Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/etPTb8JBurncDIOQC3eVWt-T-jM.roa
File: etPTb8JBurncDIOQC3eVWt-T-jM.roa (raw, json)
Hash identifier: dVj5jP6wX3O7mYOGuSF7epPBCh74U15E5+cEBAD+PWg=
Subject key identifier: 7A:D3:D3:6F:C2:41:BA:B9:DC:0C:83:90:0B:77:95:5A:DF:93:FA:33
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A34BD0DC6322A5DD48C8313D1C0161DEA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/etPTb8JBurncDIOQC3eVWt-T-jM.roa
Signing time: Sun 27 Aug 2023 02:05:19 +0000
ROA not before: Sun 27 Aug 2023 02:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:34bc:749e/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:34:bd:0d:c6:32:2a:5d:d4:8c:83:13:d1:c0:16:1d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 27 02:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ad3d36fc241bab9dc0c83900b77955adf93fa33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:bf:7e:bc:14:01:20:df:7e:3b:41:22:1b:a8:
44:de:39:a2:a8:87:a2:76:37:b0:a1:30:b5:38:61:
ca:c8:54:58:5a:c6:19:50:39:4f:5e:26:d1:dd:d2:
3d:c4:6b:a4:27:42:4b:d9:6a:b2:42:2f:60:cf:e5:
f6:cc:23:92:b5:c7:6d:f7:32:e5:53:ef:b3:28:9e:
69:cc:9e:f5:60:3b:46:c1:64:9d:d6:3c:33:2e:4b:
33:3b:c8:ab:8b:ad:8a:d6:c2:ca:b6:10:05:15:48:
38:b7:6d:03:0b:56:76:64:8a:fa:1c:47:3c:90:31:
b6:7b:80:d6:34:45:60:fd:cd:86:c2:97:6c:b4:e0:
28:dc:c8:21:76:8d:c2:a5:e8:b2:c8:f5:af:ca:1e:
41:da:f7:12:e5:ae:c1:33:5f:e6:52:bc:47:e9:34:
82:45:7e:86:89:38:ff:80:58:5d:fa:59:31:24:32:
62:d2:b1:12:70:91:d3:88:4d:3a:59:aa:94:89:35:
6a:4b:07:f7:36:48:22:2e:f9:28:3d:3d:1a:a5:37:
ee:b3:cd:3e:31:c9:f3:6f:78:23:e6:68:3e:18:cd:
7b:74:1d:ab:28:b8:2c:92:59:91:aa:6d:9e:a9:3f:
cb:7b:ab:8f:f2:97:d6:46:97:6d:ef:96:83:01:c8:
55:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D3:D3:6F:C2:41:BA:B9:DC:0C:83:90:0B:77:95:5A:DF:93:FA:33
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/etPTb8JBurncDIOQC3eVWt-T-jM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:81:ef:7d:72:85:d7:e8:eb:7f:57:36:72:32:04:dc:22:98:
bd:1f:15:f5:8c:11:19:90:cc:a9:9c:58:82:7a:07:58:0c:f4:
94:f9:b1:72:f8:6d:bd:91:a5:b7:75:0d:1b:62:de:55:7a:81:
a9:50:d3:4d:20:c2:b8:e4:ec:bc:5d:9c:b3:58:66:f6:29:09:
03:50:0c:a7:6a:f3:f4:0b:5b:88:b3:98:d2:28:b7:af:b3:28:
a5:2e:e6:26:bd:40:7a:ee:94:43:d0:c7:84:1d:bc:b7:c6:26:
47:44:5a:49:6c:a6:ca:a4:38:91:9f:c8:e0:82:09:33:8f:c4:
c3:8b:e4:ca:1e:ce:8f:60:22:73:1f:e0:08:cb:bb:05:3d:57:
35:fc:e3:30:ee:96:41:1f:d0:b6:98:81:90:71:a5:4d:04:49:
c7:09:c7:51:53:29:0b:2a:f7:ec:47:8e:ff:bc:5e:a5:57:4e:
0a:4b:20:43:b4:be:44:06:9f:52:f8:9d:2e:a4:4a:1a:8d:38:
4b:6e:32:3f:32:bc:fd:6e:13:77:00:68:b7:5c:d5:ac:1f:c8:
57:bf:05:36:2f:1c:b3:87:56:a2:e0:02:b8:9d:a5:72:1f:a4:
c3:7b:c4:a3:37:e2:99:45:40:fe:4d:e4:a8:49:37:ae:76:ad:
0d:3f:31:14
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYo0vQ3GMipd1IyDE9HAFh3qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODI3MDIwNTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWQzZDM2ZmMyNDFiYWI5ZGMwYzgzOTAwYjc3OTU1YWRmOTNmYTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL9+vBQBIN9+O0EiG6hE3jmiqIei
djewoTC1OGHKyFRYWsYZUDlPXibR3dI9xGukJ0JL2WqyQi9gz+X2zCOStcdt9zLl
U++zKJ5pzJ71YDtGwWSd1jwzLkszO8iri62K1sLKthAFFUg4t20DC1Z2ZIr6HEc8
kDG2e4DWNEVg/c2GwpdstOAo3Mghdo3CpeiyyPWvyh5B2vcS5a7BM1/mUrxH6TSC
RX6GiTj/gFhd+lkxJDJi0rEScJHTiE06WaqUiTVqSwf3NkgiLvkoPT0apTfus80+
Mcnzb3gj5mg+GM17dB2rKLgsklmRqm2eqT/Le6uP8pfWRpdt75aDAchVxQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHrT02/CQbq53AyDkAt3lVrfk/ozMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZXRQVGI4SkJ1cm5jRElPUUMzZVZXdC1ULWpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABmB731yhdfo639XNnIy
BNwimL0fFfWMERmQzKmcWIJ6B1gM9JT5sXL4bb2Rpbd1DRti3lV6galQ000gwrjk
7LxdnLNYZvYpCQNQDKdq8/QLW4izmNIot6+zKKUu5ia9QHrulEPQx4QdvLfGJkdE
WklspsqkOJGfyOCCCTOPxMOL5Moezo9gInMf4AjLuwU9VzX84zDulkEf0LaYgZBx
pU0ESccJx1FTKQsq9+xHjv+8XqVXTgpLIEO0vkQGn1L4nS6kShqNOEtuMj8yvP1u
E3cAaLdc1awfyFe/BTYvHLOHVqLgAridpXIfpMN7xKM34plFQP5N5KhJN652rQ0/
MRQ=
-----END CERTIFICATE-----
Generated at Mon Jun 9 12:43:17 2025 by rpki-client