Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9UP1cjqIL-vouFTjrDBu4bdz4EA.roa
File: 9UP1cjqIL-vouFTjrDBu4bdz4EA.roa (raw, json)
Hash identifier: bULnVxRPbUt4BNNwYIgMBUH4HCrqrZmTJC0pGNx27Wo=
Subject key identifier: F5:43:F5:72:3A:88:2F:EB:E8:B8:54:E3:AC:30:6E:E1:B7:73:E0:40
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A06D91630A3EF9F32A9F491928B5D0B53
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9UP1cjqIL-vouFTjrDBu4bdz4EA.roa
Signing time: Fri 18 Aug 2023 04:13:24 +0000
ROA not before: Fri 18 Aug 2023 04:13:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:06:d9:16:30:a3:ef:9f:32:a9:f4:91:92:8b:5d:0b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 04:13:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f543f5723a882febe8b854e3ac306ee1b773e040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:da:65:e6:c7:7f:4a:f5:fd:f1:73:ec:8d:f9:
7c:f2:47:90:f7:0a:7b:83:89:1f:c3:07:64:ca:c5:
58:d4:c5:b0:d5:11:ef:3b:13:ce:9b:4b:e8:76:7f:
3e:fb:55:e5:36:fa:4a:48:4b:c9:15:6a:85:e8:c2:
fa:11:7e:28:63:fc:a0:87:0d:38:9e:ea:e3:04:9b:
a5:85:7b:3d:d8:7c:45:bc:21:7f:a6:7f:49:2b:19:
eb:dd:6d:19:ff:af:32:3a:83:29:29:ae:90:13:06:
24:3e:51:2f:7a:bb:3f:c6:13:0c:45:fe:01:9d:df:
4b:46:38:3c:aa:4b:2e:cb:95:27:3d:6c:35:86:e1:
f3:0a:56:44:93:83:48:4b:b2:b6:f4:f4:67:51:ca:
98:96:a1:93:af:2b:f0:82:f4:4d:ac:22:cb:d3:a8:
21:2c:cf:3e:e1:dd:2c:04:17:28:cd:4b:8d:98:7f:
f2:e7:3f:25:ab:ba:6d:9d:38:6d:4c:c5:99:47:a1:
10:cc:f1:1d:2b:01:34:8c:e2:c2:27:4c:5d:67:b9:
17:83:45:d0:d1:69:24:ab:db:7c:dc:cd:6f:9c:51:
72:b7:0f:60:4a:39:90:0c:36:2d:6a:a9:d6:ca:d1:
39:ba:f5:3f:1d:f6:a8:04:ef:71:76:83:f8:4a:ab:
d5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:43:F5:72:3A:88:2F:EB:E8:B8:54:E3:AC:30:6E:E1:B7:73:E0:40
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9UP1cjqIL-vouFTjrDBu4bdz4EA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:5a:29:f6:d7:f2:ae:e1:cf:95:cb:b4:e7:33:cd:04:8f:88:
81:b9:9a:e3:5c:b8:74:a1:e6:17:ad:db:aa:e7:c9:30:87:68:
f6:c5:aa:91:29:6d:4b:c4:6b:6a:84:1c:97:9b:cf:f9:9f:e9:
9e:23:a1:16:ff:ac:30:9f:82:73:25:6e:a8:61:81:8a:37:02:
90:ab:a4:37:b7:1a:6d:71:9c:04:53:f8:a7:32:f4:62:62:29:
df:8b:e4:96:5e:46:29:ec:76:0a:b9:ac:1c:81:e0:50:bf:ef:
df:59:f1:7a:a2:d7:c0:25:cd:13:21:45:ec:86:2b:cb:29:30:
a4:37:a1:81:c6:7f:48:05:ba:14:f9:b4:a1:ea:3f:57:5a:70:
f8:76:9a:8b:17:36:a4:e0:60:36:54:06:fc:c1:85:6e:18:7b:
ec:3a:84:30:50:d2:3f:76:15:a7:f8:51:b4:59:17:7f:85:75:
4f:03:e4:90:6d:8c:57:8a:03:bd:a4:75:8f:6d:60:ad:2d:17:
13:77:d5:f0:7b:3c:7b:6d:c6:78:c0:a7:93:08:cc:28:23:82:
2e:f2:c7:cd:29:09:1a:95:91:92:69:ad:dd:7c:b8:e3:cd:77:
e6:c1:26:d4:69:48:20:ee:e8:f1:ad:4c:ea:eb:13:89:a4:45:
80:c2:55:70
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoG2RYwo++fMqn0kZKLXQtTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODE4MDQxMzI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTQzZjU3MjNhODgyZmViZThiODU0ZTNhYzMwNmVlMWI3NzNlMDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9pl5sd/SvX98XPsjfl88keQ9wp7
g4kfwwdkysVY1MWw1RHvOxPOm0vodn8++1XlNvpKSEvJFWqF6ML6EX4oY/yghw04
nurjBJulhXs92HxFvCF/pn9JKxnr3W0Z/68yOoMpKa6QEwYkPlEvers/xhMMRf4B
nd9LRjg8qksuy5UnPWw1huHzClZEk4NIS7K29PRnUcqYlqGTryvwgvRNrCLL06gh
LM8+4d0sBBcozUuNmH/y5z8lq7ptnThtTMWZR6EQzPEdKwE0jOLCJ0xdZ7kXg0XQ
0Wkkq9t83M1vnFFytw9gSjmQDDYtaqnWytE5uvU/HfaoBO9xdoP4SqvVtQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPVD9XI6iC/r6LhU46wwbuG3c+BAMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOVVQMWNqcUlMLXZvdUZUanJEQnU0YmR6NEVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJpaKfbX8q7hz5XLtOcz
zQSPiIG5muNcuHSh5het26rnyTCHaPbFqpEpbUvEa2qEHJebz/mf6Z4joRb/rDCf
gnMlbqhhgYo3ApCrpDe3Gm1xnART+Kcy9GJiKd+L5JZeRinsdgq5rByB4FC/799Z
8Xqi18AlzRMhReyGK8spMKQ3oYHGf0gFuhT5tKHqP1dacPh2mosXNqTgYDZUBvzB
hW4Ye+w6hDBQ0j92Faf4UbRZF3+FdU8D5JBtjFeKA72kdY9tYK0tFxN31fB7PHtt
xnjAp5MIzCgjgi7yx80pCRqVkZJprd18uOPNd+bBJtRpSCDu6PGtTOrrE4mkRYDC
VXA=
-----END CERTIFICATE-----
Generated at Wed Jun 11 05:38:57 2025 by rpki-client