Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d6ytqg7G3ER9PvLSQWS65cp-7TM.roa
File: d6ytqg7G3ER9PvLSQWS65cp-7TM.roa (raw, json)
Hash identifier: OqYRV+40D7/7C1IrLVnt5EzLUhn5gtnom3D0FSXCEUA=
Subject key identifier: 77:AC:AD:AA:0E:C6:DC:44:7D:3E:F2:D2:41:64:BA:E5:CA:7E:ED:33
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01889A0E5AB7E25128F8AEAA8336D8352663
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d6ytqg7G3ER9PvLSQWS65cp-7TM.roa
Signing time: Thu 08 Jun 2023 08:10:11 +0000
ROA not before: Thu 08 Jun 2023 08:10:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:0e:5a:b7:e2:51:28:f8:ae:aa:83:36:d8:35:26:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 8 08:10:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77acadaa0ec6dc447d3ef2d24164bae5ca7eed33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ed:c5:d7:8f:c2:a1:58:7c:86:c9:6e:e1:1c:
c6:22:7f:1b:c9:ff:b6:bf:bf:a2:da:3a:98:73:01:
54:5a:0c:26:4b:3e:55:55:ff:9f:d6:46:d6:06:f0:
bb:0a:59:41:1f:72:47:2d:e0:bc:40:da:c5:43:54:
a2:af:94:85:6e:0f:a5:a0:5e:44:3c:76:5c:c9:da:
c8:16:5e:6b:2b:76:7c:d0:6e:bd:09:74:04:63:e5:
e0:2a:67:26:9e:88:4a:bb:74:60:4c:be:2f:d7:1a:
f9:f6:4a:79:48:89:13:06:55:d3:56:46:4a:a2:3f:
65:3b:b9:29:b3:c9:f8:af:21:44:9a:ad:6b:90:80:
36:af:e1:6b:c1:ca:14:f1:77:ca:89:db:20:f3:17:
f0:a8:f9:23:5d:b8:3e:68:0a:1b:88:1f:51:25:63:
2d:d6:6d:33:b3:b3:81:f5:0e:74:07:f1:83:80:d2:
5c:13:62:91:25:13:27:fa:c5:56:fe:5f:86:96:c7:
02:54:a4:94:95:f6:c4:1c:da:5a:2a:5c:67:8c:60:
7e:7c:7f:16:01:13:73:57:9f:76:e0:2e:99:0b:fa:
17:6e:6e:4c:c1:10:eb:2b:77:be:0f:7e:7b:34:2c:
69:ef:af:07:98:44:2b:d4:7b:ec:3c:82:cf:cd:81:
30:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AC:AD:AA:0E:C6:DC:44:7D:3E:F2:D2:41:64:BA:E5:CA:7E:ED:33
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d6ytqg7G3ER9PvLSQWS65cp-7TM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:fc:5e:95:ca:d4:50:7d:41:7a:51:99:60:9c:a0:fb:2e:65:
d2:a9:27:db:c5:ff:cb:27:0f:96:73:f1:f8:45:04:28:b2:f1:
36:f3:9c:37:a9:68:6a:51:38:87:d2:b8:7a:99:4a:5a:bd:54:
8b:e2:33:20:47:16:25:1b:e4:92:03:8c:27:e9:69:e4:16:aa:
37:91:19:c2:2f:93:08:05:0e:9a:07:e1:dc:14:c3:c7:da:27:
f1:8c:4c:20:e4:b8:cb:e6:20:f1:fc:16:6f:92:34:57:b5:af:
3e:e3:08:14:48:12:1a:43:ff:bf:cc:66:8c:4c:07:f8:93:1a:
d4:22:b6:51:95:60:54:48:1f:f9:92:cf:17:a2:ad:12:6d:e4:
e0:87:c8:5c:a5:59:7f:aa:1b:f3:96:55:c2:0c:45:bc:3e:c6:
8e:57:8f:88:9d:23:3c:c0:8f:07:12:ae:7f:99:02:2c:d2:f6:
12:54:43:de:41:7a:be:86:e6:b4:3e:65:f3:f5:1e:32:c6:7f:
3f:6a:32:f1:ab:7c:bb:7f:ab:d6:23:a9:5d:52:2d:9e:b8:f7:
a1:f6:d0:b6:eb:7f:c2:01:66:1b:1d:0b:dd:01:6d:b9:a9:21:
ad:cd:e8:38:00:6b:85:11:91:1f:e1:ac:91:3b:ca:63:a4:c8:
d7:62:4e:2d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYiaDlq34lEo+K6qgzbYNSZjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjA4MDgxMDExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2FjYWRhYTBlYzZkYzQ0N2QzZWYyZDI0MTY0YmFlNWNhN2VlZDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+3F14/CoVh8hslu4RzGIn8byf+2
v7+i2jqYcwFUWgwmSz5VVf+f1kbWBvC7CllBH3JHLeC8QNrFQ1Sir5SFbg+loF5E
PHZcydrIFl5rK3Z80G69CXQEY+XgKmcmnohKu3RgTL4v1xr59kp5SIkTBlXTVkZK
oj9lO7kps8n4ryFEmq1rkIA2r+FrwcoU8XfKidsg8xfwqPkjXbg+aAobiB9RJWMt
1m0zs7OB9Q50B/GDgNJcE2KRJRMn+sVW/l+GlscCVKSUlfbEHNpaKlxnjGB+fH8W
ARNzV5924C6ZC/oXbm5MwRDrK3e+D357NCxp768HmEQr1HvsPILPzYEwgQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHesraoOxtxEfT7y0kFkuuXKfu0zMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZDZ5dHFnN0czRVI5UHZMU1FXUzY1Y3AtN1RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABn8XpXK1FB9QXpRmWCc
oPsuZdKpJ9vF/8snD5Zz8fhFBCiy8TbznDepaGpROIfSuHqZSlq9VIviMyBHFiUb
5JIDjCfpaeQWqjeRGcIvkwgFDpoH4dwUw8faJ/GMTCDkuMvmIPH8Fm+SNFe1rz7j
CBRIEhpD/7/MZoxMB/iTGtQitlGVYFRIH/mSzxeirRJt5OCHyFylWX+qG/OWVcIM
Rbw+xo5Xj4idIzzAjwcSrn+ZAizS9hJUQ95Ber6G5rQ+ZfP1HjLGfz9qMvGrfLt/
q9YjqV1SLZ6496H20Lbrf8IBZhsdC90BbbmpIa3N6DgAa4URkR/hrJE7ymOkyNdi
Ti0=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:13:27 2025 by rpki-client