Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mHDz6Dq7deuBnqjG2n7PF4DesZ4.roa
File: mHDz6Dq7deuBnqjG2n7PF4DesZ4.roa (raw, json)
Hash identifier: CHiVjF7Z/UxQdc+0YMH7k2MO2c4EPBYLTxTMaE9fRz8=
Subject key identifier: 98:70:F3:E8:3A:BB:75:EB:81:9E:A8:C6:DA:7E:CF:17:80:DE:B1:9E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185E52F7FB1959AF52E16D2C97CD366AFA2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mHDz6Dq7deuBnqjG2n7PF4DesZ4.roa
Signing time: Tue 24 Jan 2023 19:09:33 +0000
ROA not before: Tue 24 Jan 2023 19:09:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e5:2f:7f:b1:95:9a:f5:2e:16:d2:c9:7c:d3:66:af:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 24 19:09:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9870f3e83abb75eb819ea8c6da7ecf1780deb19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e3:bd:51:07:46:00:cb:80:2c:08:7d:af:a7:
b8:db:f7:df:b1:70:5b:f6:70:20:67:76:14:6c:a2:
36:62:a0:0b:c2:ef:ff:ab:4b:cb:dc:10:d5:ac:8c:
40:8f:4e:c4:75:06:2e:e9:57:cf:db:cc:34:23:50:
4a:91:03:d8:c4:f7:f5:21:be:e3:dd:72:6b:9a:2b:
3d:93:df:a7:a1:df:f1:40:68:d6:6b:95:19:33:40:
ec:7c:1b:c6:ef:2c:4a:b8:5e:9a:98:ff:f4:6f:1e:
63:3f:ee:6d:fd:e2:33:31:9f:77:fa:de:af:ee:a2:
ea:22:c3:2f:2a:4f:57:cd:42:48:e0:f0:06:10:66:
4c:8a:42:ad:a9:54:73:d3:02:ad:f5:51:b0:49:6a:
5b:e4:2b:93:35:55:a1:2d:fa:f0:d6:2d:27:2d:12:
83:ef:8e:80:dd:30:6c:92:86:49:db:f9:40:c6:f5:
95:1d:25:5c:83:a0:e0:3f:ec:0e:f8:51:e9:4a:21:
5e:90:43:13:2c:73:b0:1a:e7:d1:44:b2:00:38:6a:
2c:b2:2b:9f:30:3f:82:3d:13:ea:15:6e:c1:57:45:
f6:60:b8:f7:91:f9:aa:bd:9a:e0:04:aa:4a:94:39:
5b:b7:24:c1:e5:76:74:22:34:83:7b:f6:c5:4c:75:
d0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:70:F3:E8:3A:BB:75:EB:81:9E:A8:C6:DA:7E:CF:17:80:DE:B1:9E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mHDz6Dq7deuBnqjG2n7PF4DesZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:5d:19:c7:5a:95:9c:38:98:da:22:5f:c5:b9:18:eb:25:b4:
53:c2:8b:58:ad:71:d2:32:f6:b0:52:b7:d0:d0:99:82:9d:2c:
ac:7c:01:69:18:a8:05:e8:4b:77:54:5e:0e:0c:13:4c:fd:d2:
e7:ad:da:78:6d:45:0c:7b:ff:e5:3f:78:f2:7e:89:a2:75:b9:
89:db:87:77:2a:bb:53:d8:a1:0f:13:81:61:a7:1f:48:30:fe:
30:fa:e5:7e:3d:9c:a3:87:c1:8b:df:d8:42:b7:db:7d:2b:6f:
d8:ed:2d:c7:5d:79:6c:da:7e:aa:3a:2f:10:eb:d1:68:8c:e1:
8a:6c:5d:c3:22:ed:39:59:b3:6b:cd:44:40:8b:5f:fe:18:25:
4b:d4:97:8a:44:1f:6f:9b:27:8d:28:b9:1a:77:13:70:88:88:
3a:eb:fe:04:7c:cd:a1:58:a0:9f:a8:a0:c9:19:f6:35:c9:82:
26:c9:6c:91:27:95:b0:36:ea:6f:cd:80:ff:34:56:98:f7:ad:
7b:0d:0b:65:a2:82:d7:7b:b9:ad:21:5e:47:23:07:f1:d9:2f:
32:25:88:e5:2a:62:cf:f2:0f:0b:05:31:a3:6a:6d:92:25:45:
38:31:bb:64:ab:e8:50:53:0b:e8:5b:b8:81:27:d0:d1:08:d3:
c4:b1:96:bf
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYXlL3+xlZr1LhbSyXzTZq+iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTI0MTkwOTMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODcwZjNlODNhYmI3NWViODE5ZWE4YzZkYTdlY2YxNzgwZGViMTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+O9UQdGAMuALAh9r6e42/ffsXBb
9nAgZ3YUbKI2YqALwu//q0vL3BDVrIxAj07EdQYu6VfP28w0I1BKkQPYxPf1Ib7j
3XJrmis9k9+nod/xQGjWa5UZM0DsfBvG7yxKuF6amP/0bx5jP+5t/eIzMZ93+t6v
7qLqIsMvKk9XzUJI4PAGEGZMikKtqVRz0wKt9VGwSWpb5CuTNVWhLfrw1i0nLRKD
746A3TBskoZJ2/lAxvWVHSVcg6DgP+wO+FHpSiFekEMTLHOwGufRRLIAOGossiuf
MD+CPRPqFW7BV0X2YLj3kfmqvZrgBKpKlDlbtyTB5XZ0IjSDe/bFTHXQkwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJhw8+g6u3XrgZ6oxtp+zxeA3rGeMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbUhEejZEcTdkZXVCbnFqRzJuN1BGNERlc1o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACddGcdalZw4mNoiX8W5
GOsltFPCi1itcdIy9rBSt9DQmYKdLKx8AWkYqAXoS3dUXg4ME0z90uet2nhtRQx7
/+U/ePJ+iaJ1uYnbh3cqu1PYoQ8TgWGnH0gw/jD65X49nKOHwYvf2EK3230rb9jt
LcddeWzafqo6LxDr0WiM4YpsXcMi7TlZs2vNRECLX/4YJUvUl4pEH2+bJ40ouRp3
E3CIiDrr/gR8zaFYoJ+ooMkZ9jXJgibJbJEnlbA26m/NgP80Vpj3rXsNC2Wigtd7
ua0hXkcjB/HZLzIliOUqYs/yDwsFMaNqbZIlRTgxu2Sr6FBTC+hbuIEn0NEI08Sx
lr8=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:18:44 2025 by rpki-client