Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6FghByzlNJStGJaIm-JnwO5_-dQ.roa
File: 6FghByzlNJStGJaIm-JnwO5_-dQ.roa (raw, json)
Hash identifier: ioWlG23pro2p88g8x+GFHAvU2zMC5VO8FxUQEbAQImE=
Subject key identifier: E8:58:21:07:2C:E5:34:94:AD:18:96:88:9B:E2:67:C0:EE:7F:F9:D4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184312B91ED3599133751A7548947B385FE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6FghByzlNJStGJaIm-JnwO5_-dQ.roa
Signing time: Tue 01 Nov 2022 03:10:49 +0000
ROA not before: Tue 01 Nov 2022 03:10:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:31:2b:91:ed:35:99:13:37:51:a7:54:89:47:b3:85:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 1 03:10:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e85821072ce53494ad1896889be267c0ee7ff9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cd:af:c4:77:33:0f:9a:7d:87:8a:d4:b9:88:
05:bc:88:c7:35:ee:69:73:73:58:d6:68:1f:e3:cc:
57:fc:fc:f0:71:d9:e1:18:5e:77:60:f3:4a:89:b8:
4d:11:d4:c4:b3:1b:27:d1:f8:00:1c:98:bf:19:09:
21:74:c5:3d:f5:d2:02:e5:cc:3f:c6:84:d8:f7:a3:
7e:bb:03:c7:f2:04:24:fe:fa:e6:9d:de:ac:85:e5:
52:ac:db:ae:d0:33:cb:60:61:0d:59:c9:93:0a:ac:
78:f6:d2:8d:bf:3a:78:73:21:6e:56:89:62:eb:7c:
bc:8d:4f:0a:45:ee:59:de:85:54:af:88:e7:ad:87:
33:e7:36:18:5a:bf:71:f4:e6:d4:4f:8d:92:bf:31:
1b:2c:6c:6d:06:0f:e6:55:d5:f0:f6:5f:d1:34:ed:
e2:bc:93:6f:3c:9b:e1:0a:33:bb:aa:6c:76:bc:2c:
e8:67:e1:02:73:e5:14:f1:14:f8:96:8c:30:34:34:
1a:2a:f1:23:d0:0d:0d:68:2c:0a:82:c0:4d:54:87:
26:de:5c:b0:73:62:4e:6f:82:24:a7:fb:f1:75:18:
03:11:e0:2a:ae:a5:76:48:aa:7b:78:37:a9:06:a1:
a6:cd:78:b9:ba:b8:d3:98:a4:27:8e:84:6d:32:39:
1f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:58:21:07:2C:E5:34:94:AD:18:96:88:9B:E2:67:C0:EE:7F:F9:D4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6FghByzlNJStGJaIm-JnwO5_-dQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:ef:36:17:b2:8b:93:03:47:d3:bc:32:dd:29:80:82:f2:71:
8d:7b:ba:b8:ed:bc:e8:a6:9f:13:55:42:83:e7:2c:95:50:03:
34:ee:51:3f:ee:86:d2:26:23:db:13:55:4f:f9:20:4d:fa:d2:
55:c9:44:71:d4:c3:86:a3:49:b3:99:fb:36:bf:9f:2b:46:a6:
5c:eb:a0:0a:f6:b9:04:f2:ce:0f:a7:68:f6:fb:29:2c:1a:5c:
3f:89:a7:7c:2b:d9:ed:95:25:b3:8a:eb:2f:e5:d6:e5:26:83:
21:de:07:08:22:0e:a9:da:4a:d5:45:bf:0d:41:4d:08:f0:c9:
e4:a2:96:d7:63:67:d5:0a:df:31:d3:cc:6a:80:d3:2a:10:cb:
2d:81:a6:11:51:45:4c:1c:0a:fa:7e:36:d9:78:66:fb:9b:ea:
f6:19:83:df:e8:38:5a:b4:37:78:0d:4c:00:64:5c:85:a9:e9:
a3:da:ea:09:e8:eb:a4:a6:1a:f2:28:a5:a3:42:aa:b5:77:f1:
8e:4b:3f:0c:16:c8:7b:df:60:d2:38:9c:3e:c0:db:05:ff:46:
e5:78:b1:4f:d9:4a:50:73:db:6e:fd:ae:16:b5:44:83:6e:fd:
69:21:1c:3d:72:c0:fc:17:01:42:44:1b:75:f0:91:92:35:87:
18:13:3a:50
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYQxK5HtNZkTN1GnVIlHs4X+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTAxMDMxMDQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODU4MjEwNzJjZTUzNDk0YWQxODk2ODg5YmUyNjdjMGVlN2ZmOWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgc2vxHczD5p9h4rUuYgFvIjHNe5p
c3NY1mgf48xX/PzwcdnhGF53YPNKibhNEdTEsxsn0fgAHJi/GQkhdMU99dIC5cw/
xoTY96N+uwPH8gQk/vrmnd6sheVSrNuu0DPLYGENWcmTCqx49tKNvzp4cyFuVoli
63y8jU8KRe5Z3oVUr4jnrYcz5zYYWr9x9ObUT42SvzEbLGxtBg/mVdXw9l/RNO3i
vJNvPJvhCjO7qmx2vCzoZ+ECc+UU8RT4lowwNDQaKvEj0A0NaCwKgsBNVIcm3lyw
c2JOb4Ikp/vxdRgDEeAqrqV2SKp7eDepBqGmzXi5urjTmKQnjoRtMjkfmQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOhYIQcs5TSUrRiWiJviZ8Duf/nUMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNkZnaEJ5emxOSlN0R0phSW0tSm53TzVfLWRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADzvNheyi5MDR9O8Mt0p
gILycY17urjtvOimnxNVQoPnLJVQAzTuUT/uhtImI9sTVU/5IE360lXJRHHUw4aj
SbOZ+za/nytGplzroAr2uQTyzg+naPb7KSwaXD+Jp3wr2e2VJbOK6y/l1uUmgyHe
BwgiDqnaStVFvw1BTQjwyeSiltdjZ9UK3zHTzGqA0yoQyy2BphFRRUwcCvp+Ntl4
Zvub6vYZg9/oOFq0N3gNTABkXIWp6aPa6gno66SmGvIopaNCqrV38Y5LPwwWyHvf
YNI4nD7A2wX/RuV4sU/ZSlBz2279rha1RINu/WkhHD1ywPwXAUJEG3XwkZI1hxgT
OlA=
-----END CERTIFICATE-----
Generated at Sun May 4 19:02:26 2025 by rpki-client