Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ug83fFJl9wbaJeTnD7ylX9QVAQk.roa
File: Ug83fFJl9wbaJeTnD7ylX9QVAQk.roa (raw, json)
Hash identifier: f0FFP+bBI8rLaNRpMYCdOT4FaoDWzhBV+55BNyHoGJQ=
Subject key identifier: 52:0F:37:7C:52:65:F7:06:DA:25:E4:E7:0F:BC:A5:5F:D4:15:01:09
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182572D009D242647F219B0207C8DEEE6C7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ug83fFJl9wbaJeTnD7ylX9QVAQk.roa
Signing time: Mon 01 Aug 2022 02:12:23 +0000
ROA not before: Mon 01 Aug 2022 02:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:57:2d:00:9d:24:26:47:f2:19:b0:20:7c:8d:ee:e6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 02:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=520f377c5265f706da25e4e70fbca55fd4150109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7d:50:41:e9:a6:a1:d4:e1:ba:3f:77:40:ee:
e1:63:33:9d:7a:f1:57:03:a7:f7:54:ec:a9:ae:39:
a0:e6:23:63:8c:f8:71:77:b6:04:a7:f8:cd:ba:85:
ce:e4:5c:f2:91:59:36:88:d7:a0:10:58:6e:47:5d:
82:26:f6:ef:39:54:6a:13:59:a6:57:f0:b8:27:42:
54:28:d6:93:a9:4f:55:60:11:a4:f7:c1:a6:52:36:
f7:6d:ad:52:82:3a:64:07:39:ea:69:00:8d:34:e4:
94:36:b7:ea:3c:c3:fe:92:f2:bc:12:8d:57:d1:30:
77:10:c6:3a:2f:fe:b9:91:f1:24:0c:ac:ec:86:59:
80:82:02:33:10:51:84:f9:ee:e9:f9:5a:12:de:fd:
f8:78:61:56:b4:29:e3:23:de:23:c4:b2:f6:b3:40:
23:b2:12:03:f1:31:b7:83:db:ed:cb:51:80:c2:ae:
f0:18:c1:84:7a:d4:15:56:d2:d2:54:1a:42:9b:ad:
27:4d:77:db:73:4a:56:c3:bd:62:0d:18:cb:42:5d:
27:09:33:45:50:9a:cd:4e:4e:dd:1f:d2:7d:e0:1b:
70:73:96:8d:bf:ad:45:14:88:b8:43:2b:1f:f3:1b:
94:10:58:42:9f:54:bc:4a:d7:c5:b0:8a:7c:c5:73:
37:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0F:37:7C:52:65:F7:06:DA:25:E4:E7:0F:BC:A5:5F:D4:15:01:09
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ug83fFJl9wbaJeTnD7ylX9QVAQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:eb:d4:87:c3:a1:77:72:51:5f:fd:a0:48:16:21:30:74:6f:
79:ee:94:43:1b:35:16:f0:0e:24:cd:b1:c8:66:17:8b:2f:ca:
21:f5:9c:ef:a0:78:b7:c1:2a:9f:36:cd:e3:f0:a2:1a:2d:11:
03:87:0f:f7:b6:eb:aa:ff:91:15:0f:45:a7:86:dc:e8:e0:4d:
d5:50:c7:86:a4:56:37:88:25:20:3d:f8:e7:72:c6:9b:a6:e7:
af:b0:49:7d:ff:10:73:23:6b:03:ad:b1:46:12:b3:17:90:42:
a0:37:a4:55:b0:29:58:c0:1f:e4:9b:66:9b:e6:db:aa:3c:95:
91:43:40:7b:50:2b:c1:8a:ae:2a:f4:1d:3a:38:dd:62:2f:b7:
44:e7:74:d4:f3:e3:7d:22:8f:d4:36:c3:56:d4:a0:a1:fc:63:
0a:3f:3a:b6:b6:5a:b5:33:0a:59:dc:55:d2:df:4a:eb:d8:ce:
07:bf:06:f5:f8:89:a7:cd:6e:8b:27:ce:7f:ad:49:66:bf:22:
4a:8a:ca:c0:dc:3f:bc:13:0e:0b:33:d0:48:b4:2d:57:d4:ee:
70:82:fa:61:64:fd:b8:9e:9e:b2:db:76:e7:0a:b7:22:5a:bf:
68:28:02:6f:a9:47:00:4d:5f:dc:23:2a:bf:0e:38:f8:6f:8f:
0d:be:d6:45
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYJXLQCdJCZH8hmwIHyN7ubHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODAxMDIxMjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjBmMzc3YzUyNjVmNzA2ZGEyNWU0ZTcwZmJjYTU1ZmQ0MTUwMTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7H1QQemmodThuj93QO7hYzOdevFX
A6f3VOyprjmg5iNjjPhxd7YEp/jNuoXO5FzykVk2iNegEFhuR12CJvbvOVRqE1mm
V/C4J0JUKNaTqU9VYBGk98GmUjb3ba1SgjpkBznqaQCNNOSUNrfqPMP+kvK8Eo1X
0TB3EMY6L/65kfEkDKzshlmAggIzEFGE+e7p+VoS3v34eGFWtCnjI94jxLL2s0Aj
shID8TG3g9vty1GAwq7wGMGEetQVVtLSVBpCm60nTXfbc0pWw71iDRjLQl0nCTNF
UJrNTk7dH9J94Btwc5aNv61FFIi4Qysf8xuUEFhCn1S8StfFsIp8xXM3qwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFIPN3xSZfcG2iXk5w+8pV/UFQEJMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVWc4M2ZGSmw5d2JhSmVUbkQ3eWxYOVFWQVFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKLr1IfDoXdyUV/9oEgW
ITB0b3nulEMbNRbwDiTNschmF4svyiH1nO+geLfBKp82zePwohotEQOHD/e266r/
kRUPRaeG3OjgTdVQx4akVjeIJSA9+Odyxpum56+wSX3/EHMjawOtsUYSsxeQQqA3
pFWwKVjAH+SbZpvm26o8lZFDQHtQK8GKrir0HTo43WIvt0TndNTz430ij9Q2w1bU
oKH8Ywo/Ora2WrUzClncVdLfSuvYzge/BvX4iafNbosnzn+tSWa/IkqKysDcP7wT
Dgsz0Ei0LVfU7nCC+mFk/bienrLbducKtyJav2goAm+pRwBNX9wjKr8OOPhvjw2+
1kU=
-----END CERTIFICATE-----
Generated at Fri Jun 13 02:51:47 2025 by rpki-client