Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SkKuBGugNMF19Fna0-nTQ-CAAGY.roa
File: SkKuBGugNMF19Fna0-nTQ-CAAGY.roa (raw, json)
Hash identifier: 4J7Bpw4dYIkrg/7wX1e3wl1TpmxcxN3GYI0BKqJ/ZlQ=
Subject key identifier: 4A:42:AE:04:6B:A0:34:C1:75:F4:59:DA:D3:E9:D3:43:E0:80:00:66
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8C2AFE75
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SkKuBGugNMF19Fna0-nTQ-CAAGY.roa
Signing time: Sun 12 Jun 2022 19:10:02 +0000
ROA not before: Sun 12 Jun 2022 19:10:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2351627893 (0x8c2afe75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 12 19:10:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a42ae046ba034c175f459dad3e9d343e0800066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e3:27:42:f5:04:02:34:cd:9c:75:28:ce:7b:
6d:16:de:8a:ee:ae:91:0f:13:ff:47:ac:c0:46:e7:
88:00:7a:ca:c9:84:93:7f:78:a9:25:66:3e:d2:d9:
5e:14:c9:fd:f7:e7:33:40:45:59:4e:c9:cb:4b:d3:
b2:d5:d1:7f:95:06:ef:4c:13:d0:7b:08:ef:d3:4a:
ac:2b:7a:9d:45:1b:ff:d3:37:ba:6a:50:b1:20:77:
26:87:46:4e:51:bf:8d:d4:08:43:de:31:a3:9a:22:
65:c4:29:3e:ed:b7:a5:cd:57:0d:ee:fd:b0:70:4f:
7e:47:ae:6b:b1:9a:8b:ca:5a:02:05:27:d1:71:d6:
37:b4:f5:09:78:5f:69:1b:46:51:5a:fd:a0:9c:ab:
b8:ba:a9:b4:19:a2:68:23:59:5b:f7:c9:ae:e9:73:
20:c0:02:d3:38:6b:51:46:c6:51:ab:51:a5:9b:84:
e7:fb:f2:d9:3a:86:1a:c5:34:cc:a1:04:bf:aa:fc:
31:96:4b:16:15:c6:2a:21:3c:ba:29:f4:c9:a0:7e:
68:8c:06:5d:e3:60:7e:61:af:d3:64:e6:f6:19:68:
cd:07:77:3f:b7:a2:ee:a2:78:72:c2:74:f6:53:71:
a9:33:27:a4:30:e8:5b:18:8a:42:cc:64:d0:f1:9e:
e7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:42:AE:04:6B:A0:34:C1:75:F4:59:DA:D3:E9:D3:43:E0:80:00:66
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SkKuBGugNMF19Fna0-nTQ-CAAGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:ee:89:bb:d8:24:cc:d2:2b:7f:ea:3f:4c:6f:85:b6:25:33:
18:b6:e9:14:6e:05:82:89:2b:be:ff:e5:ba:8c:97:1d:8b:71:
d2:26:84:62:26:62:76:02:13:7b:f6:a9:f6:41:a1:c5:e4:68:
83:8e:fa:18:c4:10:54:c1:41:1b:9a:25:e2:23:a4:96:19:2c:
e8:56:a8:63:d3:f3:f9:47:d6:2f:2b:bf:ad:c7:dd:fd:10:ab:
76:df:52:0c:9d:5a:82:af:f5:73:e9:df:c7:1d:a2:39:dd:20:
b4:10:85:27:ce:20:9d:8e:d6:af:3d:27:b0:62:38:e0:14:37:
03:d9:4d:d4:75:c6:26:6c:70:d0:0a:f2:e3:bb:7d:84:30:f1:
8c:bb:03:37:03:f8:3b:db:94:ec:8b:8f:d3:0b:16:a3:e4:55:
b4:55:cb:17:62:9e:74:1c:ee:90:ec:f4:83:b7:80:be:30:da:
42:8f:2f:37:b4:77:97:7c:2c:52:a4:63:58:9c:fe:97:98:9f:
72:d7:9c:2b:71:d9:95:16:b4:40:5b:7d:a5:c9:1f:81:38:af:
8f:5e:99:91:64:c0:06:b6:12:a5:13:78:84:bb:5e:7f:d2:9f:
6e:26:8d:e5:ff:a5:48:9c:60:84:45:67:ab:49:96:7a:c5:72:
5c:54:cb:56
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIwq/nUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MTIxOTEwMDJaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDRhNDJhZTA0NmJh
MDM0YzE3NWY0NTlkYWQzZTlkMzQzZTA4MDAwNjYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCj4ydC9QQCNM2cdSjOe20W3orurpEPE/9HrMBG54gAesrJ
hJN/eKklZj7S2V4Uyf335zNARVlOyctL07LV0X+VBu9ME9B7CO/TSqwrep1FG//T
N7pqULEgdyaHRk5Rv43UCEPeMaOaImXEKT7tt6XNVw3u/bBwT35HrmuxmovKWgIF
J9Fx1je09Ql4X2kbRlFa/aCcq7i6qbQZomgjWVv3ya7pcyDAAtM4a1FGxlGrUaWb
hOf78tk6hhrFNMyhBL+q/DGWSxYVxiohPLop9MmgfmiMBl3jYH5hr9Nk5vYZaM0H
dz+3ou6ieHLCdPZTcakzJ6Qw6FsYikLMZNDxnufzAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUSkKuBGugNMF19Fna0+nTQ+CAAGYwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9Ta0t1Qkd1Z05NRjE5Rm5hMC1uVFEtQ0FBR1kucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEATu6Ju9gkzNIrf+o/TG+FtiUzGLbpFG4Fgokr
vv/luoyXHYtx0iaEYiZidgITe/ap9kGhxeRog476GMQQVMFBG5ol4iOklhks6Fao
Y9Pz+UfWLyu/rcfd/RCrdt9SDJ1agq/1c+nfxx2iOd0gtBCFJ84gnY7Wrz0nsGI4
4BQ3A9lN1HXGJmxw0Ary47t9hDDxjLsDNwP4O9uU7IuP0wsWo+RVtFXLF2KedBzu
kOz0g7eAvjDaQo8vN7R3l3wsUqRjWJz+l5ifctecK3HZlRa0QFt9pckfgTivj16Z
kWTABrYSpRN4hLtef9KfbiaN5f+lSJxghEVnq0mWesVyXFTLVg==
-----END CERTIFICATE-----
Generated at Wed Jun 11 09:25:30 2025 by rpki-client