Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t9QAHRqdLZTdEvCVzEDvEGsJacc.roa
File: t9QAHRqdLZTdEvCVzEDvEGsJacc.roa (raw, json)
Hash identifier: aJ6LBys9qR+CVOKbAdrKYZRF2VNUPFfwMaGVPsuYJh8=
Subject key identifier: B7:D4:00:1D:1A:9D:2D:94:DD:12:F0:95:CC:40:EF:10:6B:09:69:C7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01837D25BC542A4C627C70E96B9E372C57D8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t9QAHRqdLZTdEvCVzEDvEGsJacc.roa
Signing time: Tue 27 Sep 2022 04:12:48 +0000
ROA not before: Tue 27 Sep 2022 04:12:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7d:25:bc:54:2a:4c:62:7c:70:e9:6b:9e:37:2c:57:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 27 04:12:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7d4001d1a9d2d94dd12f095cc40ef106b0969c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b0:45:d8:c7:f5:5e:38:a1:0a:e5:d2:4f:fe:
c2:dc:86:6d:57:72:0e:b4:a4:1e:5d:24:d4:16:41:
d8:9d:a7:db:f0:33:e9:8d:7c:d9:92:cd:e9:e3:d4:
cf:bf:71:c1:11:e7:1c:5d:d3:c4:b3:62:40:fb:e7:
dc:f4:2b:35:0f:67:41:a9:ed:01:a7:97:d7:38:33:
59:31:e0:70:ca:70:de:52:c7:6f:9a:42:4b:03:e2:
3f:6c:77:30:9a:e3:0a:b6:50:38:71:b6:c2:f8:5a:
e7:fe:98:da:9b:91:0a:db:56:e6:cc:b8:db:fb:f1:
f4:ab:4b:d2:1b:8f:c9:15:fb:85:c9:70:c5:a1:3a:
b4:1a:a2:18:cf:99:59:1b:b2:f1:df:c3:6b:fe:4e:
55:87:f8:90:24:32:fc:84:7a:34:81:2c:70:a3:f3:
d2:69:72:b5:2e:8c:be:99:5a:81:69:54:d7:5b:d3:
f9:44:18:67:fa:3f:fe:09:af:ee:44:46:9d:81:fa:
3f:d9:86:b8:a0:39:e3:80:19:98:56:67:58:16:b0:
d7:e3:1c:c9:9e:65:81:41:e0:2c:3c:4c:0c:70:91:
82:67:e5:a4:4a:d3:87:e6:b2:97:6c:c8:d3:14:49:
7c:58:3d:67:ba:8b:65:b5:7f:7f:0e:33:8a:bf:55:
47:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D4:00:1D:1A:9D:2D:94:DD:12:F0:95:CC:40:EF:10:6B:09:69:C7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t9QAHRqdLZTdEvCVzEDvEGsJacc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:54:85:f3:5a:51:0a:41:e6:5a:b7:03:6f:31:e6:91:ff:77:
19:96:79:9c:02:a0:d9:b0:a4:91:94:ea:e8:1a:b3:c0:a7:f3:
99:47:93:90:29:58:b7:d7:f9:67:9d:6f:20:9c:b6:0c:26:b0:
c8:b8:b1:15:23:2b:c0:f1:05:24:e7:0a:f2:d3:fd:9c:91:91:
49:89:d7:9e:a9:43:79:49:4b:c2:32:c9:0a:db:02:51:af:44:
2c:04:e7:cc:96:7e:43:96:4a:f4:8a:79:6d:28:f8:1b:a1:46:
58:21:70:c4:09:34:26:d3:a6:40:c4:07:1e:3c:ab:84:49:58:
4e:6f:bc:ea:e8:1d:7b:a6:1a:1a:21:c9:84:b5:64:14:e8:fa:
6b:76:b4:6b:78:96:e7:80:f5:fd:fc:ae:66:81:6c:86:d6:f4:
14:ec:94:d8:ca:a9:e4:2f:4f:30:cc:02:db:2a:79:35:48:61:
39:a5:30:12:9a:52:c7:46:0a:c0:1e:bb:fb:c6:a4:80:cb:07:
c9:bd:32:fd:63:10:8b:34:60:1e:e9:ef:01:13:85:dd:5c:99:
c0:d4:5e:24:b6:e0:cf:a2:cc:ff:09:bf:45:94:09:1f:85:96:
f8:93:60:5e:bc:64:96:a8:4a:ec:2b:10:ac:98:3f:a9:50:bf:
fa:4d:d6:b5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYN9JbxUKkxifHDpa543LFfYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTI3MDQxMjQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2Q0MDAxZDFhOWQyZDk0ZGQxMmYwOTVjYzQwZWYxMDZiMDk2OWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bBF2Mf1XjihCuXST/7C3IZtV3IO
tKQeXSTUFkHYnafb8DPpjXzZks3p49TPv3HBEeccXdPEs2JA++fc9Cs1D2dBqe0B
p5fXODNZMeBwynDeUsdvmkJLA+I/bHcwmuMKtlA4cbbC+Frn/pjam5EK21bmzLjb
+/H0q0vSG4/JFfuFyXDFoTq0GqIYz5lZG7Lx38Nr/k5Vh/iQJDL8hHo0gSxwo/PS
aXK1Loy+mVqBaVTXW9P5RBhn+j/+Ca/uREadgfo/2Ya4oDnjgBmYVmdYFrDX4xzJ
nmWBQeAsPEwMcJGCZ+WkStOH5rKXbMjTFEl8WD1nuotltX9/DjOKv1VH0QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLfUAB0anS2U3RLwlcxA7xBrCWnHMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdDlRQUhScWRMWlRkRXZDVnpFRHZFR3NKYWNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAK1UhfNaUQpB5lq3A28x
5pH/dxmWeZwCoNmwpJGU6ugas8Cn85lHk5ApWLfX+WedbyCctgwmsMi4sRUjK8Dx
BSTnCvLT/ZyRkUmJ156pQ3lJS8IyyQrbAlGvRCwE58yWfkOWSvSKeW0o+BuhRlgh
cMQJNCbTpkDEBx48q4RJWE5vvOroHXumGhohyYS1ZBTo+mt2tGt4lueA9f38rmaB
bIbW9BTslNjKqeQvTzDMAtsqeTVIYTmlMBKaUsdGCsAeu/vGpIDLB8m9Mv1jEIs0
YB7p7wEThd1cmcDUXiS24M+izP8Jv0WUCR+FlviTYF68ZJaoSuwrEKyYP6lQv/pN
1rU=
-----END CERTIFICATE-----
Generated at Wed Jun 11 20:37:34 2025 by rpki-client