Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sPtGkqdeZrAqcny2EOD1hTl7498.roa
File: sPtGkqdeZrAqcny2EOD1hTl7498.roa (raw, json)
Hash identifier: Ja2FGGa6R4WC8lJvqTYyWDDTSB9SeWIsKUF4NA5zHpg=
Subject key identifier: B0:FB:46:92:A7:5E:66:B0:2A:72:7C:B6:10:E0:F5:85:39:7B:E3:DF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018455ACB658A77D8439E7CA55B248E259D6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sPtGkqdeZrAqcny2EOD1hTl7498.roa
Signing time: Tue 08 Nov 2022 05:18:12 +0000
ROA not before: Tue 08 Nov 2022 05:18:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:55:ac:b6:58:a7:7d:84:39:e7:ca:55:b2:48:e2:59:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 8 05:18:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0fb4692a75e66b02a727cb610e0f585397be3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:38:5c:03:e0:35:fb:78:f9:8b:d5:0c:69:
12:49:c6:d2:ad:0b:d0:27:b7:df:26:77:6c:08:f1:
8c:83:71:2b:ff:f0:76:66:86:bd:c3:f0:6a:e3:84:
60:14:22:6c:1e:28:d7:d4:52:40:80:19:40:62:80:
0b:ce:5b:8d:ed:8d:84:70:78:99:75:22:fe:78:67:
11:11:7c:d1:80:46:2f:8a:c3:0b:09:68:2d:a0:cc:
f4:a1:bc:2a:9a:1f:6c:45:78:56:75:41:df:b3:6e:
e6:df:bc:29:b9:b9:f1:57:37:87:76:b5:41:7e:19:
b7:fe:f1:31:c0:95:29:8f:b0:78:9a:77:66:39:be:
c0:54:43:ab:62:8d:b9:bc:d9:e3:29:33:7a:31:2e:
0d:2e:f7:96:13:23:07:fe:0d:9f:f6:ef:63:7a:66:
62:a0:c4:fa:cd:fe:5e:49:a8:4e:45:59:99:e6:2b:
fb:ed:c8:92:64:cd:eb:3e:9c:28:0d:19:19:dc:bc:
c0:75:87:0d:dc:95:73:db:46:56:33:f3:ff:5f:54:
6f:01:92:f9:4d:41:c4:79:dc:75:30:4b:18:8a:dc:
ee:ab:c1:11:40:c7:83:9f:a2:f8:fa:f2:12:51:e4:
7b:a2:8a:75:4f:31:55:16:25:b4:8b:49:d7:3f:34:
5b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FB:46:92:A7:5E:66:B0:2A:72:7C:B6:10:E0:F5:85:39:7B:E3:DF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sPtGkqdeZrAqcny2EOD1hTl7498.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:0f:75:66:04:73:03:10:06:95:fc:d6:20:c9:4a:21:e6:2f:
96:48:ab:9f:ab:a5:15:42:53:ca:04:6b:be:ee:50:27:24:7e:
16:7f:10:94:bd:1c:1b:e4:b8:c6:bf:61:59:c6:db:8a:75:b6:
9e:70:a6:b9:f2:5d:35:dc:11:1e:98:9b:eb:b9:be:a9:e2:2f:
1e:9e:4a:eb:b1:9a:aa:18:00:f8:14:44:8b:00:ec:dc:62:42:
f4:02:2f:41:a3:01:f9:a0:77:63:0a:be:ed:33:80:48:64:28:
e5:f1:a6:ee:e8:6d:6b:e1:8b:68:51:53:1b:d3:88:64:bf:8c:
26:9e:d1:c8:3a:3d:62:15:75:5e:a7:ef:6f:81:b8:35:e3:26:
a7:78:14:4c:2b:91:2b:31:af:1a:45:cd:22:7a:48:36:08:ea:
0f:1b:69:22:60:e1:cb:7d:9a:2e:60:85:3c:4b:b6:aa:8b:e2:
9d:0d:ef:cd:6d:90:ee:24:22:5e:a0:0b:5d:a9:0d:6d:c2:3c:
95:4e:37:41:11:ca:ea:45:f8:c3:e1:77:4f:42:ed:17:7e:73:
08:ae:24:32:92:4a:6a:6b:95:e1:b2:98:c1:66:e7:39:18:be:
90:a9:71:fd:25:37:51:79:22:8c:da:e0:bc:9f:0e:78:87:9c:
3a:7a:aa:cc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYRVrLZYp32EOefKVbJI4lnWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTA4MDUxODEyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGZiNDY5MmE3NWU2NmIwMmE3MjdjYjYxMGUwZjU4NTM5N2JlM2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1Q4XAPgNft4+YvVDGkSScbSrQvQ
J7ffJndsCPGMg3Er//B2Zoa9w/Bq44RgFCJsHijX1FJAgBlAYoALzluN7Y2EcHiZ
dSL+eGcREXzRgEYvisMLCWgtoMz0obwqmh9sRXhWdUHfs27m37wpubnxVzeHdrVB
fhm3/vExwJUpj7B4mndmOb7AVEOrYo25vNnjKTN6MS4NLveWEyMH/g2f9u9jemZi
oMT6zf5eSahORVmZ5iv77ciSZM3rPpwoDRkZ3LzAdYcN3JVz20ZWM/P/X1RvAZL5
TUHEedx1MEsYitzuq8ERQMeDn6L4+vISUeR7oop1TzFVFiW0i0nXPzRbNQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLD7RpKnXmawKnJ8thDg9YU5e+PfMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvc1B0R2txZGVackFxY255MkVPRDFoVGw3NDk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAD0PdWYEcwMQBpX81iDJ
SiHmL5ZIq5+rpRVCU8oEa77uUCckfhZ/EJS9HBvkuMa/YVnG24p1tp5wprnyXTXc
ER6Ym+u5vqniLx6eSuuxmqoYAPgURIsA7NxiQvQCL0GjAfmgd2MKvu0zgEhkKOXx
pu7obWvhi2hRUxvTiGS/jCae0cg6PWIVdV6n72+BuDXjJqd4FEwrkSsxrxpFzSJ6
SDYI6g8baSJg4ct9mi5ghTxLtqqL4p0N781tkO4kIl6gC12pDW3CPJVON0ERyupF
+MPhd09C7Rd+cwiuJDKSSmprleGymMFm5zkYvpCpcf0lN1F5Ioza4LyfDniHnDp6
qsw=
-----END CERTIFICATE-----
Generated at Thu Jun 12 09:48:42 2025 by rpki-client