Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rsbw4gTyquBDeTySFUv_MPZ98bk.roa
File: Rsbw4gTyquBDeTySFUv_MPZ98bk.roa (raw, json)
Hash identifier: 4ELxDqwuNmvjk1b5TAp4qT9BMSyj3LPwwbXyo8Nc5hU=
Subject key identifier: 46:C6:F0:E2:04:F2:AA:E0:43:79:3C:92:15:4B:FF:30:F6:7D:F1:B9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01820C8355F7AFA2FF6C8C39A9D1D1988D82
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rsbw4gTyquBDeTySFUv_MPZ98bk.roa
Signing time: Sun 17 Jul 2022 14:15:09 +0000
ROA not before: Sun 17 Jul 2022 14:15:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:0c:83:55:f7:af:a2:ff:6c:8c:39:a9:d1:d1:98:8d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 17 14:15:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46c6f0e204f2aae043793c92154bff30f67df1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:28:22:c0:3c:f4:5d:ac:ff:38:e9:b4:3d:f8:
1a:00:b5:7c:e2:8d:65:33:42:5d:3c:74:e1:e8:f3:
9d:60:bf:ba:64:7b:a9:f9:e4:72:9b:44:a2:ad:3e:
69:52:a3:5c:74:53:43:6a:26:37:6a:7b:95:b6:20:
8a:9c:31:8d:a4:f9:38:5d:db:5f:f3:be:e5:90:ab:
b7:f7:4e:b4:f4:c8:ec:c7:20:13:f0:cb:cf:95:41:
d4:0a:5c:6e:d8:9a:8a:51:57:79:2c:f8:15:62:34:
f1:c9:86:c5:08:ca:cd:ec:4b:cd:9c:8b:d8:18:e0:
5c:28:04:e5:13:65:a1:64:3c:14:27:24:25:d1:a5:
96:95:17:fb:ec:ca:a0:e7:d2:13:19:f7:bc:e1:ac:
d2:80:df:84:8c:ed:07:f4:99:9d:53:52:75:f2:98:
ea:20:60:37:ee:6e:f6:80:04:8b:78:7a:63:7a:ae:
c3:68:bf:50:ae:85:8d:ba:fd:e9:ab:7f:a5:4e:0e:
0d:af:7f:2e:41:13:56:b3:cc:09:1d:28:3f:4f:b5:
59:2b:9d:57:43:6a:36:d0:e2:f9:8e:05:83:39:3c:
ad:70:db:a7:4b:28:64:e8:e3:28:28:72:f2:49:88:
3d:f9:7f:70:be:3d:69:5c:19:a9:a4:c3:b1:1b:7a:
ce:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C6:F0:E2:04:F2:AA:E0:43:79:3C:92:15:4B:FF:30:F6:7D:F1:B9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rsbw4gTyquBDeTySFUv_MPZ98bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:d4:de:bc:cb:32:8c:78:e6:96:24:7f:b4:03:cb:13:ad:37:
6c:a4:fb:a8:99:70:ad:18:85:82:88:74:2f:43:e1:a8:ed:86:
14:6d:e5:ca:b0:86:ad:f0:e0:dc:c1:67:d5:c1:98:4e:48:43:
71:e5:a5:1a:58:43:b9:2f:8a:2e:4d:f2:ba:2c:bb:b5:c9:c9:
14:f8:c0:5a:da:4a:50:c0:0c:32:86:ff:cc:da:4d:77:21:d9:
ef:7f:9a:6d:68:9b:c9:ca:9b:01:e6:29:0f:09:2a:13:e6:d7:
8d:3e:b7:6d:cd:f1:dd:3f:98:17:9a:ad:d4:c2:cd:aa:b9:ee:
7a:02:eb:e5:5d:fa:06:e4:a6:84:e2:e9:b9:11:ba:f0:90:cf:
4b:03:87:e9:b3:03:44:63:06:3e:49:58:0b:5b:20:64:55:25:
93:df:ea:a6:a8:cd:65:ba:79:b1:65:d5:f8:3c:8c:72:c9:71:
d4:0f:67:28:b3:1c:e0:f7:8c:36:10:0f:b3:42:4e:d4:28:c9:
b8:f1:95:79:fd:90:ef:6e:ad:86:e7:57:81:3e:5c:43:c3:58:
56:f8:2e:0f:0e:74:17:6b:2e:e1:a6:6b:de:b2:ab:b6:18:8b:
e7:d1:26:cd:5f:3f:34:9d:3e:fb:cd:c6:be:89:bb:1d:cb:2c:
8a:37:99:9d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYIMg1X3r6L/bIw5qdHRmI2CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzE3MTQxNTA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmM2ZjBlMjA0ZjJhYWUwNDM3OTNjOTIxNTRiZmYzMGY2N2RmMWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiigiwDz0Xaz/OOm0PfgaALV84o1l
M0JdPHTh6POdYL+6ZHup+eRym0SirT5pUqNcdFNDaiY3anuVtiCKnDGNpPk4Xdtf
877lkKu390609MjsxyAT8MvPlUHUClxu2JqKUVd5LPgVYjTxyYbFCMrN7EvNnIvY
GOBcKATlE2WhZDwUJyQl0aWWlRf77Mqg59ITGfe84azSgN+EjO0H9JmdU1J18pjq
IGA37m72gASLeHpjeq7DaL9QroWNuv3pq3+lTg4Nr38uQRNWs8wJHSg/T7VZK51X
Q2o20OL5jgWDOTytcNunSyhk6OMoKHLySYg9+X9wvj1pXBmppMOxG3rOpQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEbG8OIE8qrgQ3k8khVL/zD2ffG5MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUnNidzRnVHlxdUJEZVR5U0ZVdl9NUFo5OGJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAnU3rzLMox45pYkf7QD
yxOtN2yk+6iZcK0YhYKIdC9D4ajthhRt5cqwhq3w4NzBZ9XBmE5IQ3HlpRpYQ7kv
ii5N8rosu7XJyRT4wFraSlDADDKG/8zaTXch2e9/mm1om8nKmwHmKQ8JKhPm140+
t23N8d0/mBeardTCzaq57noC6+Vd+gbkpoTi6bkRuvCQz0sDh+mzA0RjBj5JWAtb
IGRVJZPf6qaozWW6ebFl1fg8jHLJcdQPZyizHOD3jDYQD7NCTtQoybjxlXn9kO9u
rYbnV4E+XEPDWFb4Lg8OdBdrLuGma96yq7YYi+fRJs1fPzSdPvvNxr6Jux3LLIo3
mZ0=
-----END CERTIFICATE-----
Generated at Mon Jun 9 04:52:36 2025 by rpki-client