Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6M_Yruy2MsAvAohjTgWzn92wwzc.roa
File: 6M_Yruy2MsAvAohjTgWzn92wwzc.roa (raw, json)
Hash identifier: +ZbbCNQMmET9CUFnZ0DUB32KIVv5inH4qGZRozR4uHE=
Subject key identifier: E8:CF:D8:AE:EC:B6:32:C0:2F:02:88:63:4E:05:B3:9F:DD:B0:C3:37
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181FFD5CA7A466CB9E0B524846E93672535
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6M_Yruy2MsAvAohjTgWzn92wwzc.roa
Signing time: Fri 15 Jul 2022 03:10:09 +0000
ROA not before: Fri 15 Jul 2022 03:10:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ff:d5:ca:7a:46:6c:b9:e0:b5:24:84:6e:93:67:25:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 15 03:10:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8cfd8aeecb632c02f0288634e05b39fddb0c337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:36:08:a5:b3:30:94:c1:c2:c8:7f:4b:4a:92:
2c:8d:40:b4:41:af:f8:cd:ec:7c:3f:89:d9:a7:b1:
a8:9c:2a:9b:c0:0f:ee:a1:eb:ce:f0:d8:9b:91:d4:
e1:42:59:aa:a8:42:1e:8d:f1:32:c8:f4:ea:c4:8a:
49:44:34:8f:99:32:7f:08:31:97:82:05:b8:d3:03:
82:f1:a4:ab:49:b9:b9:6f:4b:27:60:d3:d6:84:5e:
43:92:70:5d:85:dc:d4:6c:62:29:f7:44:11:2d:96:
b6:8e:06:31:4a:82:dc:c8:23:a3:12:c8:30:a4:c0:
28:c9:23:6a:94:19:7a:c8:81:61:97:0f:98:9c:e4:
b0:eb:76:1a:a5:55:6a:fe:06:6e:d3:75:f0:26:e5:
8a:3d:9f:26:03:9e:2a:a6:32:2c:57:d5:55:fb:f5:
9e:21:c3:a3:73:c8:03:c9:c5:7e:a4:fe:80:75:ca:
6f:c2:bc:fa:76:35:c6:07:24:ba:6c:e1:ad:63:ba:
5f:b3:64:d8:f8:c5:fd:44:5d:f7:7c:b3:46:45:8c:
bc:46:96:16:9d:cc:b9:9f:e5:ea:03:37:5b:59:81:
e6:cc:58:e2:73:42:e8:a1:ef:73:d2:3b:2d:01:c3:
a8:03:be:a2:04:b6:e6:49:d0:13:d6:45:ca:2d:e8:
10:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CF:D8:AE:EC:B6:32:C0:2F:02:88:63:4E:05:B3:9F:DD:B0:C3:37
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6M_Yruy2MsAvAohjTgWzn92wwzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:8b:b4:bb:ef:79:af:64:e2:08:5a:2f:23:c4:98:b2:87:ff:
71:90:3c:f4:50:de:8e:de:b9:06:ee:fd:ea:77:48:c3:de:d4:
83:87:79:13:fa:48:44:4d:fa:95:79:f1:5a:3e:02:bd:10:6f:
0e:8f:4c:06:51:ad:45:e1:dd:c3:1b:6f:5f:13:98:d6:0b:6d:
3c:a5:c5:1d:72:e7:5f:11:ab:77:67:f2:c3:04:e9:69:23:75:
a3:58:28:23:cc:70:5f:e8:3c:52:3f:01:25:c5:21:7b:99:6e:
88:f6:b9:50:c3:2a:b4:f3:d6:20:86:6f:32:2b:e5:f5:12:9e:
18:53:f0:0f:49:d5:e8:2f:88:92:c4:a5:5f:4a:c7:3d:d1:91:
75:01:5e:81:e5:c8:1a:39:e3:67:b6:56:c1:d8:2e:80:48:64:
20:90:ab:6c:38:51:86:b7:5b:cd:0d:d5:18:9e:38:ee:e1:4a:
44:53:0a:76:43:4c:34:6a:c8:3b:30:61:a7:7e:dd:04:2a:08:
99:75:40:3a:d6:c8:23:94:72:ec:8b:e6:f3:cc:ae:02:ea:84:
6a:5d:c3:fe:34:da:68:ac:01:5b:cf:7d:13:13:dd:c2:b5:05:
fb:0d:b5:72:d9:f6:29:2c:f2:77:0b:dc:57:93:b3:0e:a9:4b:
80:04:82:38
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYH/1cp6Rmy54LUkhG6TZyU1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzE1MDMxMDA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGNmZDhhZWVjYjYzMmMwMmYwMjg4NjM0ZTA1YjM5ZmRkYjBjMzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzYIpbMwlMHCyH9LSpIsjUC0Qa/4
zex8P4nZp7GonCqbwA/uoevO8NibkdThQlmqqEIejfEyyPTqxIpJRDSPmTJ/CDGX
ggW40wOC8aSrSbm5b0snYNPWhF5DknBdhdzUbGIp90QRLZa2jgYxSoLcyCOjEsgw
pMAoySNqlBl6yIFhlw+YnOSw63YapVVq/gZu03XwJuWKPZ8mA54qpjIsV9VV+/We
IcOjc8gDycV+pP6Adcpvwrz6djXGByS6bOGtY7pfs2TY+MX9RF33fLNGRYy8RpYW
ncy5n+XqAzdbWYHmzFjic0Looe9z0jstAcOoA76iBLbmSdAT1kXKLegQowIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOjP2K7stjLALwKIY04Fs5/dsMM3MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNk1fWXJ1eTJNc0F2QW9oalRnV3puOTJ3d3pjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFiLtLvvea9k4ghaLyPE
mLKH/3GQPPRQ3o7euQbu/ep3SMPe1IOHeRP6SERN+pV58Vo+Ar0Qbw6PTAZRrUXh
3cMbb18TmNYLbTylxR1y518Rq3dn8sME6WkjdaNYKCPMcF/oPFI/ASXFIXuZboj2
uVDDKrTz1iCGbzIr5fUSnhhT8A9J1egviJLEpV9Kxz3RkXUBXoHlyBo542e2VsHY
LoBIZCCQq2w4UYa3W80N1RieOO7hSkRTCnZDTDRqyDswYad+3QQqCJl1QDrWyCOU
cuyL5vPMrgLqhGpdw/402misAVvPfRMT3cK1BfsNtXLZ9iks8ncL3FeTsw6pS4AE
gjg=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:23 2025 by rpki-client