Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A_vUMoVwF99qVv6mcGuP_vCtpjQ.roa
File: A_vUMoVwF99qVv6mcGuP_vCtpjQ.roa (raw, json)
Hash identifier: lQa6JZnZdXCzXrsO20lExk89S7KjDFVB0JODx6n8fLo=
Subject key identifier: 03:FB:D4:32:85:70:17:DF:6A:56:FE:A6:70:6B:8F:FE:F0:AD:A6:34
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864AE07BC56564A159350C9C95CFBAB9CC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A_vUMoVwF99qVv6mcGuP_vCtpjQ.roa
Signing time: Mon 13 Feb 2023 13:04:30 +0000
ROA not before: Mon 13 Feb 2023 13:04:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:4ae0:5f51/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4a:e0:7b:c5:65:64:a1:59:35:0c:9c:95:cf:ba:b9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 13:04:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03fbd432857017df6a56fea6706b8ffef0ada634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b3:7e:8f:09:e3:e8:9c:46:df:99:bc:bb:ab:
05:8f:99:8f:f2:49:0d:8d:c8:43:d0:37:1b:49:ec:
e2:70:92:b5:73:4c:35:3f:bc:61:b4:25:da:02:d1:
7f:73:0c:68:ee:42:96:e3:5d:b9:cf:05:c8:7a:ed:
9b:63:47:42:a5:6a:96:44:93:16:ae:8b:cd:3c:be:
63:cd:e5:ae:1d:ab:14:7e:53:94:e4:4a:5b:96:fa:
ec:84:3e:99:b6:02:d3:1f:a5:43:f4:39:36:fd:c5:
e2:fd:e6:fc:e4:de:4d:10:23:a3:7d:d6:e1:7c:11:
e2:18:11:62:f3:c7:36:0b:d1:3b:9c:38:a4:57:f2:
79:79:97:04:b8:e4:60:2f:9c:36:41:a0:fc:db:2d:
58:e5:96:fb:cb:19:88:29:ba:71:fa:86:07:44:31:
2e:81:16:c0:0d:4d:2f:15:27:94:c9:23:7f:5b:39:
9d:3c:ca:1e:c1:e9:0e:6b:ce:9a:3f:79:05:f8:00:
d2:f4:66:c7:a0:4f:48:e2:30:4e:4d:74:64:97:95:
6a:c2:da:ab:d5:cd:74:40:49:83:45:76:e2:06:f5:
74:65:8b:bf:41:46:7b:e9:cb:e5:09:76:6c:c1:e3:
68:24:2e:2c:33:6b:64:5e:9b:9b:e9:6c:6d:52:8e:
16:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FB:D4:32:85:70:17:DF:6A:56:FE:A6:70:6B:8F:FE:F0:AD:A6:34
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A_vUMoVwF99qVv6mcGuP_vCtpjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:20:f9:d5:2d:72:08:98:58:46:20:94:e6:2f:59:b1:4e:61:
29:63:76:3f:e4:3c:88:67:f4:bf:71:89:5a:5d:9c:d0:5a:2d:
94:e5:4f:73:f2:88:85:c4:19:19:37:6f:6d:3a:b7:0c:e0:ac:
c2:c9:a6:4a:2f:f2:0a:33:97:45:1c:70:c3:6e:d8:97:77:a6:
40:7c:76:40:47:09:d0:36:63:97:56:b3:e1:94:97:7b:d3:c4:
96:0a:5f:43:83:63:21:f1:c3:c7:f0:b1:8a:74:20:03:a6:df:
17:fe:98:c9:cf:26:15:7c:0b:9c:87:e5:52:59:6c:a1:fa:bf:
67:cd:3d:17:98:50:3c:eb:94:c7:dc:8b:1e:39:49:04:fa:d9:
9b:bc:00:73:41:d9:99:30:5e:28:a1:2c:5b:6b:cd:32:c0:43:
15:3c:05:6c:5d:9c:37:75:49:c3:e5:75:58:69:e9:e2:f6:55:
49:8d:0e:c3:16:fe:27:65:4d:0f:71:61:5e:b9:e7:25:b4:71:
57:82:72:16:2c:89:01:5b:e5:c9:8b:08:cd:10:db:ce:7b:d6:
04:55:72:36:83:74:65:4a:16:0d:90:51:2d:21:eb:5a:48:8d:
1f:64:ee:0b:8e:42:31:a0:da:ab:fa:4c:05:cc:c0:0f:c1:1f:
15:69:46:5b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZK4HvFZWShWTUMnJXPurnMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjEzMTMwNDMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2ZiZDQzMjg1NzAxN2RmNmE1NmZlYTY3MDZiOGZmZWYwYWRhNjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7N+jwnj6JxG35m8u6sFj5mP8kkN
jchD0DcbSezicJK1c0w1P7xhtCXaAtF/cwxo7kKW4125zwXIeu2bY0dCpWqWRJMW
rovNPL5jzeWuHasUflOU5EpblvrshD6ZtgLTH6VD9Dk2/cXi/eb85N5NECOjfdbh
fBHiGBFi88c2C9E7nDikV/J5eZcEuORgL5w2QaD82y1Y5Zb7yxmIKbpx+oYHRDEu
gRbADU0vFSeUySN/WzmdPMoewekOa86aP3kF+ADS9GbHoE9I4jBOTXRkl5Vqwtqr
1c10QEmDRXbiBvV0ZYu/QUZ76cvlCXZsweNoJC4sM2tkXpub6WxtUo4WFwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAP71DKFcBffalb+pnBrj/7wraY0MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQV92VU1vVndGOTlxVnY2bWNHdVBfdkN0cGpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA8g+dUtcgiYWEYglOYv
WbFOYSljdj/kPIhn9L9xiVpdnNBaLZTlT3PyiIXEGRk3b206twzgrMLJpkov8goz
l0UccMNu2Jd3pkB8dkBHCdA2Y5dWs+GUl3vTxJYKX0ODYyHxw8fwsYp0IAOm3xf+
mMnPJhV8C5yH5VJZbKH6v2fNPReYUDzrlMfcix45SQT62Zu8AHNB2ZkwXiihLFtr
zTLAQxU8BWxdnDd1ScPldVhp6eL2VUmNDsMW/idlTQ9xYV655yW0cVeCchYsiQFb
5cmLCM0Q28571gRVcjaDdGVKFg2QUS0h61pIjR9k7guOQjGg2qv6TAXMwA/BHxVp
Rls=
-----END CERTIFICATE-----
Generated at Mon Jun 9 13:21:27 2025 by rpki-client