Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zomhA6d4QPC0VN33y2Hs0cDhvPQ.roa
File: zomhA6d4QPC0VN33y2Hs0cDhvPQ.roa (raw, json)
Hash identifier: ynbTXugf2HQ/Me1/jf8RxuWW2pba3kfepCyvBNnd1f0=
Subject key identifier: CE:89:A1:03:A7:78:40:F0:B4:54:DD:F7:CB:61:EC:D1:C0:E1:BC:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181E8E139B5343B81C98648A65AFB9C52CB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zomhA6d4QPC0VN33y2Hs0cDhvPQ.roa
Signing time: Sun 10 Jul 2022 16:11:23 +0000
ROA not before: Sun 10 Jul 2022 16:11:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e8:e1:39:b5:34:3b:81:c9:86:48:a6:5a:fb:9c:52:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 10 16:11:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce89a103a77840f0b454ddf7cb61ecd1c0e1bcf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:51:47:96:22:07:6b:e1:7c:5b:80:87:23:16:
38:6c:0a:a6:9f:6d:30:57:1a:8d:74:59:e9:4a:1e:
cc:75:ca:90:e3:19:14:85:98:ff:df:f7:b9:a2:e6:
4b:85:f8:b3:bf:ff:60:81:22:c5:a4:75:3a:a2:98:
49:72:04:2f:68:28:f8:f3:b9:a8:ba:63:97:fa:28:
74:bf:48:e7:1b:f7:a5:5d:68:64:ae:7e:e3:dd:59:
21:07:90:cd:4f:89:e9:7d:04:72:b1:a4:40:c9:c7:
a6:26:af:6b:79:36:57:72:ce:2a:69:bc:16:92:50:
c6:13:26:b9:86:ce:a1:84:4f:51:ee:d7:ed:93:a4:
66:9a:4b:a1:11:da:ef:ee:0c:b8:bf:05:c9:57:59:
12:6b:b6:23:b7:d1:e0:31:f7:b7:31:27:d6:6e:a6:
c0:c9:e5:46:56:60:bf:8a:d4:f5:00:6e:7b:10:3f:
94:c3:d9:71:17:c4:50:27:d4:4f:c2:a0:b8:0c:a6:
ce:30:97:63:b1:30:3a:5e:77:a2:29:c6:3e:9f:6b:
8a:d9:f3:e6:43:9e:44:ec:04:36:b4:29:0b:14:ec:
f1:8d:5a:66:66:04:26:8c:c5:fe:a1:45:58:0f:da:
26:63:79:8c:5f:c2:64:9f:e8:40:ec:e4:c8:46:cb:
23:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:89:A1:03:A7:78:40:F0:B4:54:DD:F7:CB:61:EC:D1:C0:E1:BC:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zomhA6d4QPC0VN33y2Hs0cDhvPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:ee:b3:ee:34:de:2a:1c:cd:48:cb:ef:70:27:f4:3a:f8:2f:
cf:14:c1:3f:bd:06:30:84:4e:5e:39:7e:19:14:d4:03:f0:44:
3d:5c:d0:65:37:a2:86:70:48:f9:da:49:63:1d:1a:48:5c:72:
48:cd:3c:98:e0:1a:61:73:0f:63:6d:4e:72:d6:3d:10:89:1a:
ea:ca:37:de:f9:43:d0:50:ca:47:8b:7d:93:09:08:b1:be:4b:
24:4d:c0:6f:c2:68:e1:49:b6:9d:85:ce:c4:84:60:b3:4d:ab:
b3:55:00:01:3f:81:20:22:14:ea:c2:17:b0:eb:03:3d:af:7c:
18:0f:6a:2d:68:84:35:a8:cb:0e:ef:6f:24:46:82:76:06:c4:
06:bc:6c:6a:61:93:d5:66:0c:54:00:7e:be:15:0f:cd:d0:3f:
5f:82:e2:74:8e:f6:22:02:3b:a1:95:71:11:52:90:72:43:7e:
b7:8d:b0:f1:b6:14:7b:33:5b:c5:13:91:7e:ea:0f:e4:a1:ba:
94:1c:31:7a:bc:9d:85:6f:10:f1:a9:57:0c:f8:a1:94:ac:5b:
ee:50:d6:ec:03:12:4c:a7:ff:73:e4:a2:c1:f1:12:84:03:74:
63:90:f8:7e:85:a5:07:b4:1d:1b:df:47:91:6e:af:13:70:b3:
99:d2:7d:ea
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYHo4Tm1NDuByYZIplr7nFLLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzEwMTYxMTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTg5YTEwM2E3Nzg0MGYwYjQ1NGRkZjdjYjYxZWNkMWMwZTFiY2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlFHliIHa+F8W4CHIxY4bAqmn20w
VxqNdFnpSh7MdcqQ4xkUhZj/3/e5ouZLhfizv/9ggSLFpHU6ophJcgQvaCj487mo
umOX+ih0v0jnG/elXWhkrn7j3VkhB5DNT4npfQRysaRAycemJq9reTZXcs4qabwW
klDGEya5hs6hhE9R7tftk6RmmkuhEdrv7gy4vwXJV1kSa7Yjt9HgMfe3MSfWbqbA
yeVGVmC/itT1AG57ED+Uw9lxF8RQJ9RPwqC4DKbOMJdjsTA6XneiKcY+n2uK2fPm
Q55E7AQ2tCkLFOzxjVpmZgQmjMX+oUVYD9omY3mMX8Jkn+hA7OTIRssjAwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFM6JoQOneEDwtFTd98th7NHA4bz0MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvem9taEE2ZDRRUEMwVk4zM3kySHMwY0RodlBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJvus+403ioczUjL73An
9Dr4L88UwT+9BjCETl45fhkU1APwRD1c0GU3ooZwSPnaSWMdGkhcckjNPJjgGmFz
D2NtTnLWPRCJGurKN975Q9BQykeLfZMJCLG+SyRNwG/CaOFJtp2FzsSEYLNNq7NV
AAE/gSAiFOrCF7DrAz2vfBgPai1ohDWoyw7vbyRGgnYGxAa8bGphk9VmDFQAfr4V
D83QP1+C4nSO9iICO6GVcRFSkHJDfreNsPG2FHszW8UTkX7qD+ShupQcMXq8nYVv
EPGpVwz4oZSsW+5Q1uwDEkyn/3PkosHxEoQDdGOQ+H6FpQe0HRvfR5FurxNws5nS
feo=
-----END CERTIFICATE-----
Generated at Tue Jun 10 19:57:47 2025 by rpki-client