Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4QY3UUUMLW0L3lD8jAbE5Y2YWPE.roa
File: 4QY3UUUMLW0L3lD8jAbE5Y2YWPE.roa (raw, json)
Hash identifier: VYyyo/BX3CzbazkwjJwNgts2mTdtUpwloZnItUU9jOY=
Subject key identifier: E1:06:37:51:45:0C:2D:6D:0B:DE:50:FC:8C:06:C4:E5:8D:98:58:F1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185A6F57D7DA886DDE715A19D170DCA2E9D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4QY3UUUMLW0L3lD8jAbE5Y2YWPE.roa
Signing time: Thu 12 Jan 2023 17:09:44 +0000
ROA not before: Thu 12 Jan 2023 17:09:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a6:f5:7d:7d:a8:86:dd:e7:15:a1:9d:17:0d:ca:2e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 12 17:09:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1063751450c2d6d0bde50fc8c06c4e58d9858f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:79:fe:0c:53:6b:fe:81:78:cf:f6:ed:4a:ec:
77:aa:91:42:a4:22:5c:6b:1a:f4:28:92:53:4a:1d:
3c:24:85:42:f9:18:aa:57:08:70:97:87:d6:e3:05:
e3:d8:c3:fc:42:f0:d2:ae:42:ec:62:db:0c:23:a0:
bb:1e:bb:80:20:86:70:a8:17:35:16:b8:62:c3:5c:
a2:8a:81:56:28:70:a8:a3:9d:a2:80:29:e7:6f:1d:
48:bb:33:f2:57:4a:ed:d7:76:3d:cd:48:0d:44:09:
f1:23:02:be:b4:c4:0f:f2:a4:98:4d:01:40:4d:bf:
85:e0:32:a8:bb:65:6e:62:30:b1:e3:30:7f:45:9b:
6e:ca:60:5a:dd:f9:0a:46:76:39:06:17:27:ad:88:
da:4f:12:a3:e3:83:e6:51:a3:43:67:32:b0:0e:2c:
45:8f:65:e7:bf:db:9c:ff:a8:d2:a5:06:77:28:eb:
4c:90:d5:a1:2f:2a:85:6c:74:da:0e:0c:f8:f2:67:
59:db:34:01:c4:34:d5:ba:70:4f:a5:36:f5:79:a8:
90:be:bc:b9:b0:4a:71:96:41:7e:69:12:0b:52:2e:
37:c4:a0:26:c7:a1:61:97:3a:7c:ba:80:d7:6c:8d:
80:37:5b:b8:89:17:48:73:9d:0e:b5:b2:da:66:21:
d2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:06:37:51:45:0C:2D:6D:0B:DE:50:FC:8C:06:C4:E5:8D:98:58:F1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4QY3UUUMLW0L3lD8jAbE5Y2YWPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:2e:1a:1a:70:ee:18:db:19:43:ad:8c:d0:bd:a5:f2:a1:f2:
99:aa:dd:a5:34:04:62:3b:25:e4:0f:e5:ce:fe:3a:b3:b5:0f:
bd:10:43:1a:0a:74:de:cd:dc:ea:a1:52:9f:ba:d7:a7:56:4d:
f8:e5:a5:ba:64:d0:c0:d0:e8:17:ed:8c:9e:73:3f:ac:45:97:
84:03:3d:ef:c9:ac:55:17:1f:32:8f:64:8f:5e:40:d4:4b:d9:
50:13:85:49:ea:e2:19:e2:c3:2d:0c:32:0d:70:e7:85:09:04:
56:b5:6b:7f:be:47:42:34:64:56:50:31:73:7a:cf:8b:50:65:
6e:a8:2c:9e:b8:0b:41:e0:fa:29:93:7a:1d:33:00:ed:c9:11:
9e:2e:9c:50:04:2b:73:d4:08:b5:24:5f:ee:15:d1:1b:02:eb:
b4:7a:4e:ac:3b:45:db:b5:47:3d:5d:dc:78:78:c1:95:34:e9:
e8:19:55:14:7b:4d:1c:7b:b5:1e:4e:ae:1f:b7:de:15:63:a5:
89:28:5a:19:94:4c:dc:99:06:f0:d2:db:84:cf:d1:70:ec:7d:
00:6c:78:0f:2f:2c:c5:17:f3:f4:d2:71:50:0c:de:7d:60:8a:
5f:b0:e6:25:91:35:94:21:15:7c:81:84:ff:70:02:28:b3:65:
2d:e9:1e:d6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYWm9X19qIbd5xWhnRcNyi6dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTEyMTcwOTQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTA2Mzc1MTQ1MGMyZDZkMGJkZTUwZmM4YzA2YzRlNThkOTg1OGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3n+DFNr/oF4z/btSux3qpFCpCJc
axr0KJJTSh08JIVC+RiqVwhwl4fW4wXj2MP8QvDSrkLsYtsMI6C7HruAIIZwqBc1
Frhiw1yiioFWKHCoo52igCnnbx1IuzPyV0rt13Y9zUgNRAnxIwK+tMQP8qSYTQFA
Tb+F4DKou2VuYjCx4zB/RZtuymBa3fkKRnY5BhcnrYjaTxKj44PmUaNDZzKwDixF
j2Xnv9uc/6jSpQZ3KOtMkNWhLyqFbHTaDgz48mdZ2zQBxDTVunBPpTb1eaiQvry5
sEpxlkF+aRILUi43xKAmx6Fhlzp8uoDXbI2AN1u4iRdIc50OtbLaZiHSrQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOEGN1FFDC1tC95Q/IwGxOWNmFjxMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNFFZM1VVVU1MVzBMM2xEOGpBYkU1WTJZV1BFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADkuGhpw7hjbGUOtjNC9
pfKh8pmq3aU0BGI7JeQP5c7+OrO1D70QQxoKdN7N3OqhUp+616dWTfjlpbpk0MDQ
6BftjJ5zP6xFl4QDPe/JrFUXHzKPZI9eQNRL2VAThUnq4hniwy0MMg1w54UJBFa1
a3++R0I0ZFZQMXN6z4tQZW6oLJ64C0Hg+imTeh0zAO3JEZ4unFAEK3PUCLUkX+4V
0RsC67R6Tqw7Rdu1Rz1d3Hh4wZU06egZVRR7TRx7tR5Orh+33hVjpYkoWhmUTNyZ
BvDS24TP0XDsfQBseA8vLMUX8/TScVAM3n1gil+w5iWRNZQhFXyBhP9wAiizZS3p
HtY=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:11:31 2025 by rpki-client