Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YcXgaLD6V5uSG_TxFxrhaPXFW9o.roa
File: YcXgaLD6V5uSG_TxFxrhaPXFW9o.roa (raw, json)
Hash identifier: IQpaiJjNkbJ5vWwDEG3oVDnd6Uw5P0b/dms3FiI8QrU=
Subject key identifier: 61:C5:E0:68:B0:FA:57:9B:92:1B:F4:F1:17:1A:E1:68:F5:C5:5B:DA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01829B2B4B4C4809CB70863D4A2DB2C7A120
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YcXgaLD6V5uSG_TxFxrhaPXFW9o.roa
Signing time: Sun 14 Aug 2022 07:04:41 +0000
ROA not before: Sun 14 Aug 2022 07:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:9b2a:f120/128 maxlen: 128
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:9b:2b:4b:4c:48:09:cb:70:86:3d:4a:2d:b2:c7:a1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 14 07:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61c5e068b0fa579b921bf4f1171ae168f5c55bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2e:d7:c9:88:b8:92:29:75:1f:17:c0:1d:0d:
f1:c7:9c:8e:25:bb:0f:23:57:6e:1e:4b:0b:19:52:
3e:42:16:61:83:b5:74:4a:12:9f:0b:23:bb:1c:b1:
86:82:33:fe:fb:1c:76:91:ad:a0:1e:f8:bd:f2:92:
b0:f3:a4:9d:48:00:2e:72:77:9e:e8:f7:be:9f:94:
80:4e:3b:b8:c1:da:18:a3:01:e9:2b:0c:c4:c1:4f:
e0:bf:b5:64:37:02:6e:1f:7a:08:30:c1:61:93:a7:
c8:60:00:d4:b4:35:fa:c2:c4:cb:bc:56:65:34:e4:
2b:c0:37:9b:3f:98:71:b6:10:8b:94:36:0b:c0:1a:
c8:03:7e:6d:d8:1c:01:22:73:18:bc:93:c2:b4:b5:
87:c3:8b:5f:76:83:91:1a:91:1a:0f:89:b3:70:57:
44:47:74:ed:cc:5e:64:0f:8d:b0:b9:cc:cd:8a:34:
9c:c6:5f:5d:ff:7b:37:65:72:1f:6b:50:16:c2:c9:
0a:8b:2f:73:df:d8:e4:26:82:65:29:5a:36:6a:0f:
d9:60:fc:6e:03:d9:fa:5b:fa:ef:a0:37:3e:b4:25:
a7:49:d8:d0:c4:4d:d6:1d:3a:55:b5:bc:2f:ba:42:
89:dc:36:1c:18:a1:2e:db:ef:ad:a8:0c:2b:a1:bf:
7c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C5:E0:68:B0:FA:57:9B:92:1B:F4:F1:17:1A:E1:68:F5:C5:5B:DA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YcXgaLD6V5uSG_TxFxrhaPXFW9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:cf:6b:2e:14:e8:9b:35:9d:7b:12:7a:88:9c:54:07:54:e4:
ab:bb:42:af:47:96:a1:41:73:9d:3c:c4:7d:86:98:90:84:7f:
33:e4:0d:f5:d3:d1:86:74:98:9c:90:8d:6e:29:1a:9c:f9:e3:
52:81:40:48:7c:97:8d:e7:ca:0b:cb:28:0b:a1:a1:ff:62:eb:
cb:89:f2:28:bf:e5:9f:c3:31:71:20:06:a1:81:fa:ec:2f:23:
94:9e:fd:fa:f0:38:ac:90:c7:c8:45:dd:19:36:1c:e6:01:1e:
66:b5:c9:ea:ef:3d:1c:8a:7d:aa:c6:1e:17:85:e5:40:43:77:
2b:c9:a8:58:7a:c2:87:cb:c0:7f:20:3c:b5:58:e7:d0:01:87:
09:60:d0:76:5a:02:1e:7a:9f:f2:45:99:ef:71:80:69:1d:ab:
a9:14:11:d1:e8:55:0a:ef:06:55:c7:86:04:3d:e0:f1:6d:e8:
06:59:38:ac:3f:61:26:f5:da:9f:9f:2e:39:b0:23:c5:84:3b:
78:35:95:1d:ed:b8:02:26:e2:46:fd:ec:a1:06:df:fe:67:32:
97:64:c1:04:e4:b1:39:d8:ae:73:7d:32:50:dd:90:80:61:6c:
49:2d:b3:f6:0c:bd:9e:8a:66:2a:c2:80:77:21:07:70:3a:22:
9a:c4:97:5f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYKbK0tMSAnLcIY9Si2yx6EgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODE0MDcwNDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWM1ZTA2OGIwZmE1NzliOTIxYmY0ZjExNzFhZTE2OGY1YzU1YmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky7XyYi4kil1HxfAHQ3xx5yOJbsP
I1duHksLGVI+QhZhg7V0ShKfCyO7HLGGgjP++xx2ka2gHvi98pKw86SdSAAucnee
6Pe+n5SATju4wdoYowHpKwzEwU/gv7VkNwJuH3oIMMFhk6fIYADUtDX6wsTLvFZl
NOQrwDebP5hxthCLlDYLwBrIA35t2BwBInMYvJPCtLWHw4tfdoORGpEaD4mzcFdE
R3TtzF5kD42wuczNijScxl9d/3s3ZXIfa1AWwskKiy9z39jkJoJlKVo2ag/ZYPxu
A9n6W/rvoDc+tCWnSdjQxE3WHTpVtbwvukKJ3DYcGKEu2++tqAwrob98HwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGHF4Giw+lebkhv08Rca4Wj1xVvaMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWWNYZ2FMRDZWNXVTR19UeEZ4cmhhUFhGVzlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAXPay4U6Js1nXsSeoic
VAdU5Ku7Qq9HlqFBc508xH2GmJCEfzPkDfXT0YZ0mJyQjW4pGpz541KBQEh8l43n
ygvLKAuhof9i68uJ8ii/5Z/DMXEgBqGB+uwvI5Se/frwOKyQx8hF3Rk2HOYBHma1
yervPRyKfarGHheF5UBDdyvJqFh6wofLwH8gPLVY59ABhwlg0HZaAh56n/JFme9x
gGkdq6kUEdHoVQrvBlXHhgQ94PFt6AZZOKw/YSb12p+fLjmwI8WEO3g1lR3tuAIm
4kb97KEG3/5nMpdkwQTksTnYrnN9MlDdkIBhbEkts/YMvZ6KZirCgHchB3A6IprE
l18=
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:30:20 2025 by rpki-client