Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UTpIM7-JnbkilNoKbBOmbQm7C3o.roa
File: UTpIM7-JnbkilNoKbBOmbQm7C3o.roa (raw, json)
Hash identifier: eepAM6XUNCXM7Hzg1xQB+baXiGqK1e/YsYX65T7kUdo=
Subject key identifier: 51:3A:48:33:BF:89:9D:B9:22:94:DA:0A:6C:13:A6:6D:09:BB:0B:7A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8520AC35
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UTpIM7-JnbkilNoKbBOmbQm7C3o.roa
Signing time: Wed 18 May 2022 11:09:16 +0000
ROA not before: Wed 18 May 2022 11:09:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2233510965 (0x8520ac35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 18 11:09:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=513a4833bf899db92294da0a6c13a66d09bb0b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9e:87:e0:05:e7:fa:d3:0f:2e:92:2f:15:87:
ec:4d:fe:ca:f2:11:75:64:ee:74:b2:ab:5a:93:db:
32:59:cd:12:6b:3c:fe:3b:a1:e5:9c:c6:4c:07:ac:
07:32:a9:28:c3:08:9a:2a:e5:fd:b1:67:ef:61:68:
35:63:26:f6:54:bf:77:39:60:4c:c7:58:db:b0:76:
bf:0c:a2:41:a0:88:0d:8d:a0:16:33:0f:d8:77:70:
4b:2f:19:1e:c9:61:04:9c:eb:d0:dc:6d:ea:44:95:
b1:bf:22:ae:f9:4c:57:fb:ca:df:dd:34:bd:19:28:
0e:92:57:61:a8:20:86:05:a2:72:d7:df:ad:dc:2a:
09:71:14:da:c9:0d:71:64:fa:ea:97:28:e3:2b:2a:
44:2c:d3:8e:50:a6:cc:69:69:c7:96:b4:4b:5d:23:
58:ad:b7:f7:5b:85:fd:6c:34:de:12:58:35:d9:93:
9d:09:ab:cd:0c:16:4b:05:8a:88:ef:35:49:d8:70:
c8:54:8e:ed:cf:23:6e:9c:e3:42:fd:64:96:09:61:
d5:13:fd:ab:ce:f8:cd:fb:8a:34:46:42:19:7c:93:
72:0f:71:4d:90:1c:01:83:e7:e8:fe:67:94:bf:d3:
08:25:f5:f8:66:1f:c8:3c:dd:d1:0d:d2:75:d0:42:
11:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3A:48:33:BF:89:9D:B9:22:94:DA:0A:6C:13:A6:6D:09:BB:0B:7A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UTpIM7-JnbkilNoKbBOmbQm7C3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:56:9e:95:3f:d9:f4:71:2c:a6:63:bd:19:5f:34:73:c8:fa:
1f:cd:8d:5e:12:55:de:22:49:7b:78:04:02:ce:b6:7e:ed:07:
a5:49:c9:d2:85:55:f3:3e:e4:70:e4:57:d2:bc:b6:cd:b7:c7:
94:dc:4f:13:30:8e:36:d6:67:f0:2a:a9:fc:cc:34:e7:c9:5b:
14:9c:97:02:23:1a:07:f5:ba:a2:00:7b:7c:80:fc:86:84:f9:
76:56:e7:91:18:fb:e0:ef:bd:21:cc:85:90:97:58:21:b0:29:
4c:2a:03:0c:a2:37:94:95:7f:e7:93:0d:6f:27:81:5a:13:a0:
c5:26:02:1a:9d:1e:11:a0:05:1f:27:81:23:7b:dc:67:e7:07:
01:86:4a:48:29:92:ea:b8:34:da:b7:90:ef:1e:39:1b:30:b9:
1a:d2:a9:79:90:ab:05:74:48:26:41:0e:58:e4:10:90:5b:74:
07:7c:7e:97:c4:95:be:8f:da:d1:3b:a2:aa:b4:8a:54:3b:42:
21:67:9f:82:fa:20:c3:82:c9:b3:b5:91:51:c1:55:4b:da:ce:
19:9d:2e:e9:71:af:c5:38:c2:80:43:47:80:c3:2d:cf:23:70:
3c:ce:1f:5d:0e:39:3c:04:77:87:68:0c:cb:5e:a0:bd:1c:b3:
60:28:38:47
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIUgrDUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MTgxMTA5MTZaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDUxM2E0ODMzYmY4
OTlkYjkyMjk0ZGEwYTZjMTNhNjZkMDliYjBiN2EwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6nofgBef60w8uki8Vh+xN/sryEXVk7nSyq1qT2zJZzRJr
PP47oeWcxkwHrAcyqSjDCJoq5f2xZ+9haDVjJvZUv3c5YEzHWNuwdr8MokGgiA2N
oBYzD9h3cEsvGR7JYQSc69DcbepElbG/Iq75TFf7yt/dNL0ZKA6SV2GoIIYFonLX
363cKglxFNrJDXFk+uqXKOMrKkQs045QpsxpaceWtEtdI1itt/dbhf1sNN4SWDXZ
k50Jq80MFksFiojvNUnYcMhUju3PI26c40L9ZJYJYdUT/avO+M37ijRGQhl8k3IP
cU2QHAGD5+j+Z5S/0wgl9fhmH8g83dEN0nXQQhFxAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUUTpIM7+JnbkilNoKbBOmbQm7C3owHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9VVHBJTTctSm5ia2lsTm9LYkJPbWJRbTdDM28ucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAp1aelT/Z9HEspmO9GV80c8j6H82NXhJV3iJJ
e3gEAs62fu0HpUnJ0oVV8z7kcORX0ry2zbfHlNxPEzCONtZn8Cqp/Mw058lbFJyX
AiMaB/W6ogB7fID8hoT5dlbnkRj74O+9IcyFkJdYIbApTCoDDKI3lJV/55MNbyeB
WhOgxSYCGp0eEaAFHyeBI3vcZ+cHAYZKSCmS6rg02reQ7x45GzC5GtKpeZCrBXRI
JkEOWOQQkFt0B3x+l8SVvo/a0TuiqrSKVDtCIWefgvogw4LJs7WRUcFVS9rOGZ0u
6XGvxTjCgENHgMMtzyNwPM4fXQ45PAR3h2gMy16gvRyzYCg4Rw==
-----END CERTIFICATE-----
Generated at Thu Jun 12 16:05:07 2025 by rpki-client