Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_pN0OfXcG_MzoW9cDDWd-IZaQ5Y.roa
File: _pN0OfXcG_MzoW9cDDWd-IZaQ5Y.roa (raw, json)
Hash identifier: EF4opOTKY0HkVXmOftyo/cHPk3w1JfYC3eDCS8UMMtc=
Subject key identifier: FE:93:74:39:F5:DC:1B:F3:33:A1:6F:5C:0C:35:9D:F8:86:5A:43:96
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 672C888A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_pN0OfXcG_MzoW9cDDWd-IZaQ5Y.roa
Signing time: Wed 02 Feb 2022 11:09:32 +0000
ROA not before: Wed 02 Feb 2022 11:09:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1730971786 (0x672c888a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 2 11:09:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe937439f5dc1bf333a16f5c0c359df8865a4396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7c:d4:49:5c:be:fb:1e:73:6e:2b:3a:47:f1:
ce:86:6c:75:b9:18:e6:d2:54:38:2c:85:aa:24:c6:
44:dd:5c:dc:62:73:41:83:58:87:bb:4d:8f:8e:e3:
d8:4a:7e:1b:68:2d:05:71:48:85:17:04:fd:3d:82:
27:8b:d6:f7:b8:b5:00:c6:2d:96:9c:d1:0c:ee:79:
15:b6:84:2e:71:89:47:ae:d3:1c:1a:99:ec:a9:1e:
34:bf:75:a7:b1:6c:91:eb:ba:6b:93:1e:2c:c0:32:
87:cc:69:f0:98:81:2d:b7:2a:ef:08:3f:c8:3a:ae:
8b:0f:ee:fb:4d:e5:ef:77:8c:d2:b3:43:a4:24:5c:
d5:bc:5c:7f:3a:b6:60:01:4b:e5:56:9a:3b:cd:97:
d2:fd:6d:38:dc:e6:09:dc:06:27:58:c8:e4:83:be:
86:3c:ea:3f:7b:5b:37:03:e9:18:fb:1e:88:3e:a8:
4e:ec:1c:a4:d0:0b:97:c1:72:60:5c:bb:b2:08:e0:
e5:44:48:48:94:68:c2:2e:e3:48:a0:f0:5b:f9:e2:
96:10:e5:5c:83:f3:ba:da:b4:4c:4a:fc:0c:8f:ef:
66:17:01:eb:df:03:74:b3:7c:b8:fa:be:04:bc:4e:
f3:ce:ea:b5:f1:20:90:82:c1:0f:d7:a3:a2:21:e1:
1e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:93:74:39:F5:DC:1B:F3:33:A1:6F:5C:0C:35:9D:F8:86:5A:43:96
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_pN0OfXcG_MzoW9cDDWd-IZaQ5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:8f:e6:be:7f:b9:bb:12:cf:4b:7b:9b:a0:fe:32:37:a6:8a:
6b:55:28:ca:a3:f8:4c:70:ac:ed:e2:00:79:0c:23:0a:f2:11:
37:2b:c5:a8:5b:74:09:00:c9:2e:c4:15:f7:10:ee:51:80:ef:
8a:34:12:cd:46:60:25:b4:10:8a:80:c4:84:5a:3d:f6:4f:21:
36:f5:15:56:6f:2d:96:47:1d:c8:af:5b:13:f9:2c:13:11:0b:
2b:7f:6d:fa:c5:0d:25:95:23:6c:60:07:ef:35:01:1f:c6:1f:
58:51:2f:e5:ba:f9:0b:7c:2c:90:c3:03:cb:96:14:7e:16:30:
f6:43:3d:58:27:80:e5:21:4c:38:e4:0c:ed:33:3b:e5:48:50:
85:48:42:aa:fd:e0:90:97:1d:a1:9d:7c:c3:49:7b:74:7b:92:
e1:cb:e6:d8:af:6a:53:1f:f6:14:f8:b9:c6:e1:0f:84:4c:3a:
94:0a:7f:84:1b:d4:c3:5c:a8:ab:3c:32:98:8e:e1:4a:d9:51:
d8:1f:f5:2d:77:3a:1c:fe:63:f2:3a:89:a0:24:2f:cf:05:9c:
88:70:6a:52:29:0f:8a:14:27:c0:08:71:54:45:fd:5c:8d:96:
65:d4:d8:56:0c:b1:82:d3:02:e2:df:b8:4e:f2:c8:d1:d1:4e:
ba:00:ff:b1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEZyyIijANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIw
MjExMDkzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmU5Mzc0MzlmNWRj
MWJmMzMzYTE2ZjVjMGMzNTlkZjg4NjVhNDM5NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM581Elcvvsec24rOkfxzoZsdbkY5tJUOCyFqiTGRN1c3GJz
QYNYh7tNj47j2Ep+G2gtBXFIhRcE/T2CJ4vW97i1AMYtlpzRDO55FbaELnGJR67T
HBqZ7KkeNL91p7Fskeu6a5MeLMAyh8xp8JiBLbcq7wg/yDquiw/u+03l73eM0rND
pCRc1bxcfzq2YAFL5VaaO82X0v1tONzmCdwGJ1jI5IO+hjzqP3tbNwPpGPseiD6o
TuwcpNALl8FyYFy7sgjg5URISJRowi7jSKDwW/nilhDlXIPzutq0TEr8DI/vZhcB
698DdLN8uPq+BLxO887qtfEgkILBD9ejoiHhHnMCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBT+k3Q59dwb8zOhb1wMNZ34hlpDljAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L19wTjBPZlhjR19Nem9XOWNERFdkLUlaYVE1WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAkj+a+f7m7Es9Le5ug/jI3poprVSjKo/hMcKzt
4gB5DCMK8hE3K8WoW3QJAMkuxBX3EO5RgO+KNBLNRmAltBCKgMSEWj32TyE29RVW
by2WRx3Ir1sT+SwTEQsrf236xQ0llSNsYAfvNQEfxh9YUS/luvkLfCyQwwPLlhR+
FjD2Qz1YJ4DlIUw45AztMzvlSFCFSEKq/eCQlx2hnXzDSXt0e5Lhy+bYr2pTH/YU
+LnG4Q+ETDqUCn+EG9TDXKirPDKYjuFK2VHYH/Utdzoc/mPyOomgJC/PBZyIcGpS
KQ+KFCfACHFURf1cjZZl1NhWDLGC0wLi37hO8sjR0U66AP+x
-----END CERTIFICATE-----
Generated at Mon Jun 9 01:17:51 2025 by rpki-client