Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/URfNtVwger7JJZ8WWnQ3IeN52YE.roa
File: URfNtVwger7JJZ8WWnQ3IeN52YE.roa (raw, json)
Hash identifier: o4U0cPeCZuCXH3DefLb8PkJ1K9g+/UKjfamsfH+umlc=
Subject key identifier: 51:17:CD:B5:5C:20:7A:BE:C9:25:9F:16:5A:74:37:21:E3:79:D9:81
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2E1F53984B885C55DEA781C4FC8589D1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/URfNtVwger7JJZ8WWnQ3IeN52YE.roa
Signing time: Fri 25 Aug 2023 19:15:19 +0000
ROA not before: Fri 25 Aug 2023 19:15:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2e:1f:53:98:4b:88:5c:55:de:a7:81:c4:fc:85:89:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 19:15:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5117cdb55c207abec9259f165a743721e379d981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:14:58:1f:a1:b6:80:7f:ae:b0:88:67:aa:93:
a7:37:21:07:2c:65:01:b1:d7:1e:84:d6:70:b8:a1:
f7:86:82:2b:7e:6f:bd:0e:2c:5f:db:fa:4c:9b:d5:
6d:6d:b6:c5:5e:c3:7e:7d:b4:a2:11:21:01:92:8e:
18:01:a3:db:48:10:ea:3e:85:46:70:40:fe:26:26:
ed:82:62:eb:47:e0:f0:0f:77:e9:39:18:13:06:29:
2a:cd:83:60:5e:6e:bd:7f:1f:89:9a:6a:50:48:24:
3a:de:9c:3e:ab:87:6b:a0:57:41:fa:cd:24:63:34:
bf:1b:d9:52:ff:1a:38:f1:07:41:10:70:19:31:d0:
00:e8:f4:97:e9:84:44:1d:89:a5:80:2c:58:7d:8a:
23:23:40:83:55:ce:d6:fc:07:e2:ad:55:87:1c:6e:
3c:d4:50:02:35:2a:50:40:f4:60:c4:d9:c3:06:25:
23:74:9c:c8:b2:55:50:2e:a7:5c:5d:ef:58:9a:ec:
58:5c:1a:7e:bf:f4:12:c5:51:7e:0c:56:d7:cc:1e:
77:bd:21:9e:1a:05:83:35:8d:ea:84:25:bc:b3:08:
fd:90:8e:18:b0:e6:65:e6:43:7e:fa:b4:34:13:00:
c4:aa:ff:94:25:09:40:e9:85:38:81:e8:49:dd:2e:
c7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:17:CD:B5:5C:20:7A:BE:C9:25:9F:16:5A:74:37:21:E3:79:D9:81
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/URfNtVwger7JJZ8WWnQ3IeN52YE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:40:8c:ca:bc:7f:a5:7f:81:ce:ea:8a:02:f4:73:8b:14:82:
f7:84:86:69:a1:f3:93:80:b7:c9:10:67:be:09:e7:ac:a0:c7:
7e:e9:59:e0:ce:67:b8:f5:e4:af:37:2f:57:9b:46:5c:29:ed:
6d:7e:bc:6e:70:e8:ee:57:c7:4a:7c:47:10:26:e2:64:3e:50:
9d:70:97:4a:e3:cd:26:6b:67:3f:29:5f:39:00:6a:e9:45:1d:
4f:74:0d:43:0e:60:30:04:d0:f0:37:1c:f0:cc:43:95:4e:1c:
3e:59:3d:a7:b0:b3:2a:88:d7:58:52:55:d4:d8:a2:e4:de:59:
20:6b:ae:47:f8:32:85:31:5d:55:72:b3:6c:46:f5:65:03:49:
e1:e5:75:39:90:7d:4e:98:1a:37:4e:b9:d5:bc:b1:c0:45:28:
a8:2b:0b:e1:99:d0:c3:f2:59:75:c1:5b:c5:e7:5d:83:72:2f:
8b:4b:15:05:ad:74:79:6b:75:10:7a:b0:61:06:1f:d4:81:8f:
db:ee:ee:08:a7:54:98:c2:2d:ed:5d:77:ec:65:80:4b:76:6a:
86:3c:ba:97:31:66:57:87:e9:6e:88:32:7a:96:0e:f9:d1:38:
ce:f7:d8:c0:c1:91:67:6b:c8:76:7f:a3:66:60:a0:55:c9:03:
e9:05:bf:dd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYouH1OYS4hcVd6ngcT8hYnRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODI1MTkxNTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTE3Y2RiNTVjMjA3YWJlYzkyNTlmMTY1YTc0MzcyMWUzNzlkOTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RRYH6G2gH+usIhnqpOnNyEHLGUB
sdcehNZwuKH3hoIrfm+9Dixf2/pMm9VtbbbFXsN+fbSiESEBko4YAaPbSBDqPoVG
cED+JibtgmLrR+DwD3fpORgTBikqzYNgXm69fx+JmmpQSCQ63pw+q4droFdB+s0k
YzS/G9lS/xo48QdBEHAZMdAA6PSX6YREHYmlgCxYfYojI0CDVc7W/AfirVWHHG48
1FACNSpQQPRgxNnDBiUjdJzIslVQLqdcXe9YmuxYXBp+v/QSxVF+DFbXzB53vSGe
GgWDNY3qhCW8swj9kI4YsOZl5kN++rQ0EwDEqv+UJQlA6YU4gehJ3S7HyQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFEXzbVcIHq+ySWfFlp0NyHjedmBMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVVJmTnRWd2dlcjdKSlo4V1duUTNJZU41MllFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACxAjMq8f6V/gc7qigL0
c4sUgveEhmmh85OAt8kQZ74J56ygx37pWeDOZ7j15K83L1ebRlwp7W1+vG5w6O5X
x0p8RxAm4mQ+UJ1wl0rjzSZrZz8pXzkAaulFHU90DUMOYDAE0PA3HPDMQ5VOHD5Z
PaewsyqI11hSVdTYouTeWSBrrkf4MoUxXVVys2xG9WUDSeHldTmQfU6YGjdOudW8
scBFKKgrC+GZ0MPyWXXBW8XnXYNyL4tLFQWtdHlrdRB6sGEGH9SBj9vu7ginVJjC
Le1dd+xlgEt2aoY8upcxZleH6W6IMnqWDvnROM732MDBkWdryHZ/o2ZgoFXJA+kF
v90=
-----END CERTIFICATE-----
Generated at Mon Jun 9 12:02:37 2025 by rpki-client