Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6xbgDbeZShtSdrTUPDeaiGdTjAk.roa
File: 6xbgDbeZShtSdrTUPDeaiGdTjAk.roa (raw, json)
Hash identifier: PlltZmubUcDXzzG9UiBPxTqaSpJ7UjMr36sDUlR1J8A=
Subject key identifier: EB:16:E0:0D:B7:99:4A:1B:52:76:B4:D4:3C:37:9A:88:67:53:8C:09
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 88302377
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6xbgDbeZShtSdrTUPDeaiGdTjAk.roa
Signing time: Sun 29 May 2022 13:09:13 +0000
ROA not before: Sun 29 May 2022 13:09:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2284856183 (0x88302377)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 29 13:09:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb16e00db7994a1b5276b4d43c379a8867538c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:60:8b:87:bd:72:fd:9a:81:c8:be:16:4e:64:
86:f5:3b:ec:35:61:87:e5:ae:01:79:5d:e7:eb:1d:
d5:0e:89:90:44:d7:17:82:a5:0a:79:92:0f:79:52:
2f:28:d7:de:70:f9:e8:39:2f:e3:e0:7e:ab:d3:46:
9c:c3:17:29:b3:e4:72:37:1e:c5:00:6f:44:38:5d:
38:4d:d0:97:93:97:e5:a9:f4:58:e0:21:88:c7:8f:
c0:5e:0e:3b:9a:9c:5b:1a:5f:a3:b9:db:3f:8b:cb:
49:3d:20:59:27:a3:25:38:07:f7:ca:a7:4b:82:4c:
b7:2a:84:2d:f0:b4:6f:8c:68:24:dc:69:0d:34:c5:
0b:b1:57:3d:7e:ab:25:78:ac:84:68:53:24:f0:19:
11:36:13:97:1a:83:59:62:1e:fb:8e:17:73:cf:44:
0e:0a:78:e3:5e:b9:21:84:0f:dc:86:76:e1:c0:58:
58:cb:36:06:cf:ca:06:cd:23:3b:6d:34:e3:ac:6b:
06:d9:4b:9e:1b:06:3e:c7:4f:22:25:5e:08:2b:47:
df:18:d6:e9:5f:76:38:89:9f:68:1b:9c:25:74:32:
e8:89:b3:43:ea:00:e2:b4:cc:3c:9b:3c:08:ba:32:
90:97:e6:83:a7:8d:6a:72:c0:a1:46:09:92:c3:c1:
1e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:16:E0:0D:B7:99:4A:1B:52:76:B4:D4:3C:37:9A:88:67:53:8C:09
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6xbgDbeZShtSdrTUPDeaiGdTjAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:7b:37:b1:92:dd:c2:13:f8:99:a9:bd:34:1c:7b:c3:e3:d6:
28:cf:ee:b4:af:69:5e:b2:a8:30:1c:8e:6a:69:45:f2:8e:ab:
60:c6:68:62:fd:32:77:bc:15:78:1d:e4:17:97:b4:1e:cb:62:
23:d7:4e:e1:ae:0c:c9:2e:a9:00:a9:2f:e2:e8:e3:39:15:19:
da:7f:75:26:33:2a:65:bc:8c:7e:6e:8e:66:db:4b:bc:5f:9e:
00:7b:c9:79:a4:8d:e9:1d:ba:ea:ad:28:f0:ea:bf:c9:73:27:
4f:5e:b1:08:99:86:87:28:8f:77:c0:d1:1c:1d:7e:58:bb:aa:
2a:b4:56:1b:82:ac:d1:7b:38:83:7f:ba:69:15:44:26:b0:40:
e0:28:9b:67:fe:90:43:fc:22:20:62:90:95:51:4a:3c:2f:d0:
ab:e0:2f:4c:74:73:65:fe:4b:f3:2a:ec:40:85:5c:48:a3:c9:
fb:02:08:29:b8:2e:72:31:33:92:ef:de:e9:58:33:be:a8:ac:
14:26:ac:c1:86:60:8c:37:d8:3d:0d:40:8b:42:66:77:63:07:
d2:94:81:c1:7a:21:e0:ab:6e:0d:40:35:15:a0:d9:33:3e:a1:
9b:2f:55:fe:51:59:cc:45:03:76:59:5b:bb:22:b8:78:2b:bd:
26:c8:b6:9c
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIgwI3cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MjkxMzA5MTNaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGViMTZlMDBkYjc5
OTRhMWI1Mjc2YjRkNDNjMzc5YTg4Njc1MzhjMDkwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDAYIuHvXL9moHIvhZOZIb1O+w1YYflrgF5XefrHdUOiZBE
1xeCpQp5kg95Ui8o195w+eg5L+PgfqvTRpzDFymz5HI3HsUAb0Q4XThN0JeTl+Wp
9FjgIYjHj8BeDjuanFsaX6O52z+Ly0k9IFknoyU4B/fKp0uCTLcqhC3wtG+MaCTc
aQ00xQuxVz1+qyV4rIRoUyTwGRE2E5cag1liHvuOF3PPRA4KeONeuSGED9yGduHA
WFjLNgbPygbNIzttNOOsawbZS54bBj7HTyIlXggrR98Y1ulfdjiJn2gbnCV0MuiJ
s0PqAOK0zDybPAi6MpCX5oOnjWpywKFGCZLDwR7vAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQU6xbgDbeZShtSdrTUPDeaiGdTjAkwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS82eGJnRGJlWlNodFNkclRVUERlYWlHZFRqQWsucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAgXs3sZLdwhP4mam9NBx7w+PWKM/utK9pXrKo
MByOamlF8o6rYMZoYv0yd7wVeB3kF5e0HstiI9dO4a4MyS6pAKkv4ujjORUZ2n91
JjMqZbyMfm6OZttLvF+eAHvJeaSN6R266q0o8Oq/yXMnT16xCJmGhyiPd8DRHB1+
WLuqKrRWG4Ks0Xs4g3+6aRVEJrBA4CibZ/6QQ/wiIGKQlVFKPC/Qq+AvTHRzZf5L
8yrsQIVcSKPJ+wIIKbgucjEzku/e6VgzvqisFCaswYZgjDfYPQ1Ai0Jmd2MH0pSB
wXoh4KtuDUA1FaDZMz6hmy9V/lFZzEUDdllbuyK4eCu9Jsi2nA==
-----END CERTIFICATE-----
Generated at Thu May 1 13:24:15 2025 by rpki-client