Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cnNJBqfq9i1TkWfK58sellget4U.roa
File: cnNJBqfq9i1TkWfK58sellget4U.roa (raw, json)
Hash identifier: L0dV28ss8yCKEA7Aq8y6LtoZmZMVDAkOJ4gcZWH1u6o=
Subject key identifier: 72:73:49:06:A7:EA:F6:2D:53:91:67:CA:E7:CB:1E:96:58:1E:B7:85
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 856D575E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cnNJBqfq9i1TkWfK58sellget4U.roa
Signing time: Thu 19 May 2022 10:13:29 +0000
ROA not before: Thu 19 May 2022 10:13:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2238535518 (0x856d575e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 19 10:13:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72734906a7eaf62d539167cae7cb1e96581eb785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:de:f0:b3:a4:ce:a4:f5:82:0e:e1:9a:f5:
da:e5:cf:d4:55:64:53:96:ad:7f:0f:58:2b:b5:b2:
49:76:fa:53:6e:2d:2e:21:56:82:ff:7c:eb:c5:ba:
dc:15:62:cd:45:59:9d:66:79:55:89:65:ac:bc:3d:
b2:0a:3f:84:ac:06:98:45:b2:50:87:41:e4:ea:cd:
c3:90:09:eb:8d:57:a3:3e:6f:ca:aa:56:ab:d0:39:
4c:3c:e6:b0:6f:b7:4d:8d:82:f6:ea:3b:72:61:5c:
b2:57:5a:e9:74:a0:10:17:b4:f7:a5:10:48:c3:56:
f9:2c:49:f9:da:af:8a:b3:8c:a5:c6:ea:57:bc:fd:
d9:9a:ad:da:26:4f:0b:af:2c:b7:eb:c9:c8:6d:5a:
72:10:c5:33:f3:87:e7:bb:96:f9:0e:49:1a:ac:43:
47:03:f7:41:b8:22:24:90:b0:7a:74:cb:12:10:6e:
7a:b4:dc:06:37:f2:2e:4a:b8:e3:d1:cf:73:87:9e:
e5:0e:65:37:e2:48:51:47:61:91:92:2c:38:b4:af:
80:ca:f0:54:76:36:6c:25:0f:81:57:3a:de:05:68:
ce:17:b9:16:9c:5c:64:8f:9b:89:d2:ff:8c:e3:06:
1c:da:ca:18:d2:7b:1d:ca:49:c7:34:19:83:85:cc:
fa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:73:49:06:A7:EA:F6:2D:53:91:67:CA:E7:CB:1E:96:58:1E:B7:85
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cnNJBqfq9i1TkWfK58sellget4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:e8:2f:35:ab:5d:8c:36:d3:ff:07:56:1b:bc:05:f6:9f:14:
64:90:27:73:2d:9e:57:7b:73:1c:4b:98:b5:45:7a:5c:81:00:
23:3c:39:5c:cc:bf:5e:47:c9:a0:7f:5c:7b:33:14:23:d7:57:
7f:4d:a7:04:bb:24:48:59:3e:79:64:36:a1:b6:13:af:24:a2:
1e:74:e3:23:89:c2:4a:c6:cf:d7:8d:f7:31:4e:93:59:8c:26:
bb:e6:14:1e:94:00:9c:12:49:4c:c9:1b:9b:51:b0:6e:8b:03:
aa:57:38:4c:33:1c:05:6b:b6:ca:9b:62:33:99:87:f4:93:1c:
ca:20:6f:4f:f0:df:ac:68:1b:34:74:de:ab:70:41:c8:9c:aa:
c4:1c:9f:42:e8:e3:dc:ef:ec:18:c1:4f:e1:67:2b:44:86:00:
a0:32:24:45:9e:64:9e:14:c7:01:0c:ed:85:af:8e:79:d5:e0:
48:de:d0:d5:e7:9e:95:c1:8f:2d:61:17:dd:88:5f:be:6c:23:
db:24:62:bd:be:c8:0b:fe:18:ff:c8:83:ea:83:bc:08:64:9e:
fc:31:55:a2:4a:8b:ba:21:bc:fe:17:fc:4d:ae:af:4d:49:d1:
f1:5e:86:f8:d3:6d:cc:b7:8d:e4:b9:63:b2:33:64:63:12:97:
c5:fd:62:b4
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIVtV14wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MTkxMDEzMjlaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDcyNzM0OTA2YTdl
YWY2MmQ1MzkxNjdjYWU3Y2IxZTk2NTgxZWI3ODUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCXOd7ws6TOpPWCDuGa9drlz9RVZFOWrX8PWCu1skl2+lNu
LS4hVoL/fOvFutwVYs1FWZ1meVWJZay8PbIKP4SsBphFslCHQeTqzcOQCeuNV6M+
b8qqVqvQOUw85rBvt02NgvbqO3JhXLJXWul0oBAXtPelEEjDVvksSfnar4qzjKXG
6le8/dmardomTwuvLLfrychtWnIQxTPzh+e7lvkOSRqsQ0cD90G4IiSQsHp0yxIQ
bnq03AY38i5KuOPRz3OHnuUOZTfiSFFHYZGSLDi0r4DK8FR2NmwlD4FXOt4FaM4X
uRacXGSPm4nS/4zjBhzayhjSex3KScc0GYOFzPrRAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUcnNJBqfq9i1TkWfK58sellget4UwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9jbk5KQnFmcTlpMVRrV2ZLNThzZWxsZ2V0NFUucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAIugvNatdjDbT/wdWG7wF9p8UZJAncy2eV3tz
HEuYtUV6XIEAIzw5XMy/XkfJoH9cezMUI9dXf02nBLskSFk+eWQ2obYTrySiHnTj
I4nCSsbP1433MU6TWYwmu+YUHpQAnBJJTMkbm1GwbosDqlc4TDMcBWu2yptiM5mH
9JMcyiBvT/DfrGgbNHTeq3BByJyqxByfQujj3O/sGMFP4WcrRIYAoDIkRZ5knhTH
AQztha+OedXgSN7Q1eeelcGPLWEX3Yhfvmwj2yRivb7IC/4Y/8iD6oO8CGSe/DFV
okqLuiG8/hf8Ta6vTUnR8V6G+NNtzLeN5LljsjNkYxKXxf1itA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 00:58:46 2025 by rpki-client