Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dWRyn126gVIdjk7BBtW_VT1gz5g.roa
File: dWRyn126gVIdjk7BBtW_VT1gz5g.roa (raw, json)
Hash identifier: L6qq3c+T5KKBpKU76ck6s8yI6nWk53eZvzA8UUTSjkI=
Subject key identifier: 75:64:72:9F:5D:BA:81:52:1D:8E:4E:C1:06:D5:BF:55:3D:60:CF:98
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D8136A688DA7D6EEC53637906DBFD482
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dWRyn126gVIdjk7BBtW_VT1gz5g.roa
Signing time: Wed 09 Aug 2023 02:14:58 +0000
ROA not before: Wed 09 Aug 2023 02:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d8:13:6a:68:8d:a7:d6:ee:c5:36:37:90:6d:bf:d4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 02:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7564729f5dba81521d8e4ec106d5bf553d60cf98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e1:55:d4:c9:e9:08:53:ad:00:e0:1e:cd:e3:
94:3a:ee:06:10:68:73:80:fa:a4:03:c1:e0:a2:4b:
10:d5:d8:b1:c6:19:8d:8b:8a:30:5d:1e:6c:ca:1e:
43:66:6b:ca:0c:ef:98:65:28:2d:8d:43:dd:79:54:
d1:29:b8:d9:ee:3e:db:6b:76:c8:9b:e5:94:41:bc:
75:12:f7:e1:5c:f3:5a:41:da:ca:48:50:7c:72:8a:
55:21:fe:f1:64:bf:6c:bc:79:75:22:1e:be:ee:d2:
96:d3:0b:25:3e:e4:9b:41:47:4e:22:19:00:13:8b:
74:4b:e5:9c:49:79:90:b5:63:cb:c4:3a:fb:8f:c7:
f7:82:2c:f3:e1:de:6f:a2:43:01:35:6c:ce:39:3b:
42:2a:74:a5:5c:78:59:eb:cb:6f:8c:1f:22:41:27:
b3:cd:69:8f:44:3f:8b:50:dc:b4:ff:6e:dc:06:a4:
ad:9c:9c:be:6c:85:e0:a5:43:e8:e1:b1:d6:39:1d:
d2:59:b3:f2:41:48:fc:20:bb:23:75:ff:b7:80:16:
9c:4b:03:ba:45:49:ce:d1:57:80:d3:94:7e:ec:f5:
02:61:38:e8:fc:d5:9f:b8:69:b1:a0:2e:3b:4f:46:
16:66:c5:d9:60:aa:65:19:a0:0c:18:0d:02:a5:3d:
43:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:64:72:9F:5D:BA:81:52:1D:8E:4E:C1:06:D5:BF:55:3D:60:CF:98
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dWRyn126gVIdjk7BBtW_VT1gz5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:5c:25:83:91:58:82:4c:ba:10:72:43:73:45:d0:3b:3f:95:
60:51:61:47:cc:83:e0:f8:cb:04:4b:0d:8a:02:2d:a9:fd:fa:
ad:2c:4e:3e:ec:1f:f7:65:da:3f:41:7b:91:6a:3f:eb:ab:09:
a7:d4:4a:f0:9e:35:90:01:8e:bb:36:54:c0:03:25:43:9c:b0:
c6:fb:16:86:5b:df:4f:d1:68:45:46:f4:df:6b:e0:b8:d1:fc:
4f:8b:4f:d7:88:81:e1:8e:e3:a4:1f:84:1c:87:4d:a6:70:63:
f2:be:62:25:38:06:99:61:b0:29:52:6e:66:a7:d2:c3:38:3e:
9a:2e:ee:53:49:c0:9f:3c:d8:d4:d7:b7:d8:85:a6:c6:33:b9:
d0:69:bb:9a:c4:8f:e0:cf:d2:89:28:7b:54:15:77:08:00:59:
dd:cd:17:27:b1:58:3d:4b:69:2b:3c:20:72:24:c7:ce:55:48:
4e:d6:31:db:5d:5e:c4:d7:94:da:6f:5b:e8:c0:55:0d:7f:e3:
68:d9:31:52:71:49:1a:4e:07:45:51:0e:55:d6:85:7b:f4:01:
2c:ab:7a:37:79:5e:23:fe:af:47:d3:0f:de:ab:81:26:68:a5:
82:64:aa:35:3b:c0:11:53:0f:b4:29:9b:b0:9a:2e:02:26:ae:
5f:c9:6d:18
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnYE2pojafW7sU2N5Btv9SCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODA5MDIxNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTY0NzI5ZjVkYmE4MTUyMWQ4ZTRlYzEwNmQ1YmY1NTNkNjBjZjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+FV1MnpCFOtAOAezeOUOu4GEGhz
gPqkA8HgoksQ1dixxhmNi4owXR5syh5DZmvKDO+YZSgtjUPdeVTRKbjZ7j7ba3bI
m+WUQbx1EvfhXPNaQdrKSFB8copVIf7xZL9svHl1Ih6+7tKW0wslPuSbQUdOIhkA
E4t0S+WcSXmQtWPLxDr7j8f3gizz4d5vokMBNWzOOTtCKnSlXHhZ68tvjB8iQSez
zWmPRD+LUNy0/27cBqStnJy+bIXgpUPo4bHWOR3SWbPyQUj8ILsjdf+3gBacSwO6
RUnO0VeA05R+7PUCYTjo/NWfuGmxoC47T0YWZsXZYKplGaAMGA0CpT1DWwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHVkcp9duoFSHY5OwQbVv1U9YM+YMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZFdSeW4xMjZnVklkams3QkJ0V19WVDFnejVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAhcJYORWIJMuhByQ3NF
0Ds/lWBRYUfMg+D4ywRLDYoCLan9+q0sTj7sH/dl2j9Be5FqP+urCafUSvCeNZAB
jrs2VMADJUOcsMb7FoZb30/RaEVG9N9r4LjR/E+LT9eIgeGO46QfhByHTaZwY/K+
YiU4BplhsClSbman0sM4Ppou7lNJwJ882NTXt9iFpsYzudBpu5rEj+DP0okoe1QV
dwgAWd3NFyexWD1LaSs8IHIkx85VSE7WMdtdXsTXlNpvW+jAVQ1/42jZMVJxSRpO
B0VRDlXWhXv0ASyrejd5XiP+r0fTD96rgSZopYJkqjU7wBFTD7Qpm7CaLgImrl/J
bRg=
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:20:08 2025 by rpki-client