Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6ppdLSygTM6wQXsnUiiPyRgTB4M.roa
File: 6ppdLSygTM6wQXsnUiiPyRgTB4M.roa (raw, json)
Hash identifier: KRrnfxAHpja5EHnTyZIyu+83IU3Z0wam78uQM4o+c7I=
Subject key identifier: EA:9A:5D:2D:2C:A0:4C:CE:B0:41:7B:27:52:28:8F:C9:18:13:07:83
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8FCB7EB8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6ppdLSygTM6wQXsnUiiPyRgTB4M.roa
Signing time: Sat 25 Jun 2022 20:10:10 +0000
ROA not before: Sat 25 Jun 2022 20:10:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2412478136 (0x8fcb7eb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 25 20:10:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea9a5d2d2ca04cceb0417b2752288fc918130783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d4:b7:76:af:41:f5:5f:03:54:dc:97:f5:a4:
56:89:77:b5:9f:84:19:f2:f8:99:f5:91:91:fa:97:
8d:1b:db:72:09:c9:df:bd:26:06:37:7e:9e:40:26:
b8:2d:14:62:8d:fe:c1:6c:8d:1c:70:42:78:19:ad:
1d:ee:3d:b8:13:d7:d4:c1:3d:f9:7a:2b:1f:2c:5b:
c3:ef:c5:98:c8:ec:df:29:b4:4e:56:8f:28:b4:5b:
52:bc:d2:78:b4:85:b8:a7:8a:70:4d:78:d8:ff:7a:
80:64:ca:2d:1e:f3:5e:37:2e:35:a0:f0:85:14:18:
f2:bb:5c:97:0c:66:21:b5:36:b3:58:a0:75:fb:b7:
b2:c2:fe:bb:a8:90:27:bc:ea:bf:8b:f9:b7:be:ae:
4d:f5:a3:cd:9e:10:9a:29:8d:d2:2f:ba:6d:3f:09:
3b:22:b8:88:8c:77:31:9f:3b:2a:f4:90:f2:7b:9b:
de:9c:90:c7:3e:43:72:80:46:62:d4:98:96:6b:51:
72:f0:31:2e:3a:e9:04:30:6a:44:cf:71:50:8c:99:
97:a9:07:fe:f4:68:57:3d:30:9e:aa:c6:0e:97:39:
2b:2e:97:10:99:4d:41:52:23:3f:44:38:13:25:7e:
9b:82:77:01:89:c1:58:5d:ee:fc:a8:10:db:39:4f:
2d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9A:5D:2D:2C:A0:4C:CE:B0:41:7B:27:52:28:8F:C9:18:13:07:83
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6ppdLSygTM6wQXsnUiiPyRgTB4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:21:4f:3f:90:7a:07:a0:12:94:a4:f9:a9:ca:82:72:f4:69:
a2:2d:b4:df:c1:a4:d2:cb:f4:d7:3e:f1:a3:c7:10:4e:4b:6e:
d7:5e:9d:00:05:75:15:4d:f0:66:a2:31:7f:09:43:3b:07:27:
f6:60:df:7a:c1:10:bb:c1:ce:de:b9:fb:2b:64:8b:02:ee:a9:
fd:5e:44:c2:5f:af:43:99:2a:d2:66:6a:a6:8e:94:ad:22:7b:
8d:1e:d2:90:94:d9:71:5a:ce:3d:6e:98:ae:04:f5:81:0f:5f:
52:db:94:8c:25:74:ba:b6:4e:56:2b:ef:fe:4a:4f:30:af:dc:
c3:34:0b:cc:cd:a4:87:3d:37:70:99:ef:29:9a:9d:d2:73:22:
bd:3c:95:f1:39:24:82:30:f0:ca:8e:49:c3:94:8a:2c:46:32:
e9:2b:d6:be:0d:f9:d7:39:b1:2c:f3:01:3d:0c:06:1a:77:80:
13:fc:1b:49:dc:7a:ef:1f:46:0f:67:59:3b:88:2d:7d:ee:07:
1c:a1:bb:b2:40:c1:39:03:a0:fd:83:8f:26:74:42:d3:9d:25:
1f:e1:6a:c2:58:f3:54:1b:f7:a0:9f:05:09:18:61:2b:00:2c:
b6:4e:59:2b:ec:d3:89:18:71:ff:98:50:a2:a0:51:93:aa:c2:
29:68:0f:62
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAI/LfrgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MjUyMDEwMTBaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGVhOWE1ZDJkMmNh
MDRjY2ViMDQxN2IyNzUyMjg4ZmM5MTgxMzA3ODMwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCP1Ld2r0H1XwNU3Jf1pFaJd7WfhBny+Jn1kZH6l40b23IJ
yd+9JgY3fp5AJrgtFGKN/sFsjRxwQngZrR3uPbgT19TBPfl6Kx8sW8PvxZjI7N8p
tE5Wjyi0W1K80ni0hbininBNeNj/eoBkyi0e8143LjWg8IUUGPK7XJcMZiG1NrNY
oHX7t7LC/ruokCe86r+L+be+rk31o82eEJopjdIvum0/CTsiuIiMdzGfOyr0kPJ7
m96ckMc+Q3KARmLUmJZrUXLwMS466QQwakTPcVCMmZepB/70aFc9MJ6qxg6XOSsu
lxCZTUFSIz9EOBMlfpuCdwGJwVhd7vyoENs5Ty0/AgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQU6ppdLSygTM6wQXsnUiiPyRgTB4MwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS82cHBkTFN5Z1RNNndRWHNuVWlpUHlSZ1RCNE0ucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAYiFPP5B6B6ASlKT5qcqCcvRpoi2038Gk0sv0
1z7xo8cQTktu116dAAV1FU3wZqIxfwlDOwcn9mDfesEQu8HO3rn7K2SLAu6p/V5E
wl+vQ5kq0mZqpo6UrSJ7jR7SkJTZcVrOPW6YrgT1gQ9fUtuUjCV0urZOVivv/kpP
MK/cwzQLzM2khz03cJnvKZqd0nMivTyV8TkkgjDwyo5Jw5SKLEYy6SvWvg351zmx
LPMBPQwGGneAE/wbSdx67x9GD2dZO4gtfe4HHKG7skDBOQOg/YOPJnRC050lH+Fq
wljzVBv3oJ8FCRhhKwAstk5ZK+zTiRhx/5hQoqBRk6rCKWgPYg==
-----END CERTIFICATE-----
Generated at Thu May 1 17:01:40 2025 by rpki-client