Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n-uJPcEhBI9WNZ3mBwHJNtYq0KY.roa
File: n-uJPcEhBI9WNZ3mBwHJNtYq0KY.roa (raw, json)
Hash identifier: AriWnx1XuVajvLmUUS+ls4ZJY5n1N+EZB3EUit/anAQ=
Subject key identifier: 9F:EB:89:3D:C1:21:04:8F:56:35:9D:E6:07:01:C9:36:D6:2A:D0:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184C273D51C3DCD651B2EB606F5F234C7EA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n-uJPcEhBI9WNZ3mBwHJNtYq0KY.roa
Signing time: Tue 29 Nov 2022 08:14:41 +0000
ROA not before: Tue 29 Nov 2022 08:14:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
2001:67c:64:ffff:0:184:bdea:9abb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c2:73:d5:1c:3d:cd:65:1b:2e:b6:06:f5:f2:34:c7:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 29 08:14:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9feb893dc121048f56359de60701c936d62ad0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a1:7b:c1:65:3c:b0:5b:83:06:ab:ac:25:60:
2b:d2:7d:14:10:57:62:44:98:05:a5:59:41:af:b5:
29:93:64:f5:68:77:41:13:f3:c1:2a:17:c9:58:6e:
63:38:3f:5a:fd:71:a1:a8:28:fd:ce:d2:5c:16:02:
9f:7c:cb:9f:03:49:49:91:d6:d0:2e:f2:7b:82:af:
e0:83:22:05:97:83:3e:fe:be:f7:22:5a:57:93:6a:
a6:8d:ec:46:fc:a6:66:35:ab:c9:63:e7:3b:97:81:
22:a5:18:db:7f:7e:04:ed:3c:c5:eb:3d:b5:d9:62:
65:99:8e:08:96:ba:eb:39:f9:28:1b:f3:88:89:de:
ee:4b:eb:02:ed:ce:77:67:7a:20:56:c5:9e:49:ca:
15:25:10:32:22:39:ae:38:33:5e:42:06:f3:36:40:
53:21:e7:5e:4c:6c:04:ad:10:fa:c6:7b:fb:a5:3f:
48:ac:0d:3b:f9:80:68:33:9a:e0:31:16:89:e3:de:
82:8e:47:cc:9c:77:9b:54:9d:55:e8:8e:c1:cd:c0:
3d:7d:2c:14:d9:0f:14:aa:8b:dd:e2:23:40:02:c7:
28:29:48:40:17:88:7a:2a:30:7e:b9:cf:8e:b1:60:
bd:d7:ed:94:fb:0d:a5:b8:57:5a:42:40:21:46:0f:
d5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EB:89:3D:C1:21:04:8F:56:35:9D:E6:07:01:C9:36:D6:2A:D0:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n-uJPcEhBI9WNZ3mBwHJNtYq0KY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:2d:f3:7a:af:39:43:ef:39:ff:b2:71:96:05:05:5d:0d:42:
0d:5f:cc:57:5c:90:9c:7e:90:22:1c:bb:ca:e8:d8:4f:de:95:
a8:5f:15:28:1c:ba:ad:62:d9:f7:b6:60:4d:1f:60:8c:7a:e2:
d1:6b:9a:0e:f4:42:c0:9e:34:de:b8:ec:c7:46:f2:cd:34:ed:
d3:ad:87:2f:53:bf:67:1b:9d:62:41:13:65:dc:a3:cf:3b:1a:
dd:d2:4a:40:36:c7:3d:19:22:d3:a7:32:2c:4a:12:9b:fb:a7:
22:e5:7e:58:06:cb:31:57:f6:46:e1:58:db:37:9c:1a:9c:48:
4c:d1:a2:f8:a0:12:98:b3:79:21:58:29:b4:73:07:92:c0:bb:
f4:4f:20:da:1e:73:50:f0:f8:f8:6a:74:c9:07:06:82:d0:33:
6b:f9:84:ee:ce:12:f1:69:03:e1:a1:13:d1:8c:c0:3e:23:8f:
57:a9:56:41:36:e3:5c:3e:40:f2:d1:53:00:98:ca:41:06:dc:
d2:89:d6:61:56:25:a3:3f:63:04:bd:59:f1:2e:c4:df:2d:a0:
24:c4:82:a8:3e:cb:dd:45:55:e4:07:5a:e7:35:7a:ea:08:ff:
2e:b5:b0:57:f9:e8:f2:2f:b9:8b:7d:f4:b5:46:a8:a7:0a:7a:
dc:69:e0:a8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYTCc9UcPc1lGy62BvXyNMfqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTI5MDgxNDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmViODkzZGMxMjEwNDhmNTYzNTlkZTYwNzAxYzkzNmQ2MmFkMGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKF7wWU8sFuDBqusJWAr0n0UEFdi
RJgFpVlBr7Upk2T1aHdBE/PBKhfJWG5jOD9a/XGhqCj9ztJcFgKffMufA0lJkdbQ
LvJ7gq/ggyIFl4M+/r73IlpXk2qmjexG/KZmNavJY+c7l4EipRjbf34E7TzF6z21
2WJlmY4IlrrrOfkoG/OIid7uS+sC7c53Z3ogVsWeScoVJRAyIjmuODNeQgbzNkBT
IedeTGwErRD6xnv7pT9IrA07+YBoM5rgMRaJ496CjkfMnHebVJ1V6I7BzcA9fSwU
2Q8Uqovd4iNAAscoKUhAF4h6KjB+uc+OsWC91+2U+w2luFdaQkAhRg/VhwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJ/riT3BIQSPVjWd5gcByTbWKtCmMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbi11SlBjRWhCSTlXTlozbUJ3SEpOdFlxMEtZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADgt83qvOUPvOf+ycZYF
BV0NQg1fzFdckJx+kCIcu8ro2E/elahfFSgcuq1i2fe2YE0fYIx64tFrmg70QsCe
NN647MdG8s007dOthy9Tv2cbnWJBE2Xco887Gt3SSkA2xz0ZItOnMixKEpv7pyLl
flgGyzFX9kbhWNs3nBqcSEzRovigEpizeSFYKbRzB5LAu/RPINoec1Dw+PhqdMkH
BoLQM2v5hO7OEvFpA+GhE9GMwD4jj1epVkE241w+QPLRUwCYykEG3NKJ1mFWJaM/
YwS9WfEuxN8toCTEgqg+y91FVeQHWuc1euoI/y61sFf56PIvuYt99LVGqKcKetxp
4Kg=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:08:20 2025 by rpki-client