Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UAe3NbAm5hgGA7M7rI8Jn82NmNY.roa
File: UAe3NbAm5hgGA7M7rI8Jn82NmNY.roa (raw, json)
Hash identifier: vMLgAGQsaKJwhn/zKxoi0vESaVXeUQwlJgPhm6dLhRM=
Subject key identifier: 50:07:B7:35:B0:26:E6:18:06:03:B3:3B:AC:8F:09:9F:CD:8D:98:D6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018647AE90FF1CF3D058A16D1CA1F84E4729
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UAe3NbAm5hgGA7M7rI8Jn82NmNY.roa
Signing time: Sun 12 Feb 2023 22:11:08 +0000
ROA not before: Sun 12 Feb 2023 22:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:47:ae:90:ff:1c:f3:d0:58:a1:6d:1c:a1:f8:4e:47:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 12 22:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5007b735b026e6180603b33bac8f099fcd8d98d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7d:6f:f1:a4:35:43:43:32:96:d4:f3:75:c2:
87:08:f9:d4:49:cc:78:76:5e:f8:31:6e:a6:38:fb:
cb:4b:ac:d5:c4:e6:0a:12:de:b0:e3:52:cd:a7:50:
6f:9e:a7:64:8f:fe:38:11:9c:d5:e0:e9:d0:b3:25:
f2:2f:cb:41:28:58:21:40:11:51:17:55:04:1d:7b:
49:ca:67:ad:d2:68:29:4b:8d:01:1f:85:70:76:e1:
e3:9b:34:9c:82:30:e8:fe:9f:46:e5:54:39:3e:5a:
01:c1:9d:1a:55:76:d6:04:4a:0b:c2:53:03:ca:be:
b7:75:d9:3c:ab:55:c8:0f:f6:dc:35:3e:8a:e8:4d:
51:c2:06:22:f9:17:07:d3:69:5c:5c:ec:fb:b0:12:
fd:99:be:f7:fb:83:93:58:ad:72:82:c8:c1:2a:1c:
73:4f:fd:b1:bf:28:f7:fd:10:ed:0a:3a:8d:3e:fe:
be:9a:67:f5:3e:b9:a5:1c:7c:1c:a3:46:01:4c:ac:
5b:e6:8a:88:01:ca:55:1a:3f:c4:1a:e7:ad:c2:19:
80:01:a4:62:38:52:89:6c:a9:10:93:1d:a5:52:7f:
4b:b4:36:0c:20:f7:4f:f9:4d:c3:3a:b3:ad:1b:ea:
bd:0c:77:ca:d9:b8:9d:e1:ed:f5:8e:62:d9:b1:95:
5b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:07:B7:35:B0:26:E6:18:06:03:B3:3B:AC:8F:09:9F:CD:8D:98:D6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UAe3NbAm5hgGA7M7rI8Jn82NmNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:75:64:ab:dd:ae:cc:20:0a:31:7f:fb:a9:88:c9:ab:af:f4:
17:92:71:9c:24:63:47:d4:37:01:0d:1b:6b:54:35:05:85:2d:
02:0a:d5:e3:6a:c2:5c:2c:02:3f:9d:7d:4b:bc:e0:e9:03:c4:
2f:a2:fc:6e:a1:f2:56:67:55:d7:82:14:df:7f:d9:f0:44:2f:
9c:c4:20:35:ee:cc:30:e0:76:99:a1:cf:a5:05:a5:2d:7a:bd:
4a:ec:b9:7c:c7:5f:be:ce:52:cc:fc:1b:b4:fc:ce:ba:d1:7c:
11:5e:6b:b1:7c:b8:00:fe:30:39:84:c6:c0:77:e9:0f:a4:6c:
5f:0b:0d:8a:af:ba:6d:67:94:3b:55:69:ef:6e:96:f5:d5:12:
68:3f:2a:16:12:6c:d8:5d:bc:d8:a8:52:51:6c:1b:78:fe:ed:
72:6f:7d:b3:95:71:46:7b:3e:23:6d:18:8e:c1:19:d3:89:b2:
38:1b:6b:eb:24:e6:25:3f:12:c9:a5:bd:42:d9:a5:99:82:77:
09:6a:a4:e1:e5:c4:78:d7:5d:e3:74:68:94:1b:71:fb:48:bd:
dd:50:61:07:d4:c6:c1:55:11:20:de:32:16:ee:47:c1:3b:3f:
09:f6:a8:ee:83:25:74:75:5c:39:d6:7a:b3:66:db:99:8e:a2:
e3:2a:81:29
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZHrpD/HPPQWKFtHKH4TkcpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjEyMjIxMTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDA3YjczNWIwMjZlNjE4MDYwM2IzM2JhYzhmMDk5ZmNkOGQ5OGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH1v8aQ1Q0MyltTzdcKHCPnUScx4
dl74MW6mOPvLS6zVxOYKEt6w41LNp1Bvnqdkj/44EZzV4OnQsyXyL8tBKFghQBFR
F1UEHXtJymet0mgpS40BH4VwduHjmzScgjDo/p9G5VQ5PloBwZ0aVXbWBEoLwlMD
yr63ddk8q1XID/bcNT6K6E1RwgYi+RcH02lcXOz7sBL9mb73+4OTWK1ygsjBKhxz
T/2xvyj3/RDtCjqNPv6+mmf1PrmlHHwco0YBTKxb5oqIAcpVGj/EGuetwhmAAaRi
OFKJbKkQkx2lUn9LtDYMIPdP+U3DOrOtG+q9DHfK2bid4e31jmLZsZVb4wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFAHtzWwJuYYBgOzO6yPCZ/NjZjWMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVUFlM05iQW01aGdHQTdNN3JJOEpuODJObU5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKd1ZKvdrswgCjF/+6mI
yauv9BeScZwkY0fUNwENG2tUNQWFLQIK1eNqwlwsAj+dfUu84OkDxC+i/G6h8lZn
VdeCFN9/2fBEL5zEIDXuzDDgdpmhz6UFpS16vUrsuXzHX77OUsz8G7T8zrrRfBFe
a7F8uAD+MDmExsB36Q+kbF8LDYqvum1nlDtVae9ulvXVEmg/KhYSbNhdvNioUlFs
G3j+7XJvfbOVcUZ7PiNtGI7BGdOJsjgba+sk5iU/EsmlvULZpZmCdwlqpOHlxHjX
XeN0aJQbcftIvd1QYQfUxsFVESDeMhbuR8E7Pwn2qO6DJXR1XDnWerNm25mOouMq
gSk=
-----END CERTIFICATE-----
Generated at Thu Jun 12 13:59:41 2025 by rpki-client