Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hym8QZ0qlC5yED2BFVuo9mZTSIc.roa
File: Hym8QZ0qlC5yED2BFVuo9mZTSIc.roa (raw, json)
Hash identifier: 41oDkXCQEoQ56tuK/x5xEEKB+jnA+htwhTa7QEmiqtg=
Subject key identifier: 1F:29:BC:41:9D:2A:94:2E:72:10:3D:81:15:5B:A8:F6:66:53:48:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6E0AA719
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hym8QZ0qlC5yED2BFVuo9mZTSIc.roa
Signing time: Sun 27 Feb 2022 03:10:54 +0000
ROA not before: Sun 27 Feb 2022 03:10:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1846191897 (0x6e0aa719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 27 03:10:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f29bc419d2a942e72103d81155ba8f666534887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:c6:9e:9f:3b:42:2b:d5:a9:24:1f:dc:a7:
40:49:f0:17:b7:58:f2:77:70:c2:6c:5b:41:e3:34:
eb:d6:6b:d5:0f:95:7e:d6:1d:14:ca:54:c2:83:3f:
bf:d8:b8:da:6a:19:2f:bd:d1:95:d4:52:b6:f7:fa:
a1:d5:fc:bc:9a:77:31:8c:f1:7a:9f:73:80:3f:41:
49:d8:92:63:81:80:e2:1a:82:3b:11:e8:8b:2f:e8:
5f:d7:28:46:28:31:12:f6:b0:8f:db:07:8a:9d:8e:
94:2d:b7:f0:dc:e1:7b:8d:e8:50:d4:70:40:0c:16:
ae:e8:10:68:a2:06:88:e5:cf:7b:13:f0:9a:9e:e1:
4d:9c:d2:2f:02:d0:6b:63:39:08:e2:16:7d:76:ca:
bd:9e:36:4c:73:da:49:80:b0:72:85:31:d8:8a:8b:
f5:37:c3:71:4a:80:03:8d:20:ab:40:94:0a:04:f5:
cd:5a:29:0e:d7:52:79:cf:95:15:ed:20:7a:a5:e7:
ec:74:04:cc:c2:6a:96:23:e1:eb:a8:bc:47:0b:df:
4b:ef:7a:7d:0d:a0:40:0a:b9:0a:dc:2c:38:df:b1:
f6:2f:4b:5f:b1:ea:bf:6c:fe:4e:ed:2f:d0:23:33:
ef:b7:58:48:e4:d0:bb:00:83:12:b8:f8:5a:55:22:
a6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:29:BC:41:9D:2A:94:2E:72:10:3D:81:15:5B:A8:F6:66:53:48:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Hym8QZ0qlC5yED2BFVuo9mZTSIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:11:10:b4:0a:0e:1d:bf:f4:ee:c5:57:c8:b7:c3:e1:88:f5:
8b:8e:7c:b8:36:03:c3:9e:e7:b0:b2:d7:04:d2:8e:95:b1:f7:
5c:78:ab:07:8a:6c:86:b8:47:0e:24:08:f0:44:3b:24:5a:be:
13:f0:05:40:ec:3e:6e:ba:3a:37:13:7f:20:b6:28:4a:a0:a5:
cf:75:e2:07:4e:bd:47:d4:f4:21:ed:f7:24:b6:4f:31:b6:06:
3d:8b:5c:61:04:da:36:a1:69:dd:eb:12:30:77:d9:2e:75:79:
b3:e7:da:fe:ca:85:3b:8e:72:fa:fd:6f:9a:e8:3d:7b:3e:75:
72:75:7f:fa:6e:c9:a4:4e:99:c1:35:8e:96:97:0a:01:da:eb:
51:72:f9:dd:7e:2c:da:8f:31:72:05:1e:24:47:00:ee:45:e0:
cf:c0:12:b8:bb:e1:a4:f1:ba:45:d4:ba:ff:e8:90:36:0e:75:
96:4b:20:43:4e:f4:2d:01:d8:7a:39:72:94:e3:e9:6e:68:65:
07:d3:66:00:ba:32:0e:c4:9e:06:ba:b4:17:a1:72:46:af:60:
49:96:ad:58:27:3e:f9:bc:78:68:49:bb:f6:87:7b:44:a9:68:
3a:6e:08:dd:47:0f:b4:64:86:ce:cc:7f:9a:80:4e:fa:a4:33:
0a:5c:48:5f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEbgqnGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIy
NzAzMTA1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWYyOWJjNDE5ZDJh
OTQyZTcyMTAzZDgxMTU1YmE4ZjY2NjUzNDg4NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALSFxp6fO0Ir1akkH9ynQEnwF7dY8ndwwmxbQeM069Zr1Q+V
ftYdFMpUwoM/v9i42moZL73RldRStvf6odX8vJp3MYzxep9zgD9BSdiSY4GA4hqC
OxHoiy/oX9coRigxEvawj9sHip2OlC238Nzhe43oUNRwQAwWrugQaKIGiOXPexPw
mp7hTZzSLwLQa2M5COIWfXbKvZ42THPaSYCwcoUx2IqL9TfDcUqAA40gq0CUCgT1
zVopDtdSec+VFe0geqXn7HQEzMJqliPh66i8RwvfS+96fQ2gQAq5CtwsON+x9i9L
X7Hqv2z+Tu0v0CMz77dYSOTQuwCDErj4WlUipiUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQfKbxBnSqULnIQPYEVW6j2ZlNIhzAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L0h5bThRWjBxbEM1eUVEMkJGVnVvOW1aVFNJYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAIERC0Cg4dv/TuxVfIt8PhiPWLjny4NgPDnuew
stcE0o6VsfdceKsHimyGuEcOJAjwRDskWr4T8AVA7D5uujo3E38gtihKoKXPdeIH
Tr1H1PQh7fcktk8xtgY9i1xhBNo2oWnd6xIwd9kudXmz59r+yoU7jnL6/W+a6D17
PnVydX/6bsmkTpnBNY6WlwoB2utRcvndfizajzFyBR4kRwDuReDPwBK4u+Gk8bpF
1Lr/6JA2DnWWSyBDTvQtAdh6OXKU4+luaGUH02YAujIOxJ4GurQXoXJGr2BJlq1Y
Jz75vHhoSbv2h3tEqWg6bgjdRw+0ZIbOzH+agE76pDMKXEhf
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:36 2025 by rpki-client