Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R4JTBrZbBBtDSX62E3fEjmwNW80.roa
File: R4JTBrZbBBtDSX62E3fEjmwNW80.roa (raw, json)
Hash identifier: QSezqs2h6jdDVgXXM9JGiD0gl22XQw+3NnmOMM5HWC4=
Subject key identifier: 47:82:53:06:B6:5B:04:1B:43:49:7E:B6:13:77:C4:8E:6C:0D:5B:CD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185C37B5AC5293923B6AEE1774A7367F29C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R4JTBrZbBBtDSX62E3fEjmwNW80.roa
Signing time: Wed 18 Jan 2023 06:05:19 +0000
ROA not before: Wed 18 Jan 2023 06:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:c37a:cf1a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c3:7b:5a:c5:29:39:23:b6:ae:e1:77:4a:73:67:f2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 18 06:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47825306b65b041b43497eb61377c48e6c0d5bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cf:6f:53:34:22:31:eb:47:bc:ea:22:c7:0c:
42:d9:74:5e:4a:7b:67:5a:88:32:66:12:65:f6:f1:
4a:56:60:c8:64:30:2d:3c:05:be:ac:2c:5d:7d:72:
5d:9d:66:c8:32:56:b8:25:39:a6:2d:0b:ca:d4:32:
23:ef:a8:77:b8:9b:df:48:8a:91:fd:2d:5c:1c:b5:
54:99:07:3a:c9:f8:4a:9c:0c:88:d7:42:4e:c3:ce:
4d:f9:6d:6a:09:de:02:94:1d:9e:ac:89:19:c9:9d:
d4:91:fd:dd:3c:5c:aa:92:d5:c8:cd:97:c6:0c:19:
b4:93:a2:9c:89:89:7a:20:17:49:18:20:71:11:af:
07:fa:0d:c5:7c:d3:5e:e0:bf:e4:28:ae:69:9c:f5:
72:29:47:41:55:7b:5d:25:72:4f:2a:78:70:e3:50:
4c:35:48:d2:ce:a0:36:89:60:03:be:24:50:2d:c2:
ca:b3:77:80:0b:6e:82:45:87:1b:01:cc:eb:e2:86:
2a:2d:f8:41:52:21:61:d7:02:f1:de:1a:7c:c2:db:
36:dc:6f:a0:d2:54:81:11:37:52:24:6a:16:0a:8c:
d2:93:9c:9e:5a:a8:42:63:af:9c:45:62:69:b9:71:
76:c8:ad:e3:5b:2e:a6:87:04:dd:c5:af:da:15:91:
5d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:82:53:06:B6:5B:04:1B:43:49:7E:B6:13:77:C4:8E:6C:0D:5B:CD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R4JTBrZbBBtDSX62E3fEjmwNW80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:c0:57:0d:49:3f:b4:ac:50:cc:eb:34:02:06:63:a3:bb:7b:
13:c5:cd:de:7e:a3:9e:27:41:d0:ca:c6:bc:cf:02:6d:25:34:
4f:ba:8f:2b:ab:79:b4:a3:a4:a0:3a:e3:35:30:34:42:db:61:
35:f4:b7:4f:d7:83:1c:3f:bf:32:ce:64:2a:5b:4a:bc:ab:00:
7b:9b:63:0c:0d:fe:cd:a7:d7:9b:87:ca:7b:83:5f:15:48:67:
f7:5f:95:8d:4b:89:ce:61:0a:ba:d8:a8:aa:0a:16:2e:04:82:
fb:29:00:00:ee:a8:04:78:1b:62:a4:54:2c:bb:6d:65:a4:7f:
6f:de:28:2b:ed:bf:1a:e5:1f:d8:39:14:15:f6:02:dd:7e:0f:
96:a1:be:a2:05:ff:e8:67:d7:0a:9c:44:88:30:96:93:c0:80:
69:8f:f2:30:22:6a:ec:b5:d3:c7:b3:b3:94:85:a6:12:c3:e3:
ed:5c:34:46:aa:3f:fd:7e:87:b0:69:73:24:db:a5:ec:1e:cf:
68:d2:af:5f:e1:4a:20:69:a9:1d:8e:6b:c8:33:0e:ea:96:e7:
99:bd:68:61:cc:6a:0c:02:99:27:dd:25:88:d0:75:19:9c:4c:
79:4a:fc:99:6f:0f:9b:f4:86:db:6c:26:29:54:64:ac:68:3e:
43:81:3b:0c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYXDe1rFKTkjtq7hd0pzZ/KcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTE4MDYwNTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzgyNTMwNmI2NWIwNDFiNDM0OTdlYjYxMzc3YzQ4ZTZjMGQ1YmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc9vUzQiMetHvOoixwxC2XReSntn
WogyZhJl9vFKVmDIZDAtPAW+rCxdfXJdnWbIMla4JTmmLQvK1DIj76h3uJvfSIqR
/S1cHLVUmQc6yfhKnAyI10JOw85N+W1qCd4ClB2erIkZyZ3Ukf3dPFyqktXIzZfG
DBm0k6KciYl6IBdJGCBxEa8H+g3FfNNe4L/kKK5pnPVyKUdBVXtdJXJPKnhw41BM
NUjSzqA2iWADviRQLcLKs3eAC26CRYcbAczr4oYqLfhBUiFh1wLx3hp8wts23G+g
0lSBETdSJGoWCozSk5yeWqhCY6+cRWJpuXF2yK3jWy6mhwTdxa/aFZFd2wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEeCUwa2WwQbQ0l+thN3xI5sDVvNMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUjRKVEJyWmJCQnREU1g2MkUzZkVqbXdOVzgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGnAVw1JP7SsUMzrNAIG
Y6O7exPFzd5+o54nQdDKxrzPAm0lNE+6jyurebSjpKA64zUwNELbYTX0t0/Xgxw/
vzLOZCpbSryrAHubYwwN/s2n15uHynuDXxVIZ/dflY1Lic5hCrrYqKoKFi4Egvsp
AADuqAR4G2KkVCy7bWWkf2/eKCvtvxrlH9g5FBX2At1+D5ahvqIF/+hn1wqcRIgw
lpPAgGmP8jAiauy108ezs5SFphLD4+1cNEaqP/1+h7BpcyTbpewez2jSr1/hSiBp
qR2Oa8gzDuqW55m9aGHMagwCmSfdJYjQdRmcTHlK/JlvD5v0httsJilUZKxoPkOB
Oww=
-----END CERTIFICATE-----
Generated at Mon Jun 9 07:37:32 2025 by rpki-client