Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ORMFXSQ6Yi0Pu_uho3E21f9lFDg.roa
File: ORMFXSQ6Yi0Pu_uho3E21f9lFDg.roa (raw, json)
Hash identifier: uq+1zrqHEZz63iHnN+WDniHtEyNLfebM8rge+MVTHig=
Subject key identifier: 39:13:05:5D:24:3A:62:2D:0F:BB:FB:A1:A3:71:36:D5:FF:65:14:38
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8D4CCD5D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ORMFXSQ6Yi0Pu_uho3E21f9lFDg.roa
Signing time: Thu 16 Jun 2022 19:10:44 +0000
ROA not before: Thu 16 Jun 2022 19:10:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2370620765 (0x8d4ccd5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 16 19:10:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3913055d243a622d0fbbfba1a37136d5ff651438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1e:e2:f2:cc:ed:ee:a0:bd:48:ea:86:ae:d7:
c6:4c:01:e8:9d:72:56:b1:48:5d:e9:3e:5c:d5:66:
30:cc:a0:c4:d1:e3:bf:7e:5b:da:15:02:5f:fc:b3:
28:e8:81:4f:7f:5d:ea:0e:f3:c3:28:a7:66:bb:73:
f5:af:7d:28:e5:bb:38:48:b2:3f:64:a4:bf:da:1f:
1f:d6:e6:a5:cc:d5:ad:34:4a:77:08:73:e9:e9:19:
e3:9b:71:d3:a6:ee:c0:de:93:93:7d:ff:b8:a7:90:
43:ef:0e:40:61:db:08:ac:eb:67:f1:e8:33:d2:43:
da:7f:18:b7:26:75:3c:78:83:f9:47:40:dc:56:77:
fd:ee:f7:01:35:cf:ab:4d:0f:30:03:f5:21:11:6e:
5f:b4:4d:08:57:fe:b6:b7:49:22:8e:06:22:6c:84:
fa:b9:7b:d6:bc:3f:a2:02:79:c2:55:67:bf:a0:88:
b8:d2:95:39:7a:1d:b1:25:ec:a0:ff:57:92:4b:7e:
29:a6:10:f5:19:85:00:84:79:ef:b9:94:7a:44:7b:
12:29:86:76:ca:c3:6f:9a:2e:11:a2:7d:52:da:e4:
49:eb:d6:2f:92:49:54:bd:98:7a:16:5f:f1:c2:2f:
3a:c7:3f:cb:f8:a7:5f:53:0e:50:a2:64:36:d4:9c:
73:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:13:05:5D:24:3A:62:2D:0F:BB:FB:A1:A3:71:36:D5:FF:65:14:38
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ORMFXSQ6Yi0Pu_uho3E21f9lFDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:5c:be:95:71:14:37:1e:d4:66:e1:8c:0a:ce:90:8f:58:a9:
15:f5:e4:04:79:ec:5b:c9:fb:81:9f:65:5f:9f:d7:34:d8:1d:
6b:a9:83:65:31:72:bc:da:86:03:d7:60:5d:f2:43:61:25:60:
55:b9:f4:2c:e1:b8:06:59:e4:9a:70:0c:0a:3c:44:16:90:3e:
98:26:a2:d7:fe:18:fd:cf:d7:7e:29:7d:28:42:c2:a1:0c:36:
c9:67:a7:3f:29:4c:57:5b:ea:f6:e2:07:49:9c:14:89:b3:9a:
d4:08:db:1c:0d:a1:61:3b:aa:d5:2d:40:08:ff:4e:2c:22:f2:
19:e1:23:ea:3e:cc:ea:e9:8f:f2:ff:b8:64:76:02:af:79:62:
fe:a2:d3:d4:30:97:d2:a8:69:e4:84:5d:48:59:f7:0b:03:0b:
9d:e1:54:c0:c7:23:8c:4b:92:51:1f:2b:f0:77:0c:5e:d8:42:
e3:a9:92:45:ca:1e:74:dd:a1:16:2a:67:ab:da:8c:44:62:4a:
d7:74:9c:56:99:61:89:55:34:b3:19:7b:d0:ac:52:23:02:39:
46:18:fb:e1:20:a3:41:95:05:56:c8:db:3e:22:4b:09:42:1c:
9a:80:7e:47:48:5f:62:76:71:7f:ea:42:3b:2b:46:a2:0c:8f:
4b:d3:28:f0
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAI1MzV0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MTYxOTEwNDRaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDM5MTMwNTVkMjQz
YTYyMmQwZmJiZmJhMWEzNzEzNmQ1ZmY2NTE0MzgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDIHuLyzO3uoL1I6oau18ZMAeidclaxSF3pPlzVZjDMoMTR
479+W9oVAl/8syjogU9/XeoO88Mop2a7c/WvfSjluzhIsj9kpL/aHx/W5qXM1a00
SncIc+npGeObcdOm7sDek5N9/7inkEPvDkBh2wis62fx6DPSQ9p/GLcmdTx4g/lH
QNxWd/3u9wE1z6tNDzAD9SERbl+0TQhX/ra3SSKOBiJshPq5e9a8P6ICecJVZ7+g
iLjSlTl6HbEl7KD/V5JLfimmEPUZhQCEee+5lHpEexIphnbKw2+aLhGifVLa5Enr
1i+SSVS9mHoWX/HCLzrHP8v4p19TDlCiZDbUnHOPAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUORMFXSQ6Yi0Pu/uho3E21f9lFDgwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9PUk1GWFNRNllpMFB1X3VobzNFMjFmOWxGRGcucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAfly+lXEUNx7UZuGMCs6Qj1ipFfXkBHnsW8n7
gZ9lX5/XNNgda6mDZTFyvNqGA9dgXfJDYSVgVbn0LOG4BlnkmnAMCjxEFpA+mCai
1/4Y/c/Xfil9KELCoQw2yWenPylMV1vq9uIHSZwUibOa1AjbHA2hYTuq1S1ACP9O
LCLyGeEj6j7M6umP8v+4ZHYCr3li/qLT1DCX0qhp5IRdSFn3CwMLneFUwMcjjEuS
UR8r8HcMXthC46mSRcoedN2hFipnq9qMRGJK13ScVplhiVU0sxl70KxSIwI5Rhj7
4SCjQZUFVsjbPiJLCUIcmoB+R0hfYnZxf+pCOytGogyPS9Mo8A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:28:32 2025 by rpki-client