Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1oYn1K1HIY5ogTbD41lapQQXlNw.roa
File: 1oYn1K1HIY5ogTbD41lapQQXlNw.roa (raw, json)
Hash identifier: NEJEHLKV6t2gFz660FlqiGbPH1EkoyLl9kdVT/2d96s=
Subject key identifier: D6:86:27:D4:AD:47:21:8E:68:81:36:C3:E3:59:5A:A5:04:17:94:DC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864D05CB2A9874629767952F177621FA4E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1oYn1K1HIY5ogTbD41lapQQXlNw.roa
Signing time: Mon 13 Feb 2023 23:04:30 +0000
ROA not before: Mon 13 Feb 2023 23:04:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:4d05:a04a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4d:05:cb:2a:98:74:62:97:67:95:2f:17:76:21:fa:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 23:04:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d68627d4ad47218e688136c3e3595aa5041794dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:dc:14:b8:2c:c0:d1:7c:76:62:1e:8f:b7:
f2:f0:20:2a:d7:ba:77:8c:5e:8b:a5:59:99:1b:26:
b5:68:9c:8c:2a:b7:98:a3:a8:44:bf:37:e8:72:c2:
fd:6c:43:52:c2:d8:9d:81:4d:39:38:a7:11:2c:28:
11:1f:11:c2:de:0a:1b:65:1d:e9:3d:3f:8a:11:8d:
89:ad:04:1a:76:1b:19:6d:97:df:31:69:0c:40:14:
41:76:e0:d7:be:12:ff:e5:5c:77:4c:72:ad:b2:b9:
bb:de:2e:70:6c:f2:f3:1d:30:5b:e3:b2:04:70:b7:
1e:8d:2d:6b:bf:a5:97:2e:ee:46:2b:89:af:c2:3b:
99:cf:0c:61:3f:83:dd:60:e7:1f:6f:3c:07:a4:64:
df:2a:9d:ec:65:ae:5a:1e:b2:02:36:31:83:5a:ff:
f6:a0:96:3d:87:38:50:a9:d4:41:28:be:80:74:ab:
76:1e:9a:0e:a6:54:86:88:93:95:ef:70:6b:ae:08:
81:85:b5:79:5e:e1:d4:ec:8d:dc:9a:b5:62:cc:b7:
43:10:af:c8:9c:0f:30:2a:7c:fc:d6:de:47:04:f8:
a2:5d:f9:ee:15:69:f9:fe:59:b6:e3:31:80:a5:2e:
b2:09:29:2a:1f:bc:d8:38:e7:06:d5:20:c0:dd:8f:
41:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:86:27:D4:AD:47:21:8E:68:81:36:C3:E3:59:5A:A5:04:17:94:DC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1oYn1K1HIY5ogTbD41lapQQXlNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:6a:b7:4c:61:30:48:55:aa:85:03:7a:e2:a7:06:09:a3:46:
d0:35:88:33:4a:81:c6:65:7a:6e:1c:90:de:a5:91:e3:45:5f:
13:1e:fc:92:42:1f:bc:93:c9:77:fa:4d:3d:7c:15:af:f2:9e:
57:48:70:81:51:88:e4:3d:2f:85:ee:4f:fa:4b:65:24:28:ce:
87:c3:03:e1:d6:7c:32:7a:c9:70:cd:2b:c7:e5:79:4e:97:b6:
1a:60:5b:b2:6d:67:79:dd:c9:03:31:fc:61:8c:92:05:10:c6:
8d:d1:6e:45:43:9b:a6:d7:56:b2:20:08:a6:f2:60:03:7e:4e:
55:b8:03:33:54:ff:27:f0:4a:88:4c:05:0e:1e:47:c2:6a:30:
e5:50:46:f4:6b:a3:e9:26:75:bf:eb:e9:46:43:90:59:d4:39:
c1:8a:56:e7:65:e3:2f:10:d6:45:28:07:59:fe:81:9d:fe:d4:
7e:98:0e:3b:51:a0:09:6c:8a:7f:88:8a:24:38:28:5a:4b:69:
e0:56:aa:d5:dc:3b:32:06:5a:cc:ff:66:23:0f:15:0c:bd:6f:
30:6b:8d:55:16:70:86:c4:89:53:ac:21:56:59:36:78:da:36:
dc:7c:46:e2:51:5a:3f:cb:c8:23:95:60:c3:de:6f:4f:dd:d9:
f4:2f:5a:09
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZNBcsqmHRil2eVLxd2IfpOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjEzMjMwNDMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjg2MjdkNGFkNDcyMThlNjg4MTM2YzNlMzU5NWFhNTA0MTc5NGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmXcFLgswNF8dmIej7fy8CAq17p3
jF6LpVmZGya1aJyMKreYo6hEvzfocsL9bENSwtidgU05OKcRLCgRHxHC3gobZR3p
PT+KEY2JrQQadhsZbZffMWkMQBRBduDXvhL/5Vx3THKtsrm73i5wbPLzHTBb47IE
cLcejS1rv6WXLu5GK4mvwjuZzwxhP4PdYOcfbzwHpGTfKp3sZa5aHrICNjGDWv/2
oJY9hzhQqdRBKL6AdKt2HpoOplSGiJOV73BrrgiBhbV5XuHU7I3cmrVizLdDEK/I
nA8wKnz81t5HBPiiXfnuFWn5/lm24zGApS6yCSkqH7zYOOcG1SDA3Y9B8wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNaGJ9StRyGOaIE2w+NZWqUEF5TcMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMW9ZbjFLMUhJWTVvZ1RiRDQxbGFwUVFYbE53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHJqt0xhMEhVqoUDeuKn
BgmjRtA1iDNKgcZlem4ckN6lkeNFXxMe/JJCH7yTyXf6TT18Fa/ynldIcIFRiOQ9
L4XuT/pLZSQozofDA+HWfDJ6yXDNK8fleU6XthpgW7JtZ3ndyQMx/GGMkgUQxo3R
bkVDm6bXVrIgCKbyYAN+TlW4AzNU/yfwSohMBQ4eR8JqMOVQRvRro+kmdb/r6UZD
kFnUOcGKVudl4y8Q1kUoB1n+gZ3+1H6YDjtRoAlsin+IiiQ4KFpLaeBWqtXcOzIG
Wsz/ZiMPFQy9bzBrjVUWcIbEiVOsIVZZNnjaNtx8RuJRWj/LyCOVYMPeb0/d2fQv
Wgk=
-----END CERTIFICATE-----
Generated at Mon Jun 9 16:17:51 2025 by rpki-client