQP5eInCobgILlTr/z
n/QPUU2RQKgEcGmELHeJ9ciPi1K6m32iwFBjtrbGn/SERsB4kDknyuHUhQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPpjSh5HFFEYD6YTXmOw4g9RSMccMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMS1tTktIa2NVVVJnUHBoTmVZN0RpRDFGSXh4dy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFh
Ni8xL2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQB/jNkv41X/hDR6XGOp
En23SZiqXTT23Kx05dZta8aSd5pDF+krd6trWJObYjA7CG29ef7GPj3U0tCMOPix
ZokR6Xb2jAiGmVGXKUyXjS+tnKhfUyGcFCmQVkb+bI8e+2mpWrenfanRViRICt+A
ksEz5EnD7enG77YhrQzXbMEplfltKZbS16mILmE5LcDMnt0EpNVN15eSCZvzCqXG
/A5oyN2HOqBduQmwFGrFWdtdkt4tcd9h6rF0MeMwzaG2jPeYZiSabyUWGLvdAZf0
yhIRtv8+lDgf1BZ+7AQo+2LMvaHLyL8ViZJgHUhOmPn/wjSugE+Lwn2cvuDR2f0M
fjSr
-----END CERTIFICATE-----
Generated at Tue Jun 10 20:07:22 2025 by rpki-client