Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/auTqpKqMob8zcZrX5ieC2eNg_yc.roa
File: auTqpKqMob8zcZrX5ieC2eNg_yc.roa (raw, json)
Hash identifier: 2yqe7KK0QjtyzdvPpTgjoUCc9zVedW5cDlGUBXHVuIQ=
Subject key identifier: 6A:E4:EA:A4:AA:8C:A1:BF:33:71:9A:D7:E6:27:82:D9:E3:60:FF:27
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018334D7A19AD7F173558B34A91288B1639E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/auTqpKqMob8zcZrX5ieC2eNg_yc.roa
Signing time: Tue 13 Sep 2022 03:14:50 +0000
ROA not before: Tue 13 Sep 2022 03:14:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:34:d7:a1:9a:d7:f1:73:55:8b:34:a9:12:88:b1:63:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 13 03:14:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ae4eaa4aa8ca1bf33719ad7e62782d9e360ff27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fd:68:a6:2b:0a:17:32:2b:34:cd:ab:ab:54:
63:02:3a:68:42:7d:be:ed:77:5c:a2:b8:94:c1:90:
97:0d:3e:c9:31:2e:cc:e1:36:fc:6f:ba:7a:9d:36:
85:e1:53:7f:58:83:3e:c4:ca:ce:b2:b0:b8:ec:c6:
7b:7c:95:27:e6:8e:7f:41:f9:9d:b4:a6:b4:74:d5:
ad:36:f2:23:84:fd:9e:97:de:a7:07:00:e7:2d:34:
44:f0:0f:79:07:12:87:83:6f:1a:7d:51:4a:09:29:
b3:a5:e3:ec:3a:ca:3e:09:f2:f5:28:d0:94:7f:47:
b8:55:dd:ec:9f:84:42:81:0e:cc:0c:e1:71:89:3c:
8a:41:67:68:0c:3b:2d:f1:78:9a:cb:c5:4d:38:ad:
a1:43:7b:e0:b2:c9:fe:cb:1d:81:d9:55:5f:da:9f:
cd:c1:b1:9a:47:03:a1:50:ae:bb:dd:f9:f8:d6:f8:
04:ba:8d:84:fc:c4:24:b4:7b:ec:16:ba:18:a0:40:
39:9a:c4:70:70:76:7e:87:d7:33:1f:28:2f:f7:04:
d7:d7:56:ef:f4:28:87:fa:51:87:46:ec:3f:ad:13:
ad:37:5d:67:b5:78:a8:29:ec:86:76:68:89:a9:ef:
34:c4:8a:20:c9:02:0b:36:fd:50:b5:3e:24:03:95:
93:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E4:EA:A4:AA:8C:A1:BF:33:71:9A:D7:E6:27:82:D9:E3:60:FF:27
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/auTqpKqMob8zcZrX5ieC2eNg_yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:dc:e3:18:84:83:38:f4:46:9d:4e:15:2b:92:39:23:ed:91:
ce:5d:8f:92:06:02:74:d8:62:f1:2a:bf:8a:ab:6a:52:3a:b6:
e4:f4:f3:aa:5f:d5:fb:d2:d9:e2:cb:9e:7b:22:51:c3:e9:ed:
02:1b:ca:ea:c5:68:6e:c8:da:d4:be:5b:6f:39:c6:e4:e3:fd:
a5:c6:75:07:e2:15:65:03:f0:0c:87:dd:97:8b:d1:05:c2:cb:
2d:ee:e3:15:21:07:b0:a7:af:40:73:72:5d:d9:f5:08:ca:f8:
c8:4e:da:20:f8:0a:6f:2e:a3:23:5b:ec:41:6f:24:97:a6:05:
21:b3:e9:47:55:d3:71:b9:c4:64:d9:84:06:3e:58:3a:f2:04:
32:d4:16:1f:d4:4e:2b:28:9c:1b:63:d8:b7:58:0d:41:4d:a4:
33:a5:ee:85:8b:8a:8a:8f:ad:9f:82:31:c6:80:da:8a:e8:c0:
cc:e0:44:76:02:d4:96:83:6e:56:e4:d5:87:41:d7:c9:37:d5:
a3:70:2c:42:38:c7:51:f1:aa:95:95:48:fd:cc:0e:bb:39:55:
1f:5e:65:bf:05:d0:93:b7:5b:67:0a:47:a6:1e:49:cf:c8:26:
0d:77:aa:43:5e:dc:4b:de:22:54:2c:8a:2d:ec:11:7b:d3:46:
6d:ec:8c:96
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYM016Ga1/FzVYs0qRKIsWOeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTEzMDMxNDUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWU0ZWFhNGFhOGNhMWJmMzM3MTlhZDdlNjI3ODJkOWUzNjBmZjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP1opisKFzIrNM2rq1RjAjpoQn2+
7XdcoriUwZCXDT7JMS7M4Tb8b7p6nTaF4VN/WIM+xMrOsrC47MZ7fJUn5o5/Qfmd
tKa0dNWtNvIjhP2el96nBwDnLTRE8A95BxKHg28afVFKCSmzpePsOso+CfL1KNCU
f0e4Vd3sn4RCgQ7MDOFxiTyKQWdoDDst8Xiay8VNOK2hQ3vgssn+yx2B2VVf2p/N
wbGaRwOhUK673fn41vgEuo2E/MQktHvsFroYoEA5msRwcHZ+h9czHygv9wTX11bv
9CiH+lGHRuw/rROtN11ntXioKeyGdmiJqe80xIogyQILNv1QtT4kA5WT0QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGrk6qSqjKG/M3Ga1+YngtnjYP8nMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYXVUcXBLcU1vYjh6Y1pyWDVpZUMyZU5nX3ljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAK3c4xiEgzj0Rp1OFSuS
OSPtkc5dj5IGAnTYYvEqv4qralI6tuT086pf1fvS2eLLnnsiUcPp7QIbyurFaG7I
2tS+W285xuTj/aXGdQfiFWUD8AyH3ZeL0QXCyy3u4xUhB7Cnr0Bzcl3Z9QjK+MhO
2iD4Cm8uoyNb7EFvJJemBSGz6UdV03G5xGTZhAY+WDryBDLUFh/UTisonBtj2LdY
DUFNpDOl7oWLioqPrZ+CMcaA2orowMzgRHYC1JaDblbk1YdB18k31aNwLEI4x1Hx
qpWVSP3MDrs5VR9eZb8F0JO3W2cKR6YeSc/IJg13qkNe3EveIlQsii3sEXvTRm3s
jJY=
-----END CERTIFICATE-----
Generated at Wed Jun 11 02:08:16 2025 by rpki-client