Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rJ-NPEYQ0d6UrPn0O32-bOgKcYY.roa
File: rJ-NPEYQ0d6UrPn0O32-bOgKcYY.roa (raw, json)
Hash identifier: Sus6bNMRtRx830+xsy0zj9cP1m4sZg/87cMKnSEC8kk=
Subject key identifier: AC:9F:8D:3C:46:10:D1:DE:94:AC:F9:F4:3B:7D:BE:6C:E8:0A:71:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DC5EF742C5ECB797EB1101374BDA5124
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rJ-NPEYQ0d6UrPn0O32-bOgKcYY.roa
Signing time: Wed 09 Aug 2023 22:15:58 +0000
ROA not before: Wed 09 Aug 2023 22:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:dc:5e:f7:42:c5:ec:b7:97:eb:11:01:37:4b:da:51:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 22:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac9f8d3c4610d1de94acf9f43b7dbe6ce80a7186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f9:33:bd:31:8d:95:88:5a:f5:21:07:e1:a6:
34:75:a5:67:db:f7:03:99:9d:e1:5a:d5:80:c7:47:
fb:3c:f8:8a:d4:80:3d:0d:2b:f2:9e:65:84:e6:f4:
22:d1:93:7c:af:17:e2:a2:bf:84:82:4f:34:16:a6:
b9:70:df:65:3f:ce:1b:69:ae:54:e2:fa:70:cc:ee:
51:2c:b0:52:5d:f2:d5:56:cf:f6:d2:23:8e:c9:5d:
6a:fb:cb:e6:95:9e:52:2f:cc:cd:28:9c:d6:06:dd:
f3:04:13:1b:03:88:80:ed:a9:9a:65:88:39:a2:0e:
6c:8a:3e:f9:9b:37:cc:d2:d9:4f:05:e2:f8:d3:15:
98:b7:37:03:fe:6e:c1:d7:c1:d2:88:c1:6d:30:b9:
a7:51:19:2c:e6:11:03:dd:e8:e3:f2:9f:72:e9:2c:
96:56:79:34:4e:9b:96:6a:49:7f:85:77:e4:13:90:
91:a9:b5:7c:ae:0d:32:b7:38:58:4d:c4:b3:90:29:
c4:9f:af:8e:c1:23:1d:1e:44:b2:7d:c4:e2:d6:1b:
bf:64:87:87:d3:ab:4f:5e:f6:34:6d:71:41:74:39:
b2:30:ce:c2:a6:1e:4b:26:eb:fb:b7:46:db:99:cc:
19:89:ba:af:af:76:88:5c:41:81:5c:e3:3a:c5:07:
7a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9F:8D:3C:46:10:D1:DE:94:AC:F9:F4:3B:7D:BE:6C:E8:0A:71:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rJ-NPEYQ0d6UrPn0O32-bOgKcYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:f4:ce:93:b2:68:77:95:c4:d6:3b:e4:2d:e3:f9:b7:3b:3c:
5e:6d:00:10:84:d9:da:1f:4c:c8:3b:f3:82:c9:0b:da:25:25:
40:f1:23:f0:00:85:fd:65:d5:2d:28:e0:9c:77:3c:8a:f3:e6:
32:fb:05:8f:ba:7c:d2:9e:43:87:63:ec:89:f6:36:8e:3d:81:
58:43:76:7e:51:8b:28:c5:83:3a:77:b1:34:af:1f:3c:4b:05:
04:b9:a6:15:52:cc:0f:61:f9:7f:e4:e1:0d:17:74:84:06:98:
d3:87:92:a5:b9:4a:ce:ac:04:9e:a1:24:0e:8d:bd:88:c4:ae:
17:cb:0f:9b:5f:2b:83:41:ec:58:e4:04:2f:bf:fa:aa:b4:66:
6a:32:79:65:3c:28:0a:6c:53:96:c6:63:32:2e:b1:08:87:83:
1f:8d:62:79:ac:5c:aa:fa:09:5c:b6:74:be:1c:c8:04:2d:a5:
a9:0c:9a:a0:4b:7f:bb:15:6a:1d:5c:0a:5a:10:4b:bd:a6:f9:
b3:55:e3:17:f7:f2:2c:03:19:f7:5d:9a:80:a6:ec:e8:bc:b2:
42:8d:cb:8a:4e:c2:e5:9e:5e:7b:50:51:4b:9f:45:19:8a:fb:
cf:5f:cc:5f:da:fe:31:01:97:53:9d:a6:e5:c5:3a:93:6a:0c:
be:b6:f1:5d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYncXvdCxey3l+sRATdL2lEkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODA5MjIxNTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzlmOGQzYzQ2MTBkMWRlOTRhY2Y5ZjQzYjdkYmU2Y2U4MGE3MTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPkzvTGNlYha9SEH4aY0daVn2/cD
mZ3hWtWAx0f7PPiK1IA9DSvynmWE5vQi0ZN8rxfior+Egk80Fqa5cN9lP84baa5U
4vpwzO5RLLBSXfLVVs/20iOOyV1q+8vmlZ5SL8zNKJzWBt3zBBMbA4iA7amaZYg5
og5sij75mzfM0tlPBeL40xWYtzcD/m7B18HSiMFtMLmnURks5hED3ejj8p9y6SyW
Vnk0TpuWakl/hXfkE5CRqbV8rg0ytzhYTcSzkCnEn6+OwSMdHkSyfcTi1hu/ZIeH
06tPXvY0bXFBdDmyMM7Cph5LJuv7t0bbmcwZibqvr3aIXEGBXOM6xQd6AQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKyfjTxGENHelKz59Dt9vmzoCnGGMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvckotTlBFWVEwZDZVclBuME8zMi1iT2dLY1lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJ70zpOyaHeVxNY75C3j
+bc7PF5tABCE2dofTMg784LJC9olJUDxI/AAhf1l1S0o4Jx3PIrz5jL7BY+6fNKe
Q4dj7In2No49gVhDdn5RiyjFgzp3sTSvHzxLBQS5phVSzA9h+X/k4Q0XdIQGmNOH
kqW5Ss6sBJ6hJA6NvYjErhfLD5tfK4NB7FjkBC+/+qq0ZmoyeWU8KApsU5bGYzIu
sQiHgx+NYnmsXKr6CVy2dL4cyAQtpakMmqBLf7sVah1cCloQS72m+bNV4xf38iwD
GfddmoCm7Oi8skKNy4pOwuWeXntQUUufRRmK+89fzF/a/jEBl1OdpuXFOpNqDL62
8V0=
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:35:30 2025 by rpki-client