Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8dA2gpkyJwFQcBUA4LEy_1NFqh8.roa
File: 8dA2gpkyJwFQcBUA4LEy_1NFqh8.roa (raw, json)
Hash identifier: JCF9b2/LFY4UcBVpR+nR1Fia1S+BWZuKWkz8aVAbrY8=
Subject key identifier: F1:D0:36:82:99:32:27:01:50:70:15:00:E0:B1:32:FF:53:45:AA:1F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01867D539F4962EF320957AEE8A40823F068
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8dA2gpkyJwFQcBUA4LEy_1NFqh8.roa
Signing time: Thu 23 Feb 2023 08:11:17 +0000
ROA not before: Thu 23 Feb 2023 08:11:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7d:53:9f:49:62:ef:32:09:57:ae:e8:a4:08:23:f0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 23 08:11:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1d036829932270150701500e0b132ff5345aa1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bb:e9:e7:c6:00:a8:4e:d1:cf:45:5b:27:be:
1e:5a:35:d1:a7:eb:90:5e:78:83:73:93:a8:5a:e3:
d5:53:90:a9:08:ce:1c:ee:f4:aa:33:3f:1e:2b:0f:
b2:0a:13:c8:e0:31:46:a1:70:52:2b:b4:c9:85:47:
e0:26:bd:ac:5b:77:bf:a4:dd:5a:5b:54:84:93:e1:
ff:28:74:7c:9a:53:9c:18:ba:4f:29:dc:f3:f9:88:
c1:9c:86:4a:c8:c5:df:4a:d2:25:ca:67:b1:22:99:
1e:55:73:de:df:7e:09:8c:f8:7d:2d:d6:aa:cb:c2:
95:ff:8a:4e:14:b4:7e:39:c1:c7:f0:bc:85:66:91:
66:f8:18:02:86:a5:16:11:cf:4c:31:06:38:03:6c:
87:3a:c9:1a:09:a0:fb:c9:c5:a6:af:a8:0b:c4:a1:
85:83:10:de:88:61:5b:13:90:f5:e9:72:39:79:82:
47:a7:fc:3c:01:8e:d8:61:f4:e1:e2:64:b3:e9:bb:
95:11:88:a2:7a:c8:99:1d:da:07:16:23:4b:0d:89:
1b:ac:79:3d:3a:66:60:75:d6:da:4f:4e:18:0d:fc:
8f:65:d4:ab:d2:eb:9a:93:f6:0c:3b:5b:17:1c:25:
ed:cd:db:8d:90:79:16:6b:da:67:3d:ec:da:01:bd:
19:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D0:36:82:99:32:27:01:50:70:15:00:E0:B1:32:FF:53:45:AA:1F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8dA2gpkyJwFQcBUA4LEy_1NFqh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:9c:b2:01:32:5e:ce:f9:40:d5:d8:8a:90:f7:d2:e2:2f:f8:
44:79:06:6c:94:18:0f:2e:57:64:9c:b3:bd:69:dc:9b:c2:0f:
b7:1a:61:2d:cc:2b:b3:94:0e:63:22:f1:98:0b:d4:0d:90:2f:
54:6a:8d:28:6e:ee:da:f7:27:33:f6:fe:ce:60:1d:9a:95:0f:
8f:5f:43:a5:8a:bd:23:dc:4b:6b:3c:a8:3a:d5:12:0e:de:93:
ec:0c:86:8e:8f:75:0e:f1:9f:68:27:cc:ad:56:2c:bc:3a:b9:
95:f0:9f:03:2c:af:c3:49:79:e4:58:65:14:77:14:40:8d:cd:
8f:b3:5b:d4:ed:38:26:80:a6:61:68:d7:de:5d:2d:42:f0:dc:
00:7d:06:b4:a2:0f:6a:8d:24:52:c9:f1:46:45:dd:7f:1b:32:
83:9d:cb:31:d0:92:a0:28:79:15:96:7a:7d:74:91:7d:f8:eb:
9f:cf:9e:0f:0f:b4:49:84:ed:b8:d0:ea:01:84:3a:12:a4:32:
8a:01:86:2b:5d:f6:d5:f8:48:18:89:cf:e7:11:e1:bc:43:e1:
37:81:a5:20:91:64:56:a7:50:2b:d1:46:00:cf:60:e6:77:ec:
24:6a:48:ae:73:9a:9e:0a:8b:63:87:f6:46:28:82:a3:8f:f0:
7a:3d:a6:6f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZ9U59JYu8yCVeu6KQII/BoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjIzMDgxMTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWQwMzY4Mjk5MzIyNzAxNTA3MDE1MDBlMGIxMzJmZjUzNDVhYTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirvp58YAqE7Rz0VbJ74eWjXRp+uQ
XniDc5OoWuPVU5CpCM4c7vSqMz8eKw+yChPI4DFGoXBSK7TJhUfgJr2sW3e/pN1a
W1SEk+H/KHR8mlOcGLpPKdzz+YjBnIZKyMXfStIlymexIpkeVXPe334JjPh9Ldaq
y8KV/4pOFLR+OcHH8LyFZpFm+BgChqUWEc9MMQY4A2yHOskaCaD7ycWmr6gLxKGF
gxDeiGFbE5D16XI5eYJHp/w8AY7YYfTh4mSz6buVEYiiesiZHdoHFiNLDYkbrHk9
OmZgddbaT04YDfyPZdSr0uuak/YMO1sXHCXtzduNkHkWa9pnPezaAb0ZAQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPHQNoKZMicBUHAVAOCxMv9TRaofMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOGRBMmdwa3lKd0ZRY0JVQTRMRXlfMU5GcWg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEacsgEyXs75QNXYipD3
0uIv+ER5BmyUGA8uV2Scs71p3JvCD7caYS3MK7OUDmMi8ZgL1A2QL1RqjShu7tr3
JzP2/s5gHZqVD49fQ6WKvSPcS2s8qDrVEg7ek+wMho6PdQ7xn2gnzK1WLLw6uZXw
nwMsr8NJeeRYZRR3FECNzY+zW9TtOCaApmFo195dLULw3AB9BrSiD2qNJFLJ8UZF
3X8bMoOdyzHQkqAoeRWWen10kX3465/Png8PtEmE7bjQ6gGEOhKkMooBhitd9tX4
SBiJz+cR4bxD4TeBpSCRZFanUCvRRgDPYOZ37CRqSK5zmp4Ki2OH9kYogqOP8Ho9
pm8=
-----END CERTIFICATE-----
Generated at Wed Jun 11 12:54:14 2025 by rpki-client