Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6a-qAQd2oScbg-pKPSBsNhZ9S9I.roa
File: 6a-qAQd2oScbg-pKPSBsNhZ9S9I.roa (raw, json)
Hash identifier: aYuR30yYz/ZDOWACFIlxe/1dKr2A9WWaX81hq9bCN/A=
Subject key identifier: E9:AF:AA:01:07:76:A1:27:1B:83:EA:4A:3D:20:6C:36:16:7D:4B:D2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01842CABDDDC4AF95D1CF537EE8274C0BEFC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6a-qAQd2oScbg-pKPSBsNhZ9S9I.roa
Signing time: Mon 31 Oct 2022 06:12:51 +0000
ROA not before: Mon 31 Oct 2022 06:12:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2c:ab:dd:dc:4a:f9:5d:1c:f5:37:ee:82:74:c0:be:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 31 06:12:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9afaa010776a1271b83ea4a3d206c36167d4bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:42:c5:64:78:91:0a:9b:1d:2c:8e:64:d4:cf:
bb:36:33:21:6e:dc:1b:49:6e:3c:e6:25:64:48:c7:
a5:4a:48:57:5f:31:02:24:f8:cb:cd:7d:a0:54:7a:
52:35:41:6d:ab:2a:15:f4:3b:ae:65:ea:63:d0:22:
84:b9:db:d5:22:60:85:9a:2a:e4:8a:e7:2e:b7:b1:
24:f4:5c:f7:1a:b5:54:f3:f0:3b:39:9f:b4:61:eb:
c1:cb:cc:5b:3d:e3:20:97:2c:02:16:e3:35:83:14:
6a:7d:11:b9:16:9a:c2:cb:17:86:ed:b9:28:12:4b:
57:07:0c:63:b8:bd:c3:f6:52:b8:67:62:d9:df:ae:
46:65:4e:d5:98:7b:81:80:34:d7:93:1a:37:7f:59:
a8:8b:d1:8c:1c:59:40:b7:20:e8:57:9e:dc:e6:1d:
c2:c9:f8:12:9c:c8:4c:9a:d6:5c:b6:3e:86:ee:95:
96:20:49:a8:3c:8c:82:51:da:42:b4:63:0e:0e:d3:
f6:c9:37:67:7b:3c:66:51:6e:5e:a7:07:da:b4:08:
60:9f:5c:2c:0c:0f:7f:4b:fa:14:fb:68:7b:ba:91:
03:12:46:cd:30:98:5b:2e:7e:db:91:a9:b2:d6:0c:
cd:12:09:02:45:8d:e0:44:77:cf:2f:03:61:06:1c:
44:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AF:AA:01:07:76:A1:27:1B:83:EA:4A:3D:20:6C:36:16:7D:4B:D2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6a-qAQd2oScbg-pKPSBsNhZ9S9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:ec:0b:fa:6a:be:a7:13:3b:b2:05:75:50:86:71:89:0e:0b:
77:50:7c:e1:28:79:ae:f2:8c:8f:22:5a:d5:d0:03:9d:a5:52:
55:91:04:3b:67:ea:5f:49:7e:93:33:74:cc:99:99:ec:08:f7:
c4:da:db:8f:e6:69:3e:dc:bb:f2:89:0e:c0:4b:b8:17:0f:28:
d1:1f:50:cf:77:8b:e5:82:98:88:79:55:0c:90:4e:34:dd:fb:
77:f4:a5:e5:5d:c3:dc:40:93:cd:e0:c0:09:55:84:71:fb:4a:
d7:14:49:9e:d7:e1:16:13:14:d0:cb:0e:95:ce:77:89:80:18:
bf:48:2e:51:5b:7f:0e:21:f2:2b:48:91:89:7b:6e:b8:b2:5d:
cf:14:7c:0e:ec:4b:59:e2:24:dd:ff:b9:1d:2c:36:d5:4c:80:
66:9b:25:38:b9:ef:b8:cc:fb:14:bc:29:58:f0:90:c5:a7:0b:
ab:50:63:ab:a6:c2:12:54:26:67:42:50:76:a6:db:90:35:f9:
38:83:a8:ca:08:cd:51:7b:19:2b:55:42:42:9f:3c:28:70:8b:
f6:71:11:78:92:d1:dd:1c:d9:44:37:57:b8:c7:7d:c9:0d:c5:
28:46:1c:66:49:8f:08:62:19:50:3e:1c:39:f0:be:19:da:b6:
29:b1:1b:69
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYQsq93cSvldHPU37oJ0wL78MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDMxMDYxMjUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWFmYWEwMTA3NzZhMTI3MWI4M2VhNGEzZDIwNmMzNjE2N2Q0YmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoELFZHiRCpsdLI5k1M+7NjMhbtwb
SW485iVkSMelSkhXXzECJPjLzX2gVHpSNUFtqyoV9DuuZepj0CKEudvVImCFmirk
iucut7Ek9Fz3GrVU8/A7OZ+0YevBy8xbPeMglywCFuM1gxRqfRG5FprCyxeG7bko
EktXBwxjuL3D9lK4Z2LZ365GZU7VmHuBgDTXkxo3f1moi9GMHFlAtyDoV57c5h3C
yfgSnMhMmtZctj6G7pWWIEmoPIyCUdpCtGMODtP2yTdnezxmUW5epwfatAhgn1ws
DA9/S/oU+2h7upEDEkbNMJhbLn7bkamy1gzNEgkCRY3gRHfPLwNhBhxE+wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOmvqgEHdqEnG4PqSj0gbDYWfUvSMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNmEtcUFRZDJvU2NiZy1wS1BTQnNOaFo5UzlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC7sC/pqvqcTO7IFdVCG
cYkOC3dQfOEoea7yjI8iWtXQA52lUlWRBDtn6l9JfpMzdMyZmewI98Ta24/maT7c
u/KJDsBLuBcPKNEfUM93i+WCmIh5VQyQTjTd+3f0peVdw9xAk83gwAlVhHH7StcU
SZ7X4RYTFNDLDpXOd4mAGL9ILlFbfw4h8itIkYl7briyXc8UfA7sS1niJN3/uR0s
NtVMgGabJTi577jM+xS8KVjwkMWnC6tQY6umwhJUJmdCUHam25A1+TiDqMoIzVF7
GStVQkKfPChwi/ZxEXiS0d0c2UQ3V7jHfckNxShGHGZJjwhiGVA+HDnwvhnatimx
G2k=
-----END CERTIFICATE-----
Generated at Thu May 1 08:35:12 2025 by rpki-client