Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y708s2tsSEFdfjh8lBnQ3OBeqJk.roa
File: y708s2tsSEFdfjh8lBnQ3OBeqJk.roa (raw, json)
Hash identifier: vKzWXcm260xAKV3JJiem52BBztNCQxFzzVybTnm7sIg=
Subject key identifier: CB:BD:3C:B3:6B:6C:48:41:5D:7E:38:7C:94:19:D0:DC:E0:5E:A8:99
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184DF68AB8F36245E738CB8AB5710BF7BB2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y708s2tsSEFdfjh8lBnQ3OBeqJk.roa
Signing time: Sun 04 Dec 2022 23:11:29 +0000
ROA not before: Sun 04 Dec 2022 23:11:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:df:68:ab:8f:36:24:5e:73:8c:b8:ab:57:10:bf:7b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 4 23:11:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbbd3cb36b6c48415d7e387c9419d0dce05ea899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e5:e0:b2:92:a7:46:6b:66:24:a4:4a:df:01:
ae:14:38:9b:73:95:8e:34:3a:81:f2:e9:53:27:de:
c6:60:62:37:12:f2:d3:4f:20:25:a6:6b:a3:91:2e:
8f:bb:1b:c3:b8:db:2c:49:a3:56:3d:2a:65:f2:01:
dc:0a:b3:d3:29:9b:55:37:51:a3:b5:2d:79:3f:db:
b2:c7:f6:64:bc:58:28:08:14:d7:9b:5d:15:57:ff:
8c:2b:51:6a:5e:9e:d4:b8:03:d3:d7:2e:d8:9e:1a:
cf:37:85:e1:c8:f7:f0:c0:a7:83:b5:d3:23:43:1f:
94:f0:12:11:a7:aa:d3:99:7e:6d:2c:3e:85:55:24:
3c:6e:0e:d8:fd:fd:41:ce:45:49:ea:e9:6d:45:2e:
18:7d:0c:aa:c2:9f:4e:bf:53:5e:07:0c:2f:7f:92:
61:01:c7:d5:8b:75:a0:8e:87:78:2d:b9:89:0a:76:
59:8b:43:ac:c7:56:b3:45:bd:64:59:c9:c6:27:7d:
28:fa:d0:fc:e7:1d:04:69:c2:a2:b9:90:1e:f9:88:
4e:93:e1:94:f8:39:d4:6c:75:07:9e:c7:b2:b5:0b:
bd:74:66:18:1f:ab:5f:0c:5a:59:14:d8:48:bf:2d:
c6:19:78:0f:a7:18:2d:ea:3f:ad:69:a4:59:f4:f5:
c5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BD:3C:B3:6B:6C:48:41:5D:7E:38:7C:94:19:D0:DC:E0:5E:A8:99
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y708s2tsSEFdfjh8lBnQ3OBeqJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:d9:41:e5:fb:7c:3f:2c:27:bc:c1:5c:1b:68:fb:9d:99:0e:
e3:e9:d5:03:56:a4:47:53:98:b4:31:db:f8:08:33:93:d0:17:
9b:e1:78:67:c8:4c:5d:26:b8:71:da:59:4a:42:c3:6f:ba:d8:
50:0e:8e:9f:0e:91:75:63:42:6b:d3:1b:ca:3f:e5:17:97:e6:
55:b5:14:4e:01:9b:19:97:49:8d:e1:96:ed:1f:db:f1:8a:1f:
63:45:b2:96:e5:22:2c:c9:ab:27:58:9c:e1:5a:14:45:b7:34:
7b:dd:05:a0:96:5f:5e:73:b1:a1:32:57:ff:31:74:43:62:ac:
f6:c6:1f:29:34:79:0d:5d:20:f4:1d:87:62:a0:5e:ad:ac:e0:
13:71:af:51:e5:cc:4b:81:cc:d0:d1:0c:5e:cb:69:16:43:22:
8b:b1:24:05:e5:b5:85:90:4d:00:78:05:20:ab:b0:45:2d:aa:
e7:f8:db:12:65:f1:e4:65:56:2e:97:5b:a2:8e:a9:a0:38:3e:
37:db:d7:64:04:4c:16:26:cd:fb:84:34:e3:5e:a0:0b:bc:19:
f7:ea:b7:89:80:39:4e:bd:e5:58:d7:6f:25:58:84:33:af:9e:
25:31:15:72:e5:55:0d:1c:f9:34:30:c1:d2:7f:ae:34:19:72:
05:90:ff:31
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYTfaKuPNiRec4y4q1cQv3uyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjA0MjMxMTI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmJkM2NiMzZiNmM0ODQxNWQ3ZTM4N2M5NDE5ZDBkY2UwNWVhODk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eXgspKnRmtmJKRK3wGuFDibc5WO
NDqB8ulTJ97GYGI3EvLTTyAlpmujkS6PuxvDuNssSaNWPSpl8gHcCrPTKZtVN1Gj
tS15P9uyx/ZkvFgoCBTXm10VV/+MK1FqXp7UuAPT1y7YnhrPN4XhyPfwwKeDtdMj
Qx+U8BIRp6rTmX5tLD6FVSQ8bg7Y/f1BzkVJ6ultRS4YfQyqwp9Ov1NeBwwvf5Jh
AcfVi3Wgjod4LbmJCnZZi0Osx1azRb1kWcnGJ30o+tD85x0EacKiuZAe+YhOk+GU
+DnUbHUHnseytQu9dGYYH6tfDFpZFNhIvy3GGXgPpxgt6j+taaRZ9PXFpwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMu9PLNrbEhBXX44fJQZ0NzgXqiZMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveTcwOHMydHNTRUZkZmpoOGxCblEzT0JlcUprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABHZQeX7fD8sJ7zBXBto
+52ZDuPp1QNWpEdTmLQx2/gIM5PQF5vheGfITF0muHHaWUpCw2+62FAOjp8OkXVj
QmvTG8o/5ReX5lW1FE4BmxmXSY3hlu0f2/GKH2NFspblIizJqydYnOFaFEW3NHvd
BaCWX15zsaEyV/8xdENirPbGHyk0eQ1dIPQdh2KgXq2s4BNxr1HlzEuBzNDRDF7L
aRZDIouxJAXltYWQTQB4BSCrsEUtquf42xJl8eRlVi6XW6KOqaA4Pjfb12QETBYm
zfuENONeoAu8Gffqt4mAOU695VjXbyVYhDOvniUxFXLlVQ0c+TQwwdJ/rjQZcgWQ
/zE=
-----END CERTIFICATE-----
Generated at Wed Jun 11 09:48:04 2025 by rpki-client