Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S_S3chkgHrN7BbSjAhP_3AAjIWY.roa
File: S_S3chkgHrN7BbSjAhP_3AAjIWY.roa (raw, json)
Hash identifier: /GUjaV2VmfHSI0ifUh/HGbxPB37Jykpm5LkQeW38zUc=
Subject key identifier: 4B:F4:B7:72:19:20:1E:B3:7B:05:B4:A3:02:13:FF:DC:00:23:21:66
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018238B85F497C54FDA3039ECA4CC195C17B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S_S3chkgHrN7BbSjAhP_3AAjIWY.roa
Signing time: Tue 26 Jul 2022 04:16:23 +0000
ROA not before: Tue 26 Jul 2022 04:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:38:b8:5f:49:7c:54:fd:a3:03:9e:ca:4c:c1:95:c1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 04:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bf4b77219201eb37b05b4a30213ffdc00232166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:47:38:d1:34:81:45:cb:56:67:1f:d7:1d:0e:
c7:56:35:63:cb:d7:99:1b:3d:3d:42:d7:b2:44:6c:
74:c3:dd:86:73:39:b4:79:cc:78:c9:03:df:7e:88:
b5:fd:2d:21:e3:b3:91:99:c9:6b:19:63:05:be:e7:
43:81:88:db:47:59:8a:41:19:e6:89:40:0d:44:ff:
09:23:8f:a5:d7:89:b8:d5:39:d8:53:e3:5d:ad:75:
18:f4:e0:d6:e6:24:f7:33:89:b0:7f:81:40:55:73:
24:fc:d3:fe:d5:2f:c2:be:da:2d:50:ac:14:0c:02:
08:fe:9e:06:f9:25:24:46:7b:19:f0:fe:98:4f:d7:
a7:af:6c:05:01:4f:3b:70:3c:2c:1d:c9:3b:5a:a9:
42:2d:71:39:a2:c5:69:62:b3:2d:48:28:e1:39:b8:
32:47:09:ea:f2:46:93:7d:7d:48:ec:e8:2e:30:03:
b0:44:c7:d6:84:4b:45:8a:e9:bd:b1:90:d2:f1:c1:
cc:42:fb:14:ea:e6:3d:f5:52:ca:0a:f0:53:c9:87:
03:f2:91:49:86:1b:c0:9f:01:34:3d:3f:c8:99:bd:
c7:dd:e1:56:a8:c7:7b:dc:8a:d1:11:df:45:d5:e4:
e0:08:d5:bd:67:09:70:d1:64:00:df:3f:b6:cc:ce:
93:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F4:B7:72:19:20:1E:B3:7B:05:B4:A3:02:13:FF:DC:00:23:21:66
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S_S3chkgHrN7BbSjAhP_3AAjIWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:d1:90:a3:5b:ab:4b:e3:b0:cb:07:ad:2e:90:ec:49:0a:e4:
36:1d:0c:e0:cf:c7:de:30:44:88:6c:c4:63:34:f4:c6:30:fd:
bd:8b:8d:2f:49:cd:57:50:38:fa:77:6d:91:ad:6f:66:b0:31:
2a:66:d4:77:21:15:40:29:0d:f4:e2:1e:38:7e:22:f0:3e:50:
65:9b:63:07:46:52:1a:9f:3d:7e:3e:e1:a7:61:41:47:f0:ad:
fd:f8:10:e9:e3:5e:f5:6c:49:1f:c0:68:97:2e:22:00:1e:0f:
10:fb:39:79:83:0a:f8:75:3b:e5:48:d7:87:79:ab:13:4c:c7:
1e:18:a4:4b:26:95:10:14:81:01:e4:e0:a1:61:ad:ca:23:1a:
6c:98:f4:af:0b:44:84:9f:26:0a:ec:6f:42:c0:56:8a:f2:81:
e5:74:03:f6:e4:f9:95:23:c8:ed:ff:a6:5b:3c:fd:ee:6d:f1:
3e:fa:97:ee:2d:b7:47:88:0a:a4:b5:d9:03:66:8a:ba:63:59:
e8:c9:8f:6f:29:8d:be:a0:ed:63:63:c7:4f:6a:44:c0:55:d1:
bf:6b:83:0a:42:ce:3f:0d:ed:82:3e:fb:50:24:83:0f:26:f3:
77:3b:22:a2:3d:10:53:90:14:1f:21:d7:ba:3b:d8:ab:ff:37:
f1:df:90:1c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYI4uF9JfFT9owOeykzBlcF7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzI2MDQxNjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmY0Yjc3MjE5MjAxZWIzN2IwNWI0YTMwMjEzZmZkYzAwMjMyMTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20c40TSBRctWZx/XHQ7HVjVjy9eZ
Gz09QteyRGx0w92Gczm0ecx4yQPffoi1/S0h47ORmclrGWMFvudDgYjbR1mKQRnm
iUANRP8JI4+l14m41TnYU+NdrXUY9ODW5iT3M4mwf4FAVXMk/NP+1S/CvtotUKwU
DAII/p4G+SUkRnsZ8P6YT9enr2wFAU87cDwsHck7WqlCLXE5osVpYrMtSCjhObgy
Rwnq8kaTfX1I7OguMAOwRMfWhEtFium9sZDS8cHMQvsU6uY99VLKCvBTyYcD8pFJ
hhvAnwE0PT/Imb3H3eFWqMd73IrREd9F1eTgCNW9Zwlw0WQA3z+2zM6TowIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEv0t3IZIB6zewW0owIT/9wAIyFmMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvU19TM2Noa2dIck43QmJTakFoUF8zQUFqSVdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJnRkKNbq0vjsMsHrS6Q
7EkK5DYdDODPx94wRIhsxGM09MYw/b2LjS9JzVdQOPp3bZGtb2awMSpm1HchFUAp
DfTiHjh+IvA+UGWbYwdGUhqfPX4+4adhQUfwrf34EOnjXvVsSR/AaJcuIgAeDxD7
OXmDCvh1O+VI14d5qxNMxx4YpEsmlRAUgQHk4KFhrcojGmyY9K8LRISfJgrsb0LA
VorygeV0A/bk+ZUjyO3/pls8/e5t8T76l+4tt0eICqS12QNmirpjWejJj28pjb6g
7WNjx09qRMBV0b9rgwpCzj8N7YI++1Akgw8m83c7IqI9EFOQFB8h17o72Kv/N/Hf
kBw=
-----END CERTIFICATE-----
Generated at Wed Jun 11 07:28:02 2025 by rpki-client