Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C8_d4ygYqyK0e5YySd-K0KTyIjU.roa
File: C8_d4ygYqyK0e5YySd-K0KTyIjU.roa (raw, json)
Hash identifier: DfgdhYePKTAMud+D/Pm+72pDsJzLDiUvFEs+ycxWkzY=
Subject key identifier: 0B:CF:DD:E3:28:18:AB:22:B4:7B:96:32:49:DF:8A:D0:A4:F2:22:35
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8A65C23F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C8_d4ygYqyK0e5YySd-K0KTyIjU.roa
Signing time: Mon 06 Jun 2022 11:16:20 +0000
ROA not before: Mon 06 Jun 2022 11:16:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2321924671 (0x8a65c23f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 6 11:16:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0bcfdde32818ab22b47b963249df8ad0a4f22235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7f:7d:9a:4d:39:6f:a2:30:32:07:f5:70:2d:
19:c4:a9:92:d3:e7:56:7a:df:4d:e5:48:95:b7:78:
ac:3c:f9:7c:bd:ef:46:47:3d:bf:6d:b7:42:61:ca:
1d:3d:bc:e1:d4:b8:57:6d:af:d8:1d:8c:d2:e0:cb:
86:ae:9c:de:49:d8:d2:0c:c2:7c:e7:cd:36:db:64:
d7:20:ff:23:92:e5:a5:e0:80:62:cc:36:86:8c:14:
44:e0:ba:14:95:d5:bb:04:e5:e6:f2:d6:49:c1:1c:
70:d6:68:5e:bf:62:60:bf:3e:0a:61:84:ab:7c:db:
a2:10:0b:1a:6e:0b:6f:fa:98:18:f0:e3:68:6c:86:
b7:0c:f7:e6:f6:44:e0:86:a5:78:d7:09:d8:a3:dc:
8d:a9:ae:31:7d:f4:b1:b4:f0:f9:a1:88:31:a2:34:
ae:ef:3e:a9:4f:86:0e:1e:40:90:ea:05:54:d0:7c:
1b:10:7f:8f:dc:c4:e2:fa:24:44:77:b3:eb:ed:43:
7c:de:92:66:4c:7c:4b:9e:d3:62:7f:b8:74:a7:be:
93:9b:02:2f:1d:87:23:e5:54:fa:30:8b:14:c6:24:
d4:78:a0:20:db:ea:c5:e4:dc:c9:f4:aa:03:37:ef:
e0:a2:b7:77:40:a5:58:fd:5a:df:85:1a:63:de:ca:
ef:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CF:DD:E3:28:18:AB:22:B4:7B:96:32:49:DF:8A:D0:A4:F2:22:35
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C8_d4ygYqyK0e5YySd-K0KTyIjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:40:20:b2:d3:cb:31:e5:16:20:89:b6:b0:0c:41:b8:51:e0:
5b:fa:0e:c2:bb:2b:fb:4b:6e:cb:0c:ef:cc:52:be:ad:c8:c1:
92:18:30:f9:0c:9c:3d:c7:9e:cd:a1:de:47:8d:98:4f:34:29:
15:b3:8d:3f:78:19:7d:34:c1:3c:c9:74:3d:f5:89:14:4b:17:
93:6e:ee:11:25:c9:0f:af:1c:5a:64:0a:cd:ff:5f:f8:81:53:
ff:dc:17:90:ec:38:06:14:17:5d:d3:a7:31:1c:d9:b0:ec:4d:
b0:de:60:80:a4:59:59:51:01:43:24:1b:19:68:5c:db:ca:d2:
01:a1:c7:fe:d4:69:68:60:ef:bc:91:c7:45:ca:ae:e7:26:ef:
82:e8:6e:7e:22:03:5c:e3:b3:54:df:c3:88:3d:4a:f1:e0:40:
74:b8:20:f6:21:28:74:1f:94:9e:24:7b:1e:1a:36:2f:8c:e7:
19:59:b3:fa:2e:9d:df:c2:2c:7e:1a:35:6f:24:5f:7d:12:60:
29:2d:16:88:93:e7:d7:14:46:ba:0f:65:e7:08:e9:94:bc:e8:
d2:ae:fd:2e:fd:35:c7:53:0d:68:de:3e:ed:3b:4b:6e:41:38:
4a:76:62:20:32:56:2d:5b:a9:90:6b:37:98:01:46:4c:d6:ca:
6d:bf:83:42
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIplwj8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MDYxMTE2MjBaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDBiY2ZkZGUzMjgx
OGFiMjJiNDdiOTYzMjQ5ZGY4YWQwYTRmMjIyMzUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCTf32aTTlvojAyB/VwLRnEqZLT51Z6303lSJW3eKw8+Xy9
70ZHPb9tt0Jhyh09vOHUuFdtr9gdjNLgy4aunN5J2NIMwnznzTbbZNcg/yOS5aXg
gGLMNoaMFETguhSV1bsE5eby1knBHHDWaF6/YmC/PgphhKt826IQCxpuC2/6mBjw
42hshrcM9+b2ROCGpXjXCdij3I2prjF99LG08PmhiDGiNK7vPqlPhg4eQJDqBVTQ
fBsQf4/cxOL6JER3s+vtQ3zekmZMfEue02J/uHSnvpObAi8dhyPlVPowixTGJNR4
oCDb6sXk3Mn0qgM37+Cit3dApVj9Wt+FGmPeyu/FAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUC8/d4ygYqyK0e5YySd+K0KTyIjUwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9DOF9kNHlnWXF5SzBlNVl5U2QtSzBLVHlJalUucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAJkAgstPLMeUWIIm2sAxBuFHgW/oOwrsr+0tu
ywzvzFK+rcjBkhgw+QycPceezaHeR42YTzQpFbONP3gZfTTBPMl0PfWJFEsXk27u
ESXJD68cWmQKzf9f+IFT/9wXkOw4BhQXXdOnMRzZsOxNsN5ggKRZWVEBQyQbGWhc
28rSAaHH/tRpaGDvvJHHRcqu5ybvguhufiIDXOOzVN/DiD1K8eBAdLgg9iEodB+U
niR7Hho2L4znGVmz+i6d38Isfho1byRffRJgKS0WiJPn1xRGug9l5wjplLzo0q79
Lv01x1MNaN4+7TtLbkE4SnZiIDJWLVupkGs3mAFGTNbKbb+DQg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 02:44:24 2025 by rpki-client