Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YjQYQ6espprtcIklhFlaDAqHRg4.roa
File: YjQYQ6espprtcIklhFlaDAqHRg4.roa (raw, json)
Hash identifier: OJHpIOdeUnUzjS5dTiJ+h3oa6x0iV2aN6akPRxtPH5s=
Subject key identifier: 62:34:18:43:A7:AC:A6:9A:ED:70:89:25:84:59:5A:0C:0A:87:46:0E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182B8FF53F99EEDAA79FDD00100AA07B893
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YjQYQ6espprtcIklhFlaDAqHRg4.roa
Signing time: Sat 20 Aug 2022 02:05:16 +0000
ROA not before: Sat 20 Aug 2022 02:05:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:b8fe:85de/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b8:ff:53:f9:9e:ed:aa:79:fd:d0:01:00:aa:07:b8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 20 02:05:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62341843a7aca69aed70892584595a0c0a87460e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f1:9e:93:99:7e:6a:5f:f8:01:01:6f:08:3a:
11:23:a2:ed:ec:de:44:7b:db:c9:55:04:0d:1f:97:
a1:b5:f8:2d:0c:c2:50:e0:71:61:c2:5b:d3:a3:dc:
3f:d6:76:76:c4:83:77:8c:eb:ed:97:6b:9c:70:af:
9b:9e:b2:a0:1d:0c:a0:41:db:89:72:bb:7f:39:10:
fb:79:85:e5:76:30:73:88:ac:0b:7e:22:72:d0:1e:
65:5e:88:2c:39:44:45:14:f4:ce:4b:3d:d7:79:e5:
ed:92:0d:bb:2e:26:5f:9d:18:02:ea:95:c7:de:53:
e1:19:3e:71:56:41:0b:f1:3c:0b:60:8b:52:14:c4:
3e:29:20:1e:70:5f:4d:86:ac:8b:4b:7a:7b:63:fc:
b5:62:c9:f8:65:cd:96:95:72:a1:36:77:3e:92:b2:
8f:32:61:f7:cd:e6:20:98:af:84:5f:ff:5b:77:54:
7c:9d:53:b6:35:4a:f2:2a:86:0f:24:b5:ca:48:32:
46:8f:0a:d3:bd:41:d5:cc:6c:b1:74:ab:be:f1:ff:
bd:f1:19:2a:a5:25:90:94:49:b2:a4:c9:90:7b:bd:
30:53:6f:a4:72:74:be:6c:18:56:b8:62:a3:36:5b:
53:54:52:9d:a4:41:a5:9d:59:b3:f1:93:f6:11:21:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:34:18:43:A7:AC:A6:9A:ED:70:89:25:84:59:5A:0C:0A:87:46:0E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YjQYQ6espprtcIklhFlaDAqHRg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:58:d4:c7:6a:92:33:3d:3f:86:6e:6c:e9:4f:eb:26:f6:92:
10:ba:bb:f9:e2:d9:1f:88:15:c7:c4:cd:27:7f:85:e4:e3:94:
2e:4e:72:7f:12:1a:49:92:ad:8d:56:cc:8d:1a:23:ca:17:4d:
a3:99:7d:8b:8d:c4:29:75:0e:2e:4c:1a:0d:e3:f2:a7:68:b3:
23:de:eb:48:a5:b3:82:1e:c0:77:09:45:3a:42:e3:c4:a6:fa:
b7:87:16:23:77:1f:8b:ac:fc:5d:fd:4f:e7:87:a2:bb:c9:b7:
80:d1:25:35:45:3a:7f:0f:a8:21:28:9e:1d:80:f1:6f:93:83:
a1:f1:21:f5:28:0f:ab:02:61:bd:ae:b9:bb:1c:1a:b5:3a:73:
66:e3:77:43:4b:f5:10:33:f0:12:41:a1:b1:98:c0:67:b1:c3:
8a:5e:c6:86:54:00:f0:07:ce:b4:03:fc:87:8d:c1:18:64:4c:
be:35:4b:86:c2:5e:d5:74:38:73:d2:6e:27:34:49:c6:55:83:
33:66:aa:d2:06:2b:4d:db:68:0d:a6:7e:19:2f:5e:a0:16:c1:
a8:99:55:3c:45:97:57:33:6f:f6:a2:0e:5a:a9:1d:6c:69:9c:
74:5b:9f:db:27:61:4e:48:0a:26:34:85:e3:cd:d1:b4:0f:99:
35:aa:92:92
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYK4/1P5nu2qef3QAQCqB7iTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODIwMDIwNTE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjM0MTg0M2E3YWNhNjlhZWQ3MDg5MjU4NDU5NWEwYzBhODc0NjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvGek5l+al/4AQFvCDoRI6Lt7N5E
e9vJVQQNH5ehtfgtDMJQ4HFhwlvTo9w/1nZ2xIN3jOvtl2uccK+bnrKgHQygQduJ
crt/ORD7eYXldjBziKwLfiJy0B5lXogsOURFFPTOSz3XeeXtkg27LiZfnRgC6pXH
3lPhGT5xVkEL8TwLYItSFMQ+KSAecF9NhqyLS3p7Y/y1Ysn4Zc2WlXKhNnc+krKP
MmH3zeYgmK+EX/9bd1R8nVO2NUryKoYPJLXKSDJGjwrTvUHVzGyxdKu+8f+98Rkq
pSWQlEmypMmQe70wU2+kcnS+bBhWuGKjNltTVFKdpEGlnVmz8ZP2ESEGSwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGI0GEOnrKaa7XCJJYRZWgwKh0YOMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWWpRWVE2ZXNwcHJ0Y0lrbGhGbGFEQXFIUmc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGxY1MdqkjM9P4ZubOlP
6yb2khC6u/ni2R+IFcfEzSd/heTjlC5Ocn8SGkmSrY1WzI0aI8oXTaOZfYuNxCl1
Di5MGg3j8qdosyPe60ils4IewHcJRTpC48Sm+reHFiN3H4us/F39T+eHorvJt4DR
JTVFOn8PqCEonh2A8W+Tg6HxIfUoD6sCYb2uubscGrU6c2bjd0NL9RAz8BJBobGY
wGexw4pexoZUAPAHzrQD/IeNwRhkTL41S4bCXtV0OHPSbic0ScZVgzNmqtIGK03b
aA2mfhkvXqAWwaiZVTxFl1czb/aiDlqpHWxpnHRbn9snYU5ICiY0hePN0bQPmTWq
kpI=
-----END CERTIFICATE-----
Generated at Wed Jun 11 22:07:53 2025 by rpki-client