Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d4ZDJgz7NCiPRYGnAfA5Zpl0QZ0.roa
File: d4ZDJgz7NCiPRYGnAfA5Zpl0QZ0.roa (raw, json)
Hash identifier: QwewPKiJyQY5vERWyan0ntkouBkZK+8MxBk6ls0P1Hc=
Subject key identifier: 77:86:43:26:0C:FB:34:28:8F:45:81:A7:01:F0:39:66:99:74:41:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 924A1F98
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d4ZDJgz7NCiPRYGnAfA5Zpl0QZ0.roa
Signing time: Mon 04 Jul 2022 09:11:25 +0000
ROA not before: Mon 04 Jul 2022 09:11:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2454331288 (0x924a1f98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 4 09:11:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=778643260cfb34288f4581a701f039669974419d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:30:90:4d:da:1f:a1:0c:e1:55:48:df:43:f4:
bc:f2:e1:39:42:9a:49:10:e6:1e:0a:93:66:48:3c:
c2:42:3d:d8:8c:3a:06:40:a0:e4:2f:45:64:8a:1e:
37:87:02:03:55:6d:80:4b:15:89:ba:01:5b:03:1d:
be:11:b8:d1:e1:00:51:57:96:a1:43:7c:60:cb:c1:
93:e3:b9:11:3d:b3:c2:75:d6:76:33:0a:85:d2:a3:
a5:dd:a9:0a:73:92:28:13:fa:57:f3:d4:ed:b6:11:
97:40:f0:17:45:4b:fb:56:7d:c1:ec:d8:f0:46:91:
12:48:04:09:94:6c:37:fa:df:b2:98:2f:09:6f:5d:
d0:06:96:8f:f5:50:fd:17:f6:2c:76:20:1c:90:f0:
48:f0:1a:06:92:af:2e:2b:4a:7e:3b:87:75:f6:34:
12:cf:bd:69:ee:38:b7:56:fd:fc:93:92:2e:81:5c:
cc:c9:86:4c:e8:44:86:07:24:a1:5d:03:c9:f7:43:
09:ef:53:41:b6:ea:d2:40:36:bd:6c:24:e1:03:13:
4a:1d:45:11:b9:a6:2a:a0:61:f5:6d:11:ca:c1:15:
91:cb:7d:a2:06:98:2e:bb:8b:18:f9:48:85:2a:dd:
30:b9:20:91:19:8d:44:7e:fa:2c:73:c5:d5:0f:5c:
42:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:86:43:26:0C:FB:34:28:8F:45:81:A7:01:F0:39:66:99:74:41:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d4ZDJgz7NCiPRYGnAfA5Zpl0QZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:f5:d3:72:7f:e4:b4:c3:98:12:da:70:6b:af:1b:28:c5:02:
62:d8:8c:b6:ae:00:8e:0f:ff:96:79:d2:a6:c5:87:8d:bc:d8:
af:d3:68:76:1c:e9:d8:aa:2e:2f:d8:94:cc:0d:06:28:a0:20:
55:1d:da:9e:36:2e:51:82:f8:23:85:af:5d:d0:bd:cb:13:8b:
08:f2:84:23:d8:b7:23:d1:0a:d3:57:50:54:e0:5a:a2:2a:14:
73:da:93:55:94:b8:33:6e:9f:4d:26:6b:e0:cf:bd:76:50:d3:
5c:e7:f0:33:69:f3:a4:9c:ae:81:06:a6:05:b6:c8:f8:95:9a:
93:4b:a3:65:b4:32:8f:42:1a:e7:36:92:c5:92:f0:09:85:15:
6a:ea:39:e5:b5:e5:2f:7b:37:0b:7c:82:17:27:33:1f:b8:69:
87:77:13:70:c7:1f:2f:5c:68:54:d9:ce:b6:55:de:63:e5:cc:
7c:e1:45:7a:73:d1:2c:31:c6:69:93:89:56:44:b0:fe:ef:9a:
14:8a:dd:af:88:53:47:9d:b7:58:84:a8:cc:8f:8e:fb:2e:80:
16:3b:06:39:04:51:60:6a:30:a7:bf:62:f9:76:4c:e5:6f:d1:
f5:2b:e5:3d:ee:fa:e8:9c:7a:41:ca:0b:e3:e8:89:29:7c:65:
5f:c3:0e:f1
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAJJKH5gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA3
MDQwOTExMjVaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDc3ODY0MzI2MGNm
YjM0Mjg4ZjQ1ODFhNzAxZjAzOTY2OTk3NDQxOWQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCkMJBN2h+hDOFVSN9D9Lzy4TlCmkkQ5h4Kk2ZIPMJCPdiM
OgZAoOQvRWSKHjeHAgNVbYBLFYm6AVsDHb4RuNHhAFFXlqFDfGDLwZPjuRE9s8J1
1nYzCoXSo6XdqQpzkigT+lfz1O22EZdA8BdFS/tWfcHs2PBGkRJIBAmUbDf637KY
LwlvXdAGlo/1UP0X9ix2IByQ8EjwGgaSry4rSn47h3X2NBLPvWnuOLdW/fyTki6B
XMzJhkzoRIYHJKFdA8n3QwnvU0G26tJANr1sJOEDE0odRRG5piqgYfVtEcrBFZHL
faIGmC67ixj5SIUq3TC5IJEZjUR++ixzxdUPXELPAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUd4ZDJgz7NCiPRYGnAfA5Zpl0QZ0wHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9kNFpESmd6N05DaVBSWUduQWZBNVpwbDBRWjAucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEACfXTcn/ktMOYEtpwa68bKMUCYtiMtq4Ajg//
lnnSpsWHjbzYr9Nodhzp2KouL9iUzA0GKKAgVR3anjYuUYL4I4WvXdC9yxOLCPKE
I9i3I9EK01dQVOBaoioUc9qTVZS4M26fTSZr4M+9dlDTXOfwM2nzpJyugQamBbbI
+JWak0ujZbQyj0Ia5zaSxZLwCYUVauo55bXlL3s3C3yCFyczH7hph3cTcMcfL1xo
VNnOtlXeY+XMfOFFenPRLDHGaZOJVkSw/u+aFIrdr4hTR523WISozI+O+y6AFjsG
OQRRYGowp79i+XZM5W/R9SvlPe766Jx6QcoL4+iJKXxlX8MO8Q==
-----END CERTIFICATE-----
Generated at Mon Jun 9 20:11:15 2025 by rpki-client