Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/69u78LXCdtOKx1JG6zOEtGUx-BM.roa
File: 69u78LXCdtOKx1JG6zOEtGUx-BM.roa (raw, json)
Hash identifier: 5ruaTyCno+iIyJhI3brOMKXVQzp+yNIDG1JG43HXxoA=
Subject key identifier: EB:DB:BB:F0:B5:C2:76:D3:8A:C7:52:46:EB:33:84:B4:65:31:F8:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182056E9772D59A95FAC7A8D882F7534C28
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/69u78LXCdtOKx1JG6zOEtGUx-BM.roa
Signing time: Sat 16 Jul 2022 05:15:09 +0000
ROA not before: Sat 16 Jul 2022 05:15:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:05:6e:97:72:d5:9a:95:fa:c7:a8:d8:82:f7:53:4c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 16 05:15:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ebdbbbf0b5c276d38ac75246eb3384b46531f813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:78:65:97:50:eb:cc:86:bb:4d:a2:42:8d:e8:
45:3e:d7:7a:e9:90:89:a7:02:d7:e3:24:57:c0:6d:
2a:15:6b:dd:77:b3:ed:4c:0e:26:e9:e9:3f:2c:72:
a8:2d:1e:e4:90:7c:ee:fe:1f:6f:35:23:f0:df:d1:
7f:fd:33:f8:df:b2:a1:1f:29:51:8b:63:c2:56:6d:
df:19:97:52:9a:82:3f:5c:c1:39:93:ee:49:72:29:
12:8c:cf:77:43:10:c2:b4:65:97:ee:45:be:ef:0c:
49:b9:ca:ce:66:96:9f:03:64:83:c6:0a:02:b5:b4:
5b:27:d0:8e:82:84:85:a7:72:78:72:eb:10:cf:e6:
59:d0:29:49:6f:c1:1b:b6:9f:09:80:4e:29:1c:ad:
a0:b0:3b:92:ed:41:f7:11:6b:73:8b:52:8b:da:5a:
6f:68:7f:c9:cf:76:26:7d:5c:52:5c:a8:f1:8a:92:
2a:df:dc:6d:bd:20:dc:80:4f:9f:7a:44:a9:d3:d2:
f2:1d:7d:b2:28:78:f6:e3:93:6f:59:94:b5:d8:9b:
29:94:1b:14:42:19:48:76:f8:58:47:15:9f:ad:49:
2b:b7:17:0f:74:b1:e5:3e:9b:ac:93:00:b7:0c:a4:
dd:f1:2c:b7:81:a6:65:70:e0:dd:16:99:83:a3:0e:
d1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DB:BB:F0:B5:C2:76:D3:8A:C7:52:46:EB:33:84:B4:65:31:F8:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/69u78LXCdtOKx1JG6zOEtGUx-BM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:2d:40:81:ac:ff:b0:1d:d5:52:f7:b9:40:38:95:24:23:cd:
68:72:22:4d:83:96:29:c9:d8:1d:67:e6:98:1a:53:2f:2e:63:
f1:71:72:c1:27:31:d7:f5:ef:1a:c3:5e:70:8d:48:c3:43:ec:
84:a7:76:cc:56:e8:b8:91:5c:98:c1:5c:d1:5f:1c:e1:ce:d6:
e0:b0:76:7f:f2:da:6f:d8:0c:e0:4b:e1:bb:db:06:82:ef:f6:
0d:ab:58:0a:89:9e:c9:d8:77:d9:9b:cc:96:8b:e7:18:1c:61:
86:df:c1:f8:74:e8:e8:ef:21:6a:60:54:53:63:da:d2:e1:a6:
93:a0:a1:b5:61:91:3e:e5:db:b3:f3:6b:62:45:19:e0:66:b3:
2f:26:d8:e6:4c:1f:49:d5:13:c5:b4:9c:64:20:24:02:43:2e:
4f:8a:89:e5:b9:0e:2f:92:1e:44:7a:e6:56:06:da:53:d1:71:
3f:5b:44:fa:af:68:db:19:d3:15:f5:e3:3e:6f:d3:fa:3f:c2:
c8:81:02:9d:7b:0e:37:87:8f:42:ce:50:0d:5c:96:42:33:e8:
27:31:ba:7c:4f:7c:92:11:bd:25:f2:bb:24:81:8e:71:2c:75:
72:7a:3c:fb:4d:e8:a1:0a:fc:75:16:da:8c:be:e4:ac:ff:ef:
bc:f9:3b:ee
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYIFbpdy1ZqV+seo2IL3U0woMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzE2MDUxNTA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmRiYmJmMGI1YzI3NmQzOGFjNzUyNDZlYjMzODRiNDY1MzFmODEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXhll1DrzIa7TaJCjehFPtd66ZCJ
pwLX4yRXwG0qFWvdd7PtTA4m6ek/LHKoLR7kkHzu/h9vNSPw39F//TP437KhHylR
i2PCVm3fGZdSmoI/XME5k+5JcikSjM93QxDCtGWX7kW+7wxJucrOZpafA2SDxgoC
tbRbJ9COgoSFp3J4cusQz+ZZ0ClJb8Ebtp8JgE4pHK2gsDuS7UH3EWtzi1KL2lpv
aH/Jz3YmfVxSXKjxipIq39xtvSDcgE+fekSp09LyHX2yKHj245NvWZS12JsplBsU
QhlIdvhYRxWfrUkrtxcPdLHlPpuskwC3DKTd8Sy3gaZlcODdFpmDow7RXQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOvbu/C1wnbTisdSRuszhLRlMfgTMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNjl1NzhMWENkdE9LeDFKRzZ6T0V0R1V4LUJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIMtQIGs/7Ad1VL3uUA4
lSQjzWhyIk2DlinJ2B1n5pgaUy8uY/FxcsEnMdf17xrDXnCNSMND7ISndsxW6LiR
XJjBXNFfHOHO1uCwdn/y2m/YDOBL4bvbBoLv9g2rWAqJnsnYd9mbzJaL5xgcYYbf
wfh06OjvIWpgVFNj2tLhppOgobVhkT7l27Pza2JFGeBmsy8m2OZMH0nVE8W0nGQg
JAJDLk+KieW5Di+SHkR65lYG2lPRcT9bRPqvaNsZ0xX14z5v0/o/wsiBAp17DjeH
j0LOUA1clkIz6CcxunxPfJIRvSXyuySBjnEsdXJ6PPtN6KEK/HUW2oy+5Kz/77z5
O+4=
-----END CERTIFICATE-----
Generated at Mon Jun 9 21:20:56 2025 by rpki-client