Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dy5qzLKKZb2wSqblbTHm2Qv0KO0.roa
File: dy5qzLKKZb2wSqblbTHm2Qv0KO0.roa (raw, json)
Hash identifier: e/bGIC8mZqFhrn2wJwSC9KL2RGo06obm5IWpqUdlHGc=
Subject key identifier: 77:2E:6A:CC:B2:8A:65:BD:B0:4A:A6:E5:6D:31:E6:D9:0B:F4:28:ED
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189CC436D751DBC8FE047F91DAC98306BA6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dy5qzLKKZb2wSqblbTHm2Qv0KO0.roa
Signing time: Sun 06 Aug 2023 19:11:58 +0000
ROA not before: Sun 06 Aug 2023 19:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cc:43:6d:75:1d:bc:8f:e0:47:f9:1d:ac:98:30:6b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 19:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=772e6accb28a65bdb04aa6e56d31e6d90bf428ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d0:ed:a6:cd:6d:e8:01:87:08:3d:79:9f:80:
8d:83:0e:e5:3d:a5:c8:50:42:ba:a8:99:33:81:f9:
0d:88:0d:26:74:42:f3:27:78:6e:da:1d:c3:35:71:
15:45:d8:ba:c6:27:b2:65:11:c7:bd:7b:6c:fe:87:
e4:ec:90:bc:05:d4:ac:25:c4:68:d4:2b:04:78:7d:
40:e9:b3:87:f9:27:c1:90:86:73:62:6c:e0:19:fc:
c2:d8:42:7d:9d:ee:03:5f:98:af:12:81:25:cd:92:
a9:9b:a4:2e:f3:93:9a:c9:7d:52:a5:da:bf:53:60:
59:71:68:9e:cd:c1:b6:24:7d:d7:00:d8:89:13:b6:
58:af:a7:9e:bb:5b:90:25:61:5a:28:6e:c5:5c:a7:
b7:e2:db:46:c9:19:5a:b0:53:6d:bd:45:17:15:8c:
8d:0d:44:00:73:59:08:10:fe:f7:9e:a1:85:b9:2d:
17:48:ff:43:22:53:a1:dd:25:cb:45:a6:51:fd:f6:
d4:d4:1a:fb:94:b0:3a:ce:43:3e:6b:59:95:20:1d:
a5:ff:b3:62:71:34:f6:40:3f:1d:0f:35:7a:d9:f1:
5e:5b:4c:0a:b4:46:4a:98:d8:42:ad:51:8e:10:8a:
a6:46:8c:fb:40:52:ac:49:af:3f:03:39:15:0f:1d:
d1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2E:6A:CC:B2:8A:65:BD:B0:4A:A6:E5:6D:31:E6:D9:0B:F4:28:ED
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dy5qzLKKZb2wSqblbTHm2Qv0KO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:cb:5a:78:96:b2:8e:3c:40:b2:f3:fa:f9:b3:87:2d:0c:58:
d1:0e:f5:59:00:70:67:04:9e:26:5d:6e:f0:3e:5f:1a:7b:39:
67:db:96:92:f6:fe:90:1d:81:a4:f7:1e:03:41:42:b1:ab:cb:
0f:df:b4:c4:64:e4:1a:bd:da:49:0d:cc:52:73:f7:82:cf:bf:
58:35:e3:5e:eb:1b:09:1e:61:f6:87:09:13:f6:a1:23:dc:ed:
1a:a7:72:17:fa:99:6d:ba:92:5b:36:68:90:d5:ea:1f:95:ad:
b1:42:85:97:83:e0:0d:49:fa:48:1e:07:dc:a5:f7:9d:3c:15:
85:ef:d6:57:d1:13:f6:7e:52:32:d4:46:ed:85:72:00:03:e6:
36:59:ad:f1:db:d6:2c:22:59:da:92:be:c0:c8:e7:3c:45:30:
ed:6b:c0:e5:1b:0c:05:44:11:b7:24:fe:9e:ab:cf:37:e1:58:
0f:e4:9e:b7:4d:58:3c:98:7c:e3:70:d4:6f:36:10:31:06:39:
54:11:10:b8:77:44:e9:f0:4d:09:89:7f:c1:a1:aa:7a:4a:46:
68:24:c4:94:f9:f4:9a:b0:c0:3f:c1:8e:06:05:17:02:ff:22:
ce:97:a2:e4:95:d1:2b:a5:3f:64:bf:6a:8e:bc:93:6e:85:e3:
30:85:2d:11
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnMQ211HbyP4Ef5HayYMGumMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODA2MTkxMTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzJlNmFjY2IyOGE2NWJkYjA0YWE2ZTU2ZDMxZTZkOTBiZjQyOGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNDtps1t6AGHCD15n4CNgw7lPaXI
UEK6qJkzgfkNiA0mdELzJ3hu2h3DNXEVRdi6xieyZRHHvXts/ofk7JC8BdSsJcRo
1CsEeH1A6bOH+SfBkIZzYmzgGfzC2EJ9ne4DX5ivEoElzZKpm6Qu85OayX1Spdq/
U2BZcWiezcG2JH3XANiJE7ZYr6eeu1uQJWFaKG7FXKe34ttGyRlasFNtvUUXFYyN
DUQAc1kIEP73nqGFuS0XSP9DIlOh3SXLRaZR/fbU1Br7lLA6zkM+a1mVIB2l/7Ni
cTT2QD8dDzV62fFeW0wKtEZKmNhCrVGOEIqmRoz7QFKsSa8/AzkVDx3RzQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHcuasyyimW9sEqm5W0x5tkL9CjtMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZHk1cXpMS0taYjJ3U3FibGJUSG0yUXYwS08wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFPLWniWso48QLLz+vmz
hy0MWNEO9VkAcGcEniZdbvA+Xxp7OWfblpL2/pAdgaT3HgNBQrGryw/ftMRk5Bq9
2kkNzFJz94LPv1g1417rGwkeYfaHCRP2oSPc7Rqnchf6mW26kls2aJDV6h+VrbFC
hZeD4A1J+kgeB9yl9508FYXv1lfRE/Z+UjLURu2FcgAD5jZZrfHb1iwiWdqSvsDI
5zxFMO1rwOUbDAVEEbck/p6rzzfhWA/knrdNWDyYfONw1G82EDEGOVQRELh3ROnw
TQmJf8GhqnpKRmgkxJT59JqwwD/BjgYFFwL/Is6XouSV0SulP2S/ao68k26F4zCF
LRE=
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:15:05 2025 by rpki-client