Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sHPGe6O9R3kITIYmxQX_88LEvjU.roa
File: sHPGe6O9R3kITIYmxQX_88LEvjU.roa (raw, json)
Hash identifier: TdX5th4V52UMAFlB+07XPFCqzks+zbfy9QUjhCIbIbI=
Subject key identifier: B0:73:C6:7B:A3:BD:47:79:08:4C:86:26:C5:05:FF:F3:C2:C4:BE:35
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E113CE85761308C985B428BC15B2C858
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sHPGe6O9R3kITIYmxQX_88LEvjU.roa
Signing time: Thu 10 Aug 2023 20:11:58 +0000
ROA not before: Thu 10 Aug 2023 20:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e1:13:ce:85:76:13:08:c9:85:b4:28:bc:15:b2:c8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 20:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b073c67ba3bd4779084c8626c505fff3c2c4be35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bb:c4:f4:8d:e0:23:88:35:09:77:c7:4d:f7:
b9:39:c0:4c:15:74:3f:14:7d:8f:2c:21:20:88:fb:
b8:d8:46:d3:1c:50:75:3e:ee:4e:77:e8:fd:44:f7:
fd:69:2e:08:5e:26:0d:27:dc:fd:3d:e6:d1:db:10:
b8:5d:84:dc:ca:14:b4:8e:d7:96:a7:4a:c3:b5:34:
d2:09:ef:2b:f6:8e:93:b6:43:08:3f:7e:d1:26:e6:
98:83:0c:f4:75:d1:3f:b9:63:db:eb:fd:6e:66:1b:
86:2a:54:b8:59:b6:5a:08:51:81:57:34:d7:e3:9c:
ae:2b:24:d4:2d:21:64:60:96:8e:01:40:7c:84:f9:
47:2d:0a:60:d4:0b:c6:68:42:bb:c3:20:13:e2:e8:
ae:02:71:04:e1:1a:0b:17:60:4e:db:90:68:1a:20:
17:81:92:a2:15:50:2b:99:c2:1d:a5:93:5b:07:6f:
5d:9d:13:82:7b:22:14:36:f6:c4:5d:3c:0b:66:df:
a8:c0:2e:23:f1:35:ac:d5:15:30:c2:7c:79:d0:fe:
29:97:c7:09:1a:9c:0c:df:0b:85:e9:65:3c:a9:69:
ba:84:ec:ef:cc:f0:c0:b8:d4:70:5f:41:0c:56:33:
d8:46:9d:23:f0:3a:23:e3:e0:c0:e3:05:2a:a7:c0:
a4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:73:C6:7B:A3:BD:47:79:08:4C:86:26:C5:05:FF:F3:C2:C4:BE:35
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sHPGe6O9R3kITIYmxQX_88LEvjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:43:eb:14:d5:71:11:cc:13:3a:e4:eb:c7:2d:18:e6:51:8c:
b1:5c:eb:7e:d1:6c:93:fe:71:1b:ce:ca:25:1e:81:7c:3c:fe:
43:5b:47:81:74:cc:43:2e:4d:7b:e3:92:c9:9c:8f:a0:ec:99:
95:ff:cd:ce:d6:c9:a0:6e:da:dd:38:1b:9a:b0:65:10:b4:01:
8b:51:2c:42:1b:a9:a6:ae:f9:29:32:ea:ef:43:0c:ec:94:af:
ec:6f:eb:3a:43:d2:05:fc:ec:d3:3c:ee:76:85:44:5b:03:f7:
0d:53:13:12:f2:6d:8e:ca:0c:26:df:05:c4:38:fb:14:6a:1b:
1e:e5:e3:6a:06:34:ce:30:bc:c3:1d:7c:51:89:78:63:85:66:
95:58:fd:2c:b7:3b:51:6b:9c:c6:e3:3a:4d:69:26:3e:ab:ee:
ec:5e:fc:60:97:61:c1:d7:ff:3a:a5:47:33:ba:36:be:dc:87:
8d:d0:24:71:93:fb:d5:7e:b3:72:6c:a5:e9:a7:86:55:1b:ef:
54:74:76:01:fa:fa:86:97:45:16:ac:1f:55:fe:48:76:62:2c:
11:e3:5c:75:71:a8:94:a4:09:67:9b:3f:ef:d7:53:2a:81:fb:
2d:94:0e:dd:6a:0e:7f:47:19:92:24:27:9f:ca:93:db:ac:11:
89:e1:76:10
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnhE86FdhMIyYW0KLwVsshYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODEwMjAxMTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDczYzY3YmEzYmQ0Nzc5MDg0Yzg2MjZjNTA1ZmZmM2MyYzRiZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7vE9I3gI4g1CXfHTfe5OcBMFXQ/
FH2PLCEgiPu42EbTHFB1Pu5Od+j9RPf9aS4IXiYNJ9z9PebR2xC4XYTcyhS0jteW
p0rDtTTSCe8r9o6TtkMIP37RJuaYgwz0ddE/uWPb6/1uZhuGKlS4WbZaCFGBVzTX
45yuKyTULSFkYJaOAUB8hPlHLQpg1AvGaEK7wyAT4uiuAnEE4RoLF2BO25BoGiAX
gZKiFVArmcIdpZNbB29dnROCeyIUNvbEXTwLZt+owC4j8TWs1RUwwnx50P4pl8cJ
GpwM3wuF6WU8qWm6hOzvzPDAuNRwX0EMVjPYRp0j8Doj4+DA4wUqp8Ck3wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLBzxnujvUd5CEyGJsUF//PCxL41MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvc0hQR2U2TzlSM2tJVElZbXhRWF84OExFdmpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKFD6xTVcRHMEzrk68ct
GOZRjLFc637RbJP+cRvOyiUegXw8/kNbR4F0zEMuTXvjksmcj6DsmZX/zc7WyaBu
2t04G5qwZRC0AYtRLEIbqaau+Sky6u9DDOyUr+xv6zpD0gX87NM87naFRFsD9w1T
ExLybY7KDCbfBcQ4+xRqGx7l42oGNM4wvMMdfFGJeGOFZpVY/Sy3O1FrnMbjOk1p
Jj6r7uxe/GCXYcHX/zqlRzO6Nr7ch43QJHGT+9V+s3JspemnhlUb71R0dgH6+oaX
RRasH1X+SHZiLBHjXHVxqJSkCWebP+/XUyqB+y2UDt1qDn9HGZIkJ5/Kk9usEYnh
dhA=
-----END CERTIFICATE-----
Generated at Wed Jun 11 09:41:08 2025 by rpki-client