Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6SB12O0Z6sa7boG7SSHy6opuXfQ.roa
File: 6SB12O0Z6sa7boG7SSHy6opuXfQ.roa (raw, json)
Hash identifier: ULDhzWroa9Cv9f3FNglb0yDUbgA+0D+H2yBDLrzrtgs=
Subject key identifier: E9:20:75:D8:ED:19:EA:C6:BB:6E:81:BB:49:21:F2:EA:8A:6E:5D:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8FEB026D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6SB12O0Z6sa7boG7SSHy6opuXfQ.roa
Signing time: Sun 26 Jun 2022 06:13:46 +0000
ROA not before: Sun 26 Jun 2022 06:13:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2414543469 (0x8feb026d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 26 06:13:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e92075d8ed19eac6bb6e81bb4921f2ea8a6e5df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a2:0f:73:b3:b8:04:d0:4d:00:ce:ca:c2:9b:
7c:1c:e6:cb:b7:fb:cc:2e:f9:df:dd:b8:85:2e:8d:
29:13:ee:ae:2a:5b:77:8b:a1:44:98:71:2c:a1:a9:
f0:5d:99:1c:f3:1b:8b:a0:e4:46:29:5c:49:06:6f:
de:6e:3e:e0:93:92:56:81:85:03:61:89:db:f8:ad:
a4:c1:6e:f7:a6:2f:ab:7b:d5:74:ca:c7:8d:a7:55:
06:bb:f5:15:73:e5:5a:11:f0:c0:50:21:4f:58:41:
20:6f:9a:c5:58:5a:d8:85:f3:3b:01:1c:7a:fc:16:
d3:2f:df:73:c4:e3:fd:c1:17:a6:24:a2:22:1c:6d:
1d:57:76:03:80:9e:66:6f:df:7b:61:9d:37:cb:5a:
b2:af:50:3f:96:71:4c:a6:84:e6:7e:40:eb:53:98:
17:66:6f:96:3b:52:54:f7:59:12:eb:4e:32:c6:ab:
6a:41:da:e4:9d:ae:46:bb:39:4a:0a:03:d1:c4:95:
a5:33:9f:26:2c:c8:eb:c9:20:3e:fd:a5:df:9f:cd:
d2:9e:b3:1a:bc:ce:45:ad:7b:60:93:6d:47:e7:31:
24:9f:79:1f:4f:59:be:e2:6b:93:47:8a:69:f0:a3:
d5:cb:a6:11:9f:8a:6d:b6:08:f5:0e:8c:f2:23:74:
6e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:20:75:D8:ED:19:EA:C6:BB:6E:81:BB:49:21:F2:EA:8A:6E:5D:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6SB12O0Z6sa7boG7SSHy6opuXfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:7a:b9:dc:09:f5:b7:f5:4c:4f:81:0c:49:b9:5f:db:7f:ce:
1b:8b:43:81:b2:14:06:dd:20:48:53:9a:53:07:3e:f9:84:27:
5b:05:e8:e3:3d:cc:44:54:38:e6:02:ed:a1:c2:d6:53:04:0b:
83:78:05:d5:08:69:fd:a2:3a:87:b9:c0:6c:e7:24:11:c6:a7:
b3:fd:e1:3c:29:ea:bc:4c:9b:e6:0d:97:b8:4a:90:b9:29:13:
b0:99:e4:5f:17:10:23:14:7c:a3:c1:15:5b:79:ed:96:66:7d:
79:75:dc:6b:90:7d:e8:ae:c2:41:18:d1:a3:cc:b6:b6:8c:16:
a4:a9:4f:a8:0c:35:06:f7:c2:96:97:2f:a2:50:ba:1f:85:66:
f3:fa:41:1b:90:59:e5:10:d3:78:c7:aa:dd:7d:98:3c:7a:7d:
a1:20:2a:73:87:fe:54:c3:9d:a0:53:02:2c:e0:c2:00:7e:bb:
26:28:2a:d3:76:1a:c0:5b:f8:f4:57:6c:1f:bb:9c:fc:c4:ce:
6d:ba:f6:f1:10:ce:79:b2:d7:50:df:49:0b:d8:ff:1b:31:2e:
db:f3:ba:c5:ed:23:d1:e1:24:62:bd:fe:48:b9:e0:65:6e:a4:
3d:ae:34:9e:12:41:c5:34:bf:3e:05:e4:17:a9:3a:91:cc:ce:
e3:ec:9a:09
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAI/rAm0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MjYwNjEzNDZaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGU5MjA3NWQ4ZWQx
OWVhYzZiYjZlODFiYjQ5MjFmMmVhOGE2ZTVkZjQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCDog9zs7gE0E0AzsrCm3wc5su3+8wu+d/duIUujSkT7q4q
W3eLoUSYcSyhqfBdmRzzG4ug5EYpXEkGb95uPuCTklaBhQNhidv4raTBbvemL6t7
1XTKx42nVQa79RVz5VoR8MBQIU9YQSBvmsVYWtiF8zsBHHr8FtMv33PE4/3BF6Yk
oiIcbR1XdgOAnmZv33thnTfLWrKvUD+WcUymhOZ+QOtTmBdmb5Y7UlT3WRLrTjLG
q2pB2uSdrka7OUoKA9HElaUznyYsyOvJID79pd+fzdKesxq8zkWte2CTbUfnMSSf
eR9PWb7ia5NHimnwo9XLphGfim22CPUOjPIjdG4lAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQU6SB12O0Z6sa7boG7SSHy6opuXfQwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS82U0IxMk8wWjZzYTdib0c3U1NIeTZvcHVYZlEucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAenq53An1t/VMT4EMSblf23/OG4tDgbIUBt0g
SFOaUwc++YQnWwXo4z3MRFQ45gLtocLWUwQLg3gF1Qhp/aI6h7nAbOckEcans/3h
PCnqvEyb5g2XuEqQuSkTsJnkXxcQIxR8o8EVW3ntlmZ9eXXca5B96K7CQRjRo8y2
towWpKlPqAw1BvfClpcvolC6H4Vm8/pBG5BZ5RDTeMeq3X2YPHp9oSAqc4f+VMOd
oFMCLODCAH67Jigq03YawFv49FdsH7uc/MTObbr28RDOebLXUN9JC9j/GzEu2/O6
xe0j0eEkYr3+SLngZW6kPa40nhJBxTS/PgXkF6k6kczO4+yaCQ==
-----END CERTIFICATE-----
Generated at Fri May 2 04:20:41 2025 by rpki-client