Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j9U8ZZymp6KcSYtZu3MYs8DbVjI.roa
File: j9U8ZZymp6KcSYtZu3MYs8DbVjI.roa (raw, json)
Hash identifier: hHhA9BGc4WWyeswJAnxP6H428LUTg/IQSuGykw/q008=
Subject key identifier: 8F:D5:3C:65:9C:A6:A7:A2:9C:49:8B:59:BB:73:18:B3:C0:DB:56:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8D971425
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j9U8ZZymp6KcSYtZu3MYs8DbVjI.roa
Signing time: Fri 17 Jun 2022 18:10:44 +0000
ROA not before: Fri 17 Jun 2022 18:10:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2375488549 (0x8d971425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 17 18:10:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fd53c659ca6a7a29c498b59bb7318b3c0db5632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0b:63:a7:44:07:ae:1f:30:3e:90:0e:ab:12:
a9:8d:a2:f3:b2:97:1d:c8:12:07:a8:65:42:5d:96:
e8:c8:29:48:11:99:3c:65:21:86:34:25:d7:91:2a:
58:46:ed:eb:08:68:da:52:4b:80:79:2a:25:5c:c6:
c5:52:77:17:a3:43:cb:5c:e2:6e:07:f2:c8:52:7c:
06:d0:de:90:4e:e7:b7:e2:dc:2c:51:1e:47:6d:65:
37:6c:58:bf:95:15:6f:c9:97:91:77:42:2a:0c:6c:
09:23:6a:2d:fc:78:80:b9:3b:65:9a:2b:a2:82:68:
6a:fd:cd:a8:da:be:27:2c:7e:06:a1:06:eb:7f:5e:
bc:ed:59:a8:71:b1:19:2d:88:97:ad:ef:e3:31:f6:
1b:5e:ca:61:42:5a:29:7d:ec:97:0c:b4:b3:ab:75:
0c:e9:46:86:85:c7:d6:ac:0b:c7:ff:d5:12:45:5c:
df:14:3d:d1:61:d5:fb:68:35:74:29:26:2b:02:a6:
a9:12:ec:1f:2f:45:e9:26:e4:49:2c:d4:3c:5f:e5:
08:d3:85:61:05:d9:15:71:a2:21:35:76:3e:04:35:
ff:fb:25:c2:82:b8:be:7c:9b:b1:0e:6c:48:75:c6:
3b:ea:d1:c1:e5:89:36:f5:33:89:c0:15:08:bb:e3:
ef:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D5:3C:65:9C:A6:A7:A2:9C:49:8B:59:BB:73:18:B3:C0:DB:56:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j9U8ZZymp6KcSYtZu3MYs8DbVjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:97:a5:9a:b1:48:b2:3e:49:73:57:92:9e:75:26:99:01:8d:
80:17:e8:3e:47:59:dc:e1:ee:1a:cc:6e:30:0d:2c:63:76:1c:
45:10:01:bd:e0:ba:99:a0:26:cd:7f:1f:c3:51:10:c7:08:0b:
60:c0:c6:67:10:0b:7b:da:05:d9:02:cc:bb:2a:2d:75:2a:6f:
65:0d:fd:91:1a:61:79:f0:73:36:60:d4:d2:d5:a9:3e:86:f7:
de:bc:b6:70:88:98:0d:37:cc:e9:6b:86:d3:0a:d6:9b:80:95:
9b:d0:e7:db:61:a1:49:38:ef:57:72:37:25:fa:99:08:2d:35:
d0:4a:30:9e:1e:f6:5a:72:7d:51:ad:2a:70:e9:bb:98:f7:3e:
a3:85:8b:97:31:a7:7f:2d:cc:e2:5c:57:a3:75:34:a5:55:09:
0c:8c:0b:51:70:29:1b:6d:68:f1:26:a3:7e:6f:98:80:e3:17:
d4:7d:a7:0d:e4:ec:74:92:16:12:b4:51:78:48:87:16:43:8a:
2c:5b:f9:64:79:4c:f7:65:6b:64:ca:46:2c:62:a2:06:5e:95:
f3:95:82:88:6b:0e:4d:05:dd:71:7d:b8:93:38:72:5a:9e:0d:
95:e4:72:3a:26:f0:49:4d:cc:d5:d2:8b:58:ee:52:d7:44:51:
7a:94:67:ec
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAI2XFCUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MTcxODEwNDRaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDhmZDUzYzY1OWNh
NmE3YTI5YzQ5OGI1OWJiNzMxOGIzYzBkYjU2MzIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCpC2OnRAeuHzA+kA6rEqmNovOylx3IEgeoZUJdlujIKUgR
mTxlIYY0JdeRKlhG7esIaNpSS4B5KiVcxsVSdxejQ8tc4m4H8shSfAbQ3pBO57fi
3CxRHkdtZTdsWL+VFW/Jl5F3QioMbAkjai38eIC5O2WaK6KCaGr9zajavicsfgah
But/XrztWahxsRktiJet7+Mx9hteymFCWil97JcMtLOrdQzpRoaFx9asC8f/1RJF
XN8UPdFh1ftoNXQpJisCpqkS7B8vRekm5Eks1Dxf5QjThWEF2RVxoiE1dj4ENf/7
JcKCuL58m7EObEh1xjvq0cHliTb1M4nAFQi74+8DAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUj9U8ZZymp6KcSYtZu3MYs8DbVjIwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9qOVU4Wlp5bXA2S2NTWXRadTNNWXM4RGJWakkucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAj5elmrFIsj5Jc1eSnnUmmQGNgBfoPkdZ3OHu
GsxuMA0sY3YcRRABveC6maAmzX8fw1EQxwgLYMDGZxALe9oF2QLMuyotdSpvZQ39
kRphefBzNmDU0tWpPob33ry2cIiYDTfM6WuG0wrWm4CVm9Dn22GhSTjvV3I3JfqZ
CC010Eownh72WnJ9Ua0qcOm7mPc+o4WLlzGnfy3M4lxXo3U0pVUJDIwLUXApG21o
8Sajfm+YgOMX1H2nDeTsdJIWErRReEiHFkOKLFv5ZHlM92VrZMpGLGKiBl6V85WC
iGsOTQXdcX24kzhyWp4NleRyOibwSU3M1dKLWO5S10RRepRn7A==
-----END CERTIFICATE-----
Generated at Tue Jun 10 10:06:50 2025 by rpki-client