Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4dC2HZFnxO-lqPtTKgWLvi-97wQ.roa
File: 4dC2HZFnxO-lqPtTKgWLvi-97wQ.roa (raw, json)
Hash identifier: sPQb54EgtzC6imF5k30O8+S7VxpyNi61ip1Qz4Xt88s=
Subject key identifier: E1:D0:B6:1D:91:67:C4:EF:A5:A8:FB:53:2A:05:8B:BE:2F:BD:EF:04
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8516596D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4dC2HZFnxO-lqPtTKgWLvi-97wQ.roa
Signing time: Wed 18 May 2022 08:16:16 +0000
ROA not before: Wed 18 May 2022 08:16:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2232834413 (0x8516596d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 18 08:16:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1d0b61d9167c4efa5a8fb532a058bbe2fbdef04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:65:1d:14:04:5c:23:23:88:76:ef:0c:69:b5:
a5:e4:28:63:92:64:32:2b:a1:1a:fa:4e:b5:6b:59:
2f:c4:a3:ec:ed:0c:af:2a:29:1e:83:ed:f3:db:73:
18:cd:2f:36:55:09:2b:ad:0f:40:ed:c2:6f:de:a8:
d7:d9:8e:26:72:d6:3d:bf:9f:78:1d:ac:93:3a:c3:
fe:6f:c2:f7:de:4d:33:48:af:9a:72:ca:27:1c:d6:
79:c9:a2:2e:b2:8c:b0:90:56:ad:81:a1:79:6c:82:
0f:df:b0:da:d6:28:59:99:0c:09:45:90:60:96:8e:
ed:68:ee:52:58:4b:f2:e8:cc:3b:92:63:10:8b:cc:
8a:f1:ec:95:c2:1b:99:5c:57:78:8e:2b:21:8c:74:
a2:03:34:58:c9:f7:d2:07:21:0d:80:ea:7a:5c:bd:
aa:18:aa:6c:87:40:b9:cb:4d:db:55:84:47:9e:ea:
57:17:10:04:b4:69:e9:77:f4:54:25:7d:88:08:8c:
b8:b8:d6:30:e3:d0:4f:4b:77:3e:81:58:3f:8a:ae:
b4:e8:9f:59:8d:e1:22:f9:34:1d:2f:fd:c6:dd:16:
62:0f:83:9b:23:0e:4c:33:aa:38:db:c0:d4:3a:51:
c0:2c:86:d2:1b:4b:58:ae:b8:54:72:50:1f:41:0b:
15:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D0:B6:1D:91:67:C4:EF:A5:A8:FB:53:2A:05:8B:BE:2F:BD:EF:04
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4dC2HZFnxO-lqPtTKgWLvi-97wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:b0:33:4d:31:75:47:50:48:bf:60:20:e4:41:92:93:83:24:
38:9d:41:2d:f5:91:99:57:87:28:f1:ea:e4:c2:75:13:22:7c:
57:cf:92:db:b1:b3:8f:44:3d:ac:a2:d8:1e:2c:d0:0a:5c:cc:
70:97:f2:a0:0b:f9:b7:13:ad:6e:90:2f:0a:29:81:74:c3:cb:
d1:5c:17:19:52:cf:65:0f:7c:85:6e:fd:9b:97:1f:f0:c4:3e:
bb:6a:49:bf:90:14:00:4c:3f:be:c3:c0:48:8b:37:11:c8:76:
d2:56:15:a7:ae:ca:d6:d8:54:4a:bd:89:fa:e7:93:91:65:d3:
a8:ff:36:cb:dc:1d:b1:f3:47:ba:a9:fc:45:2b:df:db:28:ae:
f9:b9:8f:83:54:a9:74:62:8e:01:f2:f0:97:68:c6:20:df:b9:
e1:86:9d:55:e8:19:ff:89:81:62:f7:a1:7d:7d:e7:ea:d5:7b:
30:88:01:a9:2b:16:d4:4c:d3:f1:c8:c9:ce:31:8d:25:1d:58:
8a:08:d2:df:9a:21:b3:70:60:fb:af:d9:53:56:5d:6a:61:d3:
75:d6:00:41:6b:b5:a1:05:ae:7e:f6:3a:49:28:6e:c3:b8:ac:
b1:17:05:31:78:0b:a9:32:1e:de:4b:91:06:15:1a:bf:88:0b:
34:5a:35:48
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIUWWW0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MTgwODE2MTZaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGUxZDBiNjFkOTE2
N2M0ZWZhNWE4ZmI1MzJhMDU4YmJlMmZiZGVmMDQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCaZR0UBFwjI4h27wxptaXkKGOSZDIroRr6TrVrWS/Eo+zt
DK8qKR6D7fPbcxjNLzZVCSutD0Dtwm/eqNfZjiZy1j2/n3gdrJM6w/5vwvfeTTNI
r5pyyicc1nnJoi6yjLCQVq2BoXlsgg/fsNrWKFmZDAlFkGCWju1o7lJYS/LozDuS
YxCLzIrx7JXCG5lcV3iOKyGMdKIDNFjJ99IHIQ2A6npcvaoYqmyHQLnLTdtVhEee
6lcXEAS0ael39FQlfYgIjLi41jDj0E9Ldz6BWD+KrrTon1mN4SL5NB0v/cbdFmIP
g5sjDkwzqjjbwNQ6UcAshtIbS1iuuFRyUB9BCxXlAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQU4dC2HZFnxO+lqPtTKgWLvi+97wQwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS80ZEMySFpGbnhPLWxxUHRUS2dXTHZpLTk3d1Eucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAf7AzTTF1R1BIv2Ag5EGSk4MkOJ1BLfWRmVeH
KPHq5MJ1EyJ8V8+S27Gzj0Q9rKLYHizQClzMcJfyoAv5txOtbpAvCimBdMPL0VwX
GVLPZQ98hW79m5cf8MQ+u2pJv5AUAEw/vsPASIs3Ech20lYVp67K1thUSr2J+ueT
kWXTqP82y9wdsfNHuqn8RSvf2yiu+bmPg1SpdGKOAfLwl2jGIN+54YadVegZ/4mB
YvehfX3n6tV7MIgBqSsW1EzT8cjJzjGNJR1YigjS35ohs3Bg+6/ZU1ZdamHTddYA
QWu1oQWufvY6SShuw7issRcFMXgLqTIe3kuRBhUav4gLNFo1SA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 03:46:36 2025 by rpki-client