Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9GTdkZc49AeiXwIfbv9IOc7AMxc.roa
File: 9GTdkZc49AeiXwIfbv9IOc7AMxc.roa (raw, json)
Hash identifier: ms3EAC4VaRZsNfn9ifLtSBElRafAy+R4WbE2eAHKNso=
Subject key identifier: F4:64:DD:91:97:38:F4:07:A2:5F:02:1F:6E:FF:48:39:CE:C0:33:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185522EDFB04771402CA48C51D018A90F20
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9GTdkZc49AeiXwIfbv9IOc7AMxc.roa
Signing time: Tue 27 Dec 2022 06:04:41 +0000
ROA not before: Tue 27 Dec 2022 06:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:522e:ac0c/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:52:2e:df:b0:47:71:40:2c:a4:8c:51:d0:18:a9:0f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 27 06:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f464dd919738f407a25f021f6eff4839cec03317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f3:53:5c:75:a7:6c:ab:b2:74:75:fd:df:67:
55:3f:be:27:8d:0d:77:75:95:13:39:15:a9:7e:49:
03:cb:4b:87:ab:f7:25:99:5f:07:b5:29:e3:28:a2:
da:9b:c5:2a:05:84:d2:97:94:35:83:c6:5f:0d:9f:
54:3d:23:b8:55:8a:dd:13:ed:d7:87:01:c2:ab:7c:
10:58:b6:6f:87:da:4d:bb:74:b9:7f:7b:c4:84:8b:
ec:98:ff:4c:19:49:89:13:a0:16:e4:ee:3f:b1:f8:
f6:8e:72:7a:f3:bb:c0:87:d7:b0:c7:c3:91:ab:50:
18:95:f0:c4:94:92:eb:75:22:a1:fe:6b:80:aa:e6:
c3:12:e1:7d:e9:6e:d5:fd:16:a1:15:f5:de:10:d1:
56:df:35:f7:7e:a4:07:2e:f2:9a:f3:d2:75:fa:97:
15:5a:e8:e3:e7:49:bd:32:4b:8a:e4:fd:17:27:82:
ba:18:c2:0e:06:41:cb:86:a1:43:92:72:59:c4:6d:
a1:c9:ea:65:36:1b:4c:1d:a7:1b:1a:a4:e1:3f:43:
55:95:88:74:af:62:29:91:21:92:15:ee:6a:7d:67:
fc:4f:3c:9b:1c:ed:83:66:17:ac:46:81:7d:8d:3b:
c3:99:77:96:b7:9c:9d:dd:24:c8:ca:21:d7:85:97:
65:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:64:DD:91:97:38:F4:07:A2:5F:02:1F:6E:FF:48:39:CE:C0:33:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9GTdkZc49AeiXwIfbv9IOc7AMxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:0d:c7:00:0e:0d:88:fa:9c:bd:25:c8:d7:3f:e6:b4:d2:0b:
a0:48:0e:ce:91:4f:34:e2:f8:25:ec:29:12:d6:0e:49:bb:5f:
fc:66:9d:80:0e:d9:a0:10:1e:47:e5:47:a4:3a:a1:23:12:9c:
c0:cf:66:a8:0c:d7:43:65:8a:26:35:a6:21:a4:96:3b:a6:31:
23:bb:f6:13:71:db:a8:a4:1e:9d:c2:3a:f5:a6:6d:7c:38:93:
17:d9:95:15:a3:a8:72:79:59:1d:b6:22:ac:ff:c8:4a:fe:99:
4f:d9:ef:8d:b6:fb:12:5c:f6:e4:e3:ee:a9:50:16:33:5b:89:
aa:15:fd:60:06:6f:49:38:1b:5a:8b:18:28:dd:68:a2:c6:2a:
9b:42:bc:79:04:ef:ad:5c:eb:c1:c6:c8:94:c4:c0:d0:d9:31:
2a:ca:45:a4:72:b8:d3:5a:02:ba:ee:78:24:ed:82:fd:bf:f2:
2e:55:d1:be:42:cf:ef:87:a3:d8:8d:7d:c0:6c:97:70:be:0b:
25:79:97:89:1a:14:6c:b6:21:2f:a5:5e:5f:08:8d:0a:07:d7:
37:81:45:47:4e:79:be:63:de:b8:e8:57:45:60:38:7a:d5:61:
b8:06:b7:fd:92:70:26:d2:31:63:54:65:5d:1f:63:c7:ec:5b:
d7:1e:b9:d0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVSLt+wR3FALKSMUdAYqQ8gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjI3MDYwNDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDY0ZGQ5MTk3MzhmNDA3YTI1ZjAyMWY2ZWZmNDgzOWNlYzAzMzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPNTXHWnbKuydHX932dVP74njQ13
dZUTORWpfkkDy0uHq/clmV8HtSnjKKLam8UqBYTSl5Q1g8ZfDZ9UPSO4VYrdE+3X
hwHCq3wQWLZvh9pNu3S5f3vEhIvsmP9MGUmJE6AW5O4/sfj2jnJ687vAh9ewx8OR
q1AYlfDElJLrdSKh/muAqubDEuF96W7V/RahFfXeENFW3zX3fqQHLvKa89J1+pcV
Wujj50m9MkuK5P0XJ4K6GMIOBkHLhqFDknJZxG2hyeplNhtMHacbGqThP0NVlYh0
r2IpkSGSFe5qfWf8TzybHO2DZhesRoF9jTvDmXeWt5yd3STIyiHXhZdlLQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPRk3ZGXOPQHol8CH27/SDnOwDMXMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOUdUZGtaYzQ5QWVpWHdJZmJ2OUlPYzdBTXhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF0NxwAODYj6nL0lyNc/
5rTSC6BIDs6RTzTi+CXsKRLWDkm7X/xmnYAO2aAQHkflR6Q6oSMSnMDPZqgM10Nl
iiY1piGkljumMSO79hNx26ikHp3COvWmbXw4kxfZlRWjqHJ5WR22Iqz/yEr+mU/Z
7422+xJc9uTj7qlQFjNbiaoV/WAGb0k4G1qLGCjdaKLGKptCvHkE761c68HGyJTE
wNDZMSrKRaRyuNNaArrueCTtgv2/8i5V0b5Cz++Ho9iNfcBsl3C+CyV5l4kaFGy2
IS+lXl8IjQoH1zeBRUdOeb5j3rjoV0VgOHrVYbgGt/2ScCbSMWNUZV0fY8fsW9ce
udA=
-----END CERTIFICATE-----
Generated at Tue Jun 10 11:42:45 2025 by rpki-client