Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u6z9CHpYfrrVq7lj3ePk_HzbjF8.roa
File: u6z9CHpYfrrVq7lj3ePk_HzbjF8.roa (raw, json)
Hash identifier: JVP4yJtrS8FVG3RuJZ//hSALBDgwtBcdYNepmkWBggM=
Subject key identifier: BB:AC:FD:08:7A:58:7E:BA:D5:AB:B9:63:DD:E3:E4:FC:7C:DB:8C:5F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A45343F35AFE18D3432A55FF1D0A4C66
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u6z9CHpYfrrVq7lj3ePk_HzbjF8.roa
Signing time: Sun 30 Jul 2023 01:04:27 +0000
ROA not before: Sun 30 Jul 2023 01:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:189:a453:20df/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a4:53:43:f3:5a:fe:18:d3:43:2a:55:ff:1d:0a:4c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 30 01:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbacfd087a587ebad5abb963dde3e4fc7cdb8c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:05:d0:87:03:df:1e:a9:10:27:66:c2:19:11:
25:f2:e6:e3:7e:29:2d:67:da:ff:ca:6f:b1:09:c1:
f5:ef:3a:b0:f7:73:3f:c3:84:f1:84:04:f5:77:30:
cb:37:39:76:34:d6:4b:43:23:8a:db:96:21:b4:ab:
17:4e:98:c5:31:9e:f9:f4:5b:e3:03:1d:aa:84:f3:
17:67:8d:94:9a:d0:19:73:11:2e:a7:c0:ee:bd:40:
1a:a5:80:bc:66:c0:fa:3f:88:68:78:ed:fe:59:0a:
f8:54:e7:7c:3c:47:83:70:08:80:5f:08:f6:20:8b:
eb:98:9c:34:0b:21:75:21:95:6f:c7:90:fd:15:da:
75:37:99:96:6e:d6:53:7d:d5:a8:99:22:3a:75:7f:
c4:ae:2c:ca:d8:b5:31:09:ae:7c:3d:14:26:32:68:
3b:4e:8a:8b:a6:4a:7d:a6:44:71:d9:01:46:5a:1b:
f1:b1:b3:4a:40:df:4e:e6:2a:de:76:5c:da:99:4b:
82:a6:ad:ef:20:27:9c:05:b0:cd:c2:7c:98:06:6f:
9f:21:66:e6:2e:95:12:8f:8c:ae:b0:d8:6c:70:7c:
75:93:ab:63:47:a4:0b:db:ea:92:26:fb:39:fe:ea:
70:84:e3:1a:13:db:27:ce:63:3e:2f:0f:7c:78:26:
c8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AC:FD:08:7A:58:7E:BA:D5:AB:B9:63:DD:E3:E4:FC:7C:DB:8C:5F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u6z9CHpYfrrVq7lj3ePk_HzbjF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:ae:d9:c5:dd:9d:b0:c8:23:ae:9e:0a:fd:e8:05:a5:3d:8e:
f4:29:45:c2:fe:59:24:22:71:db:39:4e:55:34:6a:3c:01:67:
bc:a5:17:31:f1:03:72:a4:a5:0e:68:97:60:d9:43:d6:db:8b:
27:80:f7:4c:99:f2:42:ea:aa:06:50:e5:08:0f:e2:45:72:e4:
ea:57:09:d3:92:8f:77:fc:41:d4:f8:0f:5a:c8:c1:0b:b1:33:
6d:e2:f3:82:1f:fb:d2:5d:52:e9:cf:80:04:4b:6c:7e:d7:4e:
f1:95:0a:d6:7e:96:31:e1:b9:46:85:12:f5:da:7f:19:17:49:
6c:5c:d4:e8:d9:13:94:ce:4c:ac:17:15:41:0c:37:37:a7:45:
66:c4:53:61:f7:ee:ac:a8:7b:10:86:ac:90:1d:3a:34:c0:3c:
48:74:b8:4a:a5:7c:7c:b7:55:fe:7c:a6:e5:e8:38:41:2c:a8:
95:c9:06:89:ac:19:59:eb:98:3b:3b:33:e5:24:52:75:81:48:
4c:9d:40:11:3c:6a:5a:08:15:b6:30:ac:b9:15:b0:5a:e9:fb:
d6:9c:87:1b:38:b8:a9:24:17:60:78:06:59:14:10:8c:8b:b5:
56:d8:68:be:aa:25:36:b0:65:fa:1c:28:fe:16:5c:ab:c9:51:
4d:ad:24:7f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmkU0PzWv4Y00MqVf8dCkxmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzMwMDEwNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmFjZmQwODdhNTg3ZWJhZDVhYmI5NjNkZGUzZTRmYzdjZGI4YzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwXQhwPfHqkQJ2bCGREl8ubjfikt
Z9r/ym+xCcH17zqw93M/w4TxhAT1dzDLNzl2NNZLQyOK25YhtKsXTpjFMZ759Fvj
Ax2qhPMXZ42UmtAZcxEup8DuvUAapYC8ZsD6P4hoeO3+WQr4VOd8PEeDcAiAXwj2
IIvrmJw0CyF1IZVvx5D9Fdp1N5mWbtZTfdWomSI6dX/ErizK2LUxCa58PRQmMmg7
ToqLpkp9pkRx2QFGWhvxsbNKQN9O5iredlzamUuCpq3vICecBbDNwnyYBm+fIWbm
LpUSj4yusNhscHx1k6tjR6QL2+qSJvs5/upwhOMaE9snzmM+Lw98eCbIKwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLus/Qh6WH661au5Y93j5Px824xfMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdTZ6OUNIcFlmcnJWcTdsajNlUGtfSHpiakY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHeu2cXdnbDII66eCv3o
BaU9jvQpRcL+WSQicds5TlU0ajwBZ7ylFzHxA3KkpQ5ol2DZQ9bbiyeA90yZ8kLq
qgZQ5QgP4kVy5OpXCdOSj3f8QdT4D1rIwQuxM23i84If+9JdUunPgARLbH7XTvGV
CtZ+ljHhuUaFEvXafxkXSWxc1OjZE5TOTKwXFUEMNzenRWbEU2H37qyoexCGrJAd
OjTAPEh0uEqlfHy3Vf58puXoOEEsqJXJBomsGVnrmDs7M+UkUnWBSEydQBE8aloI
FbYwrLkVsFrp+9achxs4uKkkF2B4BlkUEIyLtVbYaL6qJTawZfocKP4WXKvJUU2t
JH8=
-----END CERTIFICATE-----
Generated at Tue Jun 10 15:38:12 2025 by rpki-client