Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/92uKQYWGh9vRsNKvY1bqL7ZBQ_4.roa
File: 92uKQYWGh9vRsNKvY1bqL7ZBQ_4.roa (raw, json)
Hash identifier: yYONwZTxibJo0OHr78lCwb1x13kJ9Ha1vAAxHWKTmbY=
Subject key identifier: F7:6B:8A:41:85:86:87:DB:D1:B0:D2:AF:63:56:EA:2F:B6:41:43:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D6C8E813C7026A830DBFADE552799FF8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/92uKQYWGh9vRsNKvY1bqL7ZBQ_4.roa
Signing time: Tue 08 Aug 2023 20:13:58 +0000
ROA not before: Tue 08 Aug 2023 20:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d6:c8:e8:13:c7:02:6a:83:0d:bf:ad:e5:52:79:9f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 20:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f76b8a41858687dbd1b0d2af6356ea2fb64143fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:07:ae:8f:c1:d7:bd:81:bc:64:ea:d6:f2:b7:
a4:c4:3c:0d:b5:32:8c:e2:bf:6b:79:2f:86:ca:94:
3f:33:2d:16:0e:60:20:0c:2d:be:eb:87:11:c4:32:
09:0e:20:8b:db:b0:d2:d0:82:3b:ea:37:b1:c7:d4:
71:87:fa:e3:4a:87:f8:7c:85:c8:7d:bb:33:36:83:
11:60:9e:c1:58:9f:df:bf:2a:d9:11:90:77:33:e0:
a6:a1:80:12:29:ca:99:97:d4:1d:8e:cc:1d:f2:f1:
15:70:43:bb:fc:14:f7:f2:29:1b:99:49:8d:d9:86:
e4:e3:84:c4:3d:bc:e4:c5:27:e5:31:a0:31:98:97:
a4:81:7a:a7:1f:be:d2:7b:2c:a9:28:3f:eb:82:48:
81:c6:86:2d:ef:b0:c4:16:aa:85:4b:46:13:02:fb:
8d:bd:12:42:7c:34:9b:e6:20:fb:9d:3c:8b:8a:10:
aa:5d:1d:60:92:b3:9e:39:6e:7f:f1:48:f2:51:88:
7d:3e:18:7b:84:d9:eb:28:4e:f3:3a:10:e4:26:38:
47:f1:00:bf:d1:72:e9:8e:15:af:2f:79:6a:02:df:
b3:0a:94:75:fb:76:92:37:72:12:e7:3e:d2:39:6e:
64:10:03:62:95:5d:10:fa:98:6d:3c:f7:b0:0b:53:
f0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6B:8A:41:85:86:87:DB:D1:B0:D2:AF:63:56:EA:2F:B6:41:43:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/92uKQYWGh9vRsNKvY1bqL7ZBQ_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:4a:70:2d:e4:ec:98:bb:cb:6f:71:f8:58:df:9a:b8:18:d5:
9b:03:93:69:e0:ec:66:32:0a:5d:40:b4:44:27:26:65:8f:be:
53:ca:80:9d:af:cf:e4:20:b0:c3:9e:ed:18:09:e1:7a:13:4c:
c5:f0:0e:b7:6e:ad:14:14:3f:0d:b0:d2:10:dc:f0:76:ac:7b:
bb:51:3f:82:5b:82:a4:68:3d:64:79:06:75:ed:37:8a:6d:44:
52:c8:0b:44:3e:67:8c:52:bb:70:dc:20:40:44:d3:3b:1c:be:
d6:a8:f3:8c:cc:ec:fc:25:14:2f:a3:17:c1:60:da:15:34:a9:
73:05:c3:71:fd:f2:5a:c7:63:fc:b9:38:a7:2c:73:47:7f:1a:
bf:d5:e3:f0:6b:f9:65:61:a1:03:da:7f:a1:20:6c:1f:4d:f7:
31:03:b7:a5:14:bf:f6:95:49:d8:1e:d1:6a:df:2d:70:7a:98:
c7:b5:dd:5b:0d:51:d1:16:e8:a1:b8:5b:7c:f8:06:d0:1a:ff:
af:8c:03:d4:55:d2:60:bd:74:53:1b:dd:ec:c8:76:fc:38:ac:
f4:66:a2:bc:92:0b:eb:08:4a:93:68:29:8c:09:a0:ff:5b:4b:
7a:c1:1a:06:8d:2f:8b:7f:f7:62:97:f9:c5:0b:58:52:e5:0f:
29:44:ae:c4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnWyOgTxwJqgw2/reVSeZ/4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODA4MjAxMzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzZiOGE0MTg1ODY4N2RiZDFiMGQyYWY2MzU2ZWEyZmI2NDE0M2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7geuj8HXvYG8ZOrW8rekxDwNtTKM
4r9reS+GypQ/My0WDmAgDC2+64cRxDIJDiCL27DS0II76jexx9Rxh/rjSof4fIXI
fbszNoMRYJ7BWJ/fvyrZEZB3M+CmoYASKcqZl9Qdjswd8vEVcEO7/BT38ikbmUmN
2Ybk44TEPbzkxSflMaAxmJekgXqnH77SeyypKD/rgkiBxoYt77DEFqqFS0YTAvuN
vRJCfDSb5iD7nTyLihCqXR1gkrOeOW5/8UjyUYh9Phh7hNnrKE7zOhDkJjhH8QC/
0XLpjhWvL3lqAt+zCpR1+3aSN3IS5z7SOW5kEANilV0Q+phtPPewC1PwGQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPdrikGFhofb0bDSr2NW6i+2QUP+MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOTJ1S1FZV0doOXZSc05LdlkxYnFMN1pCUV80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFhKcC3k7Ji7y29x+Fjf
mrgY1ZsDk2ng7GYyCl1AtEQnJmWPvlPKgJ2vz+QgsMOe7RgJ4XoTTMXwDrdurRQU
Pw2w0hDc8Hase7tRP4JbgqRoPWR5BnXtN4ptRFLIC0Q+Z4xSu3DcIEBE0zscvtao
84zM7PwlFC+jF8Fg2hU0qXMFw3H98lrHY/y5OKcsc0d/Gr/V4/Br+WVhoQPaf6Eg
bB9N9zEDt6UUv/aVSdge0WrfLXB6mMe13VsNUdEW6KG4W3z4BtAa/6+MA9RV0mC9
dFMb3ezIdvw4rPRmorySC+sISpNoKYwJoP9bS3rBGgaNL4t/92KX+cULWFLlDylE
rsQ=
-----END CERTIFICATE-----
Generated at Mon Jun 9 17:26:51 2025 by rpki-client