Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NN_Mr7ZLhly4l5A_AT2Sf8rdOqs.roa
File: NN_Mr7ZLhly4l5A_AT2Sf8rdOqs.roa (raw, json)
Hash identifier: dnUCVrXDe5mAS3EYz2vPmFu9IgIWtQa7hjPTelnVVv8=
Subject key identifier: 34:DF:CC:AF:B6:4B:86:5C:B8:97:90:3F:01:3D:92:7F:CA:DD:3A:AB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185BD7D940A3B8EDE8CC1D1152D5BDDB102
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NN_Mr7ZLhly4l5A_AT2Sf8rdOqs.roa
Signing time: Tue 17 Jan 2023 02:10:01 +0000
ROA not before: Tue 17 Jan 2023 02:10:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:ba40:6692/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bd:7d:94:0a:3b:8e:de:8c:c1:d1:15:2d:5b:dd:b1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 17 02:10:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34dfccafb64b865cb897903f013d927fcadd3aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c9:45:a3:72:c3:84:b1:38:9d:c9:f6:a9:1f:
af:4c:03:02:dc:1d:ef:2d:f4:77:0f:67:87:6c:e0:
71:45:96:af:79:82:24:4f:08:51:ef:46:e6:ea:6c:
cb:c4:72:53:21:cb:07:92:22:04:53:44:68:12:53:
a3:3c:b7:17:f6:b0:b8:eb:aa:eb:c2:0e:f3:fb:61:
04:11:f9:66:39:bb:c4:bb:6c:0a:28:a0:ba:8f:d5:
31:9d:4a:c4:76:e0:cd:a4:0f:27:fe:96:ae:6c:a0:
88:d7:0a:9f:fc:8f:cc:d5:1a:32:a0:fd:e9:f3:55:
8f:4e:92:e6:41:c5:55:ff:44:f3:60:f3:3d:5a:d6:
34:70:a1:2d:1f:b5:b8:9c:17:e4:00:49:ab:61:ca:
df:53:09:31:ec:1c:1c:69:a8:b3:94:0b:b9:a7:3d:
83:52:a6:dd:3c:bc:78:a7:35:d4:66:2b:67:de:d5:
39:1f:d7:d5:a0:a5:ab:d3:25:b0:ab:35:da:21:14:
52:89:6b:f1:cf:40:e3:84:59:91:1e:9c:c8:d5:63:
93:b0:95:77:51:a6:7c:03:ed:07:de:72:ef:fc:68:
be:3b:78:9e:75:ce:d1:9a:76:0e:32:4c:f0:fd:eb:
c9:35:99:8c:fa:39:ce:6f:50:89:de:3b:58:f2:1f:
ed:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DF:CC:AF:B6:4B:86:5C:B8:97:90:3F:01:3D:92:7F:CA:DD:3A:AB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NN_Mr7ZLhly4l5A_AT2Sf8rdOqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:26:94:e0:57:66:f1:6e:67:82:a6:1e:40:ce:52:fe:af:b8:
d2:0f:8f:d5:04:31:c9:25:40:e9:38:ff:ed:33:9b:59:6c:84:
fa:4d:c2:8c:41:a3:1d:3e:c8:27:29:05:67:37:5a:05:c9:e5:
92:99:17:1f:93:cc:75:9d:20:d6:0f:dd:77:da:9f:f7:e8:7c:
61:50:1c:b1:22:06:05:9e:21:d7:9b:d3:68:5f:86:c0:ac:65:
8e:5c:6e:2d:f1:d6:cc:a2:ee:76:88:95:c3:14:84:6c:d5:d3:
09:ac:74:de:ab:ea:bf:56:62:87:46:29:f5:e0:1a:f5:76:2f:
7a:09:d3:f9:de:48:85:82:db:7d:68:54:4c:03:03:13:3d:98:
20:7f:16:9c:e4:a3:23:83:c8:36:80:1e:3d:d8:6c:91:48:20:
2b:d9:3b:e4:56:5d:13:8c:ba:22:e9:51:50:64:5b:19:1d:c2:
2e:d3:3e:ea:ec:ab:1c:53:92:87:a5:a9:53:80:51:a4:ab:e5:
ac:d5:db:1b:44:c6:b9:14:66:b0:39:4e:14:d3:ac:2e:1d:9a:
7f:84:6a:2d:94:73:92:4c:59:22:06:eb:bb:10:b5:9e:54:be:
d4:d7:9e:0d:47:97:d3:d0:e5:05:90:bf:9a:48:1f:a0:e9:40:
0f:22:2f:cd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYW9fZQKO47ejMHRFS1b3bECMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTE3MDIxMDAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGRmY2NhZmI2NGI4NjVjYjg5NzkwM2YwMTNkOTI3ZmNhZGQzYWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMlFo3LDhLE4ncn2qR+vTAMC3B3v
LfR3D2eHbOBxRZaveYIkTwhR70bm6mzLxHJTIcsHkiIEU0RoElOjPLcX9rC466rr
wg7z+2EEEflmObvEu2wKKKC6j9UxnUrEduDNpA8n/paubKCI1wqf/I/M1RoyoP3p
81WPTpLmQcVV/0TzYPM9WtY0cKEtH7W4nBfkAEmrYcrfUwkx7BwcaaizlAu5pz2D
UqbdPLx4pzXUZitn3tU5H9fVoKWr0yWwqzXaIRRSiWvxz0DjhFmRHpzI1WOTsJV3
UaZ8A+0H3nLv/Gi+O3iedc7RmnYOMkzw/evJNZmM+jnOb1CJ3jtY8h/tVQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDTfzK+2S4ZcuJeQPwE9kn/K3TqrMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTk5fTXI3WkxobHk0bDVBX0FUMlNmOHJkT3FzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAI8mlOBXZvFuZ4KmHkDO
Uv6vuNIPj9UEMcklQOk4/+0zm1lshPpNwoxBox0+yCcpBWc3WgXJ5ZKZFx+TzHWd
INYP3Xfan/fofGFQHLEiBgWeIdeb02hfhsCsZY5cbi3x1syi7naIlcMUhGzV0wms
dN6r6r9WYodGKfXgGvV2L3oJ0/neSIWC231oVEwDAxM9mCB/FpzkoyODyDaAHj3Y
bJFIICvZO+RWXROMuiLpUVBkWxkdwi7TPursqxxTkoelqVOAUaSr5azV2xtExrkU
ZrA5ThTTrC4dmn+Eai2Uc5JMWSIG67sQtZ5UvtTXng1Hl9PQ5QWQv5pIH6DpQA8i
L80=
-----END CERTIFICATE-----
Generated at Sun Jun 8 22:21:11 2025 by rpki-client