Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9Bg1zciIzy3HgRM8Z7QeA5tXUP0.roa
File: 9Bg1zciIzy3HgRM8Z7QeA5tXUP0.roa (raw, json)
Hash identifier: nqtXrMt1LklpxoEjXP7hKexPgiCsg4Fg4//jpZ0TXx0=
Subject key identifier: F4:18:35:CD:C8:88:CF:2D:C7:81:13:3C:67:B4:1E:03:9B:57:50:FD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 862157CC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9Bg1zciIzy3HgRM8Z7QeA5tXUP0.roa
Signing time: Sat 21 May 2022 19:11:29 +0000
ROA not before: Sat 21 May 2022 19:11:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:ddb5:bc5/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:e0ec:efe1/128 maxlen: 128
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2250332108 (0x862157cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 21 19:11:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f41835cdc888cf2dc781133c67b41e039b5750fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1a:e9:b4:80:2f:14:9f:22:40:c7:98:62:05:
6f:8a:7e:e7:e3:a0:44:04:80:1b:7b:bf:81:4a:df:
08:73:57:fd:78:a0:85:a7:54:aa:2b:02:cf:cc:a9:
41:a3:eb:42:a3:7d:5a:de:5f:4d:f5:7e:19:63:0c:
ee:d7:06:f3:b6:3b:f6:ee:40:9c:60:1d:d2:85:0c:
7d:f9:72:1f:fd:ae:34:ac:21:7e:6b:41:c8:33:84:
ce:1d:9a:ee:39:08:57:58:85:60:c8:e0:f1:e0:66:
12:22:43:79:a0:cb:21:d1:d3:b0:8f:ce:81:48:76:
6e:9a:31:c3:98:9a:a0:03:35:26:30:a6:8b:35:46:
5d:d1:ba:98:b9:90:a6:4f:25:26:01:ec:3b:f6:83:
db:4b:dc:25:54:d7:d8:ee:b9:39:f4:d0:ef:72:c9:
81:12:a0:9c:cf:81:75:ca:7d:dc:16:1f:ca:13:74:
c8:27:36:e6:30:6e:43:c5:aa:fc:6d:bf:dd:ff:a0:
d0:ad:15:de:c5:78:c2:0e:91:92:1b:20:fc:79:ff:
97:0f:8c:1a:07:d0:9c:aa:90:92:94:e5:83:0d:77:
f5:0a:5d:32:47:4b:9e:c6:12:fb:e4:4f:f1:1d:88:
0d:45:de:29:34:59:5b:c3:41:1c:53:a2:30:e7:44:
97:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:18:35:CD:C8:88:CF:2D:C7:81:13:3C:67:B4:1E:03:9B:57:50:FD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9Bg1zciIzy3HgRM8Z7QeA5tXUP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:27:1a:a2:59:83:fd:c6:b0:cc:bf:60:24:a0:ac:1c:41:e1:
ba:c7:64:30:14:2f:a2:24:54:be:59:d0:1d:d1:9a:a6:98:86:
77:c8:8e:fa:01:26:79:90:6b:f0:53:b3:0a:d7:87:5b:97:0c:
cc:f4:b6:59:a8:44:e1:3b:bd:7d:ab:dc:67:39:5b:e8:af:1c:
26:75:b5:54:54:38:86:6b:8a:58:bb:dd:d1:88:6a:80:09:8a:
82:61:a9:f7:43:ec:e0:5e:80:65:07:46:11:d9:e1:dc:99:42:
c5:2a:88:b1:5e:22:3c:d6:71:90:ff:68:5c:c7:ae:75:8c:86:
c6:42:73:65:3d:aa:e4:e7:01:49:4b:06:7b:6c:26:89:ec:f5:
6d:e5:d8:46:0a:c4:d2:1d:57:dd:41:14:68:60:74:88:36:27:
d9:73:22:18:73:93:71:e0:44:4d:32:78:01:20:ee:cb:dc:ad:
5a:c9:6b:cd:39:ef:2d:73:b7:31:26:d8:d7:e3:bf:9b:c1:90:
c7:cb:f6:e5:8a:57:d1:be:8d:cb:3a:ca:01:73:9c:80:7f:38:
bd:24:8f:ea:7b:c6:e8:9e:ac:45:b0:6f:5f:85:18:55:8b:e2:
5d:84:2c:42:5d:7d:72:ca:51:5e:ec:b1:a7:32:f6:95:fd:21:
0d:3f:49:32
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIYhV8wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MjExOTExMjlaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGY0MTgzNWNkYzg4
OGNmMmRjNzgxMTMzYzY3YjQxZTAzOWI1NzUwZmQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCmGum0gC8UnyJAx5hiBW+KfufjoEQEgBt7v4FK3whzV/14
oIWnVKorAs/MqUGj60KjfVreX031fhljDO7XBvO2O/buQJxgHdKFDH35ch/9rjSs
IX5rQcgzhM4dmu45CFdYhWDI4PHgZhIiQ3mgyyHR07CPzoFIdm6aMcOYmqADNSYw
pos1Rl3Rupi5kKZPJSYB7Dv2g9tL3CVU19juuTn00O9yyYESoJzPgXXKfdwWH8oT
dMgnNuYwbkPFqvxtv93/oNCtFd7FeMIOkZIbIPx5/5cPjBoH0JyqkJKU5YMNd/UK
XTJHS57GEvvkT/EdiA1F3ik0WVvDQRxTojDnRJfnAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQU9Bg1zciIzy3HgRM8Z7QeA5tXUP0wHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS85QmcxemNpSXp5M0hnUk04WjdRZUE1dFhVUDAucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEARCcaolmD/cawzL9gJKCsHEHhusdkMBQvoiRU
vlnQHdGappiGd8iO+gEmeZBr8FOzCteHW5cMzPS2WahE4Tu9favcZzlb6K8cJnW1
VFQ4hmuKWLvd0YhqgAmKgmGp90Ps4F6AZQdGEdnh3JlCxSqIsV4iPNZxkP9oXMeu
dYyGxkJzZT2q5OcBSUsGe2wmiez1beXYRgrE0h1X3UEUaGB0iDYn2XMiGHOTceBE
TTJ4ASDuy9ytWslrzTnvLXO3MSbY1+O/m8GQx8v25YpX0b6NyzrKAXOcgH84vSSP
6nvG6J6sRbBvX4UYVYviXYQsQl19cspRXuyxpzL2lf0hDT9JMg==
-----END CERTIFICATE-----
Generated at Thu Jun 12 16:47:04 2025 by rpki-client