Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UwJiTbbGJoegtU1iMLF5xsIx4Ns.roa
File: UwJiTbbGJoegtU1iMLF5xsIx4Ns.roa (raw, json)
Hash identifier: m1ogd7UWtN4Ik2sTazV5vW1ke+qckBnX7Hojs5qa70M=
Subject key identifier: 53:02:62:4D:B6:C6:26:87:A0:B5:4D:62:30:B1:79:C6:C2:31:E0:DB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183C61D44CCB90F9363E2104ADB251CFBB9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UwJiTbbGJoegtU1iMLF5xsIx4Ns.roa
Signing time: Tue 11 Oct 2022 08:15:50 +0000
ROA not before: Tue 11 Oct 2022 08:15:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c6:1d:44:cc:b9:0f:93:63:e2:10:4a:db:25:1c:fb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 11 08:15:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5302624db6c62687a0b54d6230b179c6c231e0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7d:6e:e1:d9:57:ef:64:c9:f6:8a:44:bc:d4:
09:e2:bf:55:4b:55:62:f9:40:97:61:64:9e:bd:1d:
27:9f:9b:1e:23:3e:84:3b:a0:db:c0:72:a0:18:fa:
2c:8e:21:75:5d:4b:a1:88:ee:bd:86:69:a0:f9:76:
08:3d:35:a1:4a:26:8d:0d:1b:cb:c5:b7:2b:47:4b:
8d:b2:50:a3:98:8b:3b:c8:b4:b7:92:fc:4c:22:00:
03:e8:b9:d5:0c:5e:8f:aa:96:03:7f:e6:d3:60:4b:
e1:a5:29:c3:b7:1b:1b:ea:7b:55:6c:93:58:5e:df:
70:9e:25:eb:3c:48:a5:f6:e2:5a:3b:bf:85:90:60:
c9:f9:a8:b5:4d:04:e0:e2:1a:81:04:ef:48:5d:9d:
0d:71:1f:3e:4a:3b:33:7d:46:f6:71:42:aa:bd:2c:
ec:10:99:d3:1a:93:68:be:3c:e6:47:6e:88:57:44:
ed:1b:c5:69:3f:b2:eb:dd:7d:3d:ae:5c:de:11:ce:
7e:c8:67:84:1b:35:94:2e:39:ff:bf:13:8d:38:5f:
a7:90:06:16:12:3d:79:a8:07:d5:c6:6c:4d:b5:38:
29:e1:9c:ef:a1:14:93:af:1b:08:2a:67:9c:4c:13:
3c:c8:d6:40:76:49:cc:04:e1:4e:58:03:4f:3b:eb:
11:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:02:62:4D:B6:C6:26:87:A0:B5:4D:62:30:B1:79:C6:C2:31:E0:DB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UwJiTbbGJoegtU1iMLF5xsIx4Ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:49:2e:1a:e7:5b:a2:e7:df:0e:26:e0:1f:c0:7d:0f:30:94:
cc:c5:50:e5:20:49:98:fd:c1:e9:c7:67:26:7f:a7:6e:a2:99:
82:ec:0e:d0:19:69:7a:e0:66:d8:d0:7c:46:4f:42:ff:b9:fa:
55:bb:7f:08:fa:6a:8e:d8:45:4f:59:1b:47:a4:17:cc:1f:5d:
80:ac:d2:71:1e:d1:32:83:04:28:c3:ff:17:98:b5:52:21:45:
17:a7:b9:b7:58:03:c2:e0:92:8b:a5:e8:6e:7a:b1:ba:08:02:
e4:12:23:1b:6a:71:a4:e7:77:bb:31:40:39:b5:af:00:2e:38:
34:dd:af:d0:11:64:61:80:55:8d:66:d1:d9:19:53:af:41:87:
20:e8:b2:ff:d6:ea:26:25:b7:b6:ca:6f:0c:63:52:1b:14:6a:
49:fb:ac:4d:d4:01:38:85:82:95:e3:42:01:64:46:c2:28:75:
0c:49:df:b2:69:6a:1b:a6:db:4b:f8:ec:d3:23:80:67:9b:32:
13:47:02:c5:71:fc:8d:a0:fd:41:4a:a5:61:80:ac:3e:2f:ab:
43:9b:e4:8b:bf:46:a0:f4:08:ec:21:71:d7:c3:bc:00:41:a4:
ab:6a:fd:80:4d:6a:e8:62:1f:ab:a3:4b:20:e6:b3:f0:a5:9c:
4e:d9:b0:36
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYPGHUTMuQ+TY+IQStslHPu5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDExMDgxNTUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzAyNjI0ZGI2YzYyNjg3YTBiNTRkNjIzMGIxNzljNmMyMzFlMGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgn1u4dlX72TJ9opEvNQJ4r9VS1Vi
+UCXYWSevR0nn5seIz6EO6DbwHKgGPosjiF1XUuhiO69hmmg+XYIPTWhSiaNDRvL
xbcrR0uNslCjmIs7yLS3kvxMIgAD6LnVDF6PqpYDf+bTYEvhpSnDtxsb6ntVbJNY
Xt9wniXrPEil9uJaO7+FkGDJ+ai1TQTg4hqBBO9IXZ0NcR8+SjszfUb2cUKqvSzs
EJnTGpNovjzmR26IV0TtG8VpP7Lr3X09rlzeEc5+yGeEGzWULjn/vxONOF+nkAYW
Ej15qAfVxmxNtTgp4ZzvoRSTrxsIKmecTBM8yNZAdknMBOFOWANPO+sR/wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFMCYk22xiaHoLVNYjCxecbCMeDbMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVXdKaVRiYkdKb2VndFUxaU1MRjV4c0l4NE5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEtJLhrnW6Ln3w4m4B/A
fQ8wlMzFUOUgSZj9wenHZyZ/p26imYLsDtAZaXrgZtjQfEZPQv+5+lW7fwj6ao7Y
RU9ZG0ekF8wfXYCs0nEe0TKDBCjD/xeYtVIhRRenubdYA8Lgkoul6G56sboIAuQS
IxtqcaTnd7sxQDm1rwAuODTdr9ARZGGAVY1m0dkZU69BhyDosv/W6iYlt7bKbwxj
UhsUakn7rE3UATiFgpXjQgFkRsIodQxJ37Jpahum20v47NMjgGebMhNHAsVx/I2g
/UFKpWGArD4vq0Ob5Iu/RqD0COwhcdfDvABBpKtq/YBNauhiH6ujSyDms/ClnE7Z
sDY=
-----END CERTIFICATE-----
Generated at Wed Jun 11 02:29:12 2025 by rpki-client