Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P6ywM6rQVbar_shlXViHDu3QnD0.roa
File: P6ywM6rQVbar_shlXViHDu3QnD0.roa (raw, json)
Hash identifier: hZEcoc6b8E5Hnm6OotqnEpSYS+5ILjVTpN2uwi9YjdI=
Subject key identifier: 3F:AC:B0:33:AA:D0:55:B6:AB:FE:C8:65:5D:58:87:0E:ED:D0:9C:3D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 81A56058
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P6ywM6rQVbar_shlXViHDu3QnD0.roa
Signing time: Fri 06 May 2022 12:11:56 +0000
ROA not before: Fri 06 May 2022 12:11:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2175098968 (0x81a56058)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 6 12:11:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3facb033aad055b6abfec8655d58870eedd09c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5b:ae:4c:02:53:c9:a2:a9:cb:3a:40:cb:64:
1e:3a:99:55:3f:f9:ba:10:f3:96:0f:96:38:bc:c4:
14:a0:ce:1e:83:14:0f:e8:5d:25:55:09:c7:bf:77:
a3:f8:e0:7c:3f:61:3c:e6:4e:95:4e:28:a4:44:26:
12:46:44:47:85:60:cc:58:34:85:5e:18:10:26:0e:
3e:a2:64:a1:29:0b:50:50:b5:4e:31:60:e4:cd:45:
09:89:7b:17:20:98:ee:e1:f6:3b:07:63:56:9b:07:
76:b2:f5:18:5b:7b:89:cc:34:12:01:f5:56:74:06:
d4:2f:20:42:a1:f3:6b:3d:8f:5b:7e:05:be:34:32:
32:ee:de:d5:3c:db:36:6a:60:01:ad:71:79:bc:be:
f4:f9:13:57:e7:c2:07:d9:ff:b7:e6:9e:e5:d7:7d:
b8:ab:cc:d7:48:25:dd:86:6d:0a:29:37:4e:f0:b8:
31:ad:fd:52:50:85:e5:fe:50:4d:3a:50:8d:c5:23:
bb:6b:a0:bf:3d:cb:55:0b:09:cc:bd:de:9c:3f:77:
4b:76:dc:5c:6c:a4:d2:e9:2c:54:cb:6c:63:fd:8f:
20:c5:5e:05:d7:ee:90:4d:0e:4c:0e:1c:2a:99:e7:
4f:1c:fb:44:08:60:11:80:2f:5f:dd:34:2c:b5:95:
3a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AC:B0:33:AA:D0:55:B6:AB:FE:C8:65:5D:58:87:0E:ED:D0:9C:3D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P6ywM6rQVbar_shlXViHDu3QnD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:9e:e9:7a:d9:33:42:f9:11:57:b5:b6:85:a8:cf:b5:f1:bf:
c5:71:28:2d:7c:bd:84:c3:ac:92:da:17:22:98:d9:d8:b7:e7:
77:2a:2b:c4:62:bc:23:8d:51:17:61:e5:0a:b7:f5:a3:7d:1b:
a6:e0:4b:46:db:cb:d9:db:8a:93:bc:4f:10:fb:13:eb:70:36:
c7:4c:14:51:b0:7e:cd:87:a9:79:ee:57:51:dc:08:df:8f:c7:
9e:0e:3a:44:5a:c2:f0:31:87:7a:bd:2c:f4:41:a7:87:d3:65:
55:af:c3:00:fc:50:a3:a1:4b:e7:a8:6d:0a:3d:09:f2:82:5f:
5a:b6:9d:a6:49:3a:55:30:f4:0e:d4:9b:45:5f:55:23:55:be:
7f:a6:ae:c0:cd:54:40:f0:5e:4a:71:a6:96:c0:ce:ae:c3:d1:
78:c8:0f:d7:3b:d9:83:42:58:8b:e8:4c:75:69:a8:f5:35:8e:
f4:6b:e7:e1:e0:f0:7a:ad:22:2e:48:3a:3a:92:6a:14:5e:ab:
aa:af:f1:5f:dc:34:87:d3:09:2b:39:16:93:76:b9:5b:de:f1:
b4:f8:5f:6a:b0:7a:38:57:9b:51:67:58:97:0c:35:b3:11:9a:
71:b9:0b:84:46:f5:fd:f6:ea:37:19:88:aa:27:c3:7f:ca:7e:
60:75:dd:00
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIGlYFgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MDYxMjExNTZaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDNmYWNiMDMzYWFk
MDU1YjZhYmZlYzg2NTVkNTg4NzBlZWRkMDljM2QwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCBW65MAlPJoqnLOkDLZB46mVU/+boQ85YPlji8xBSgzh6D
FA/oXSVVCce/d6P44Hw/YTzmTpVOKKREJhJGREeFYMxYNIVeGBAmDj6iZKEpC1BQ
tU4xYOTNRQmJexcgmO7h9jsHY1abB3ay9Rhbe4nMNBIB9VZ0BtQvIEKh82s9j1t+
Bb40MjLu3tU82zZqYAGtcXm8vvT5E1fnwgfZ/7fmnuXXfbirzNdIJd2GbQopN07w
uDGt/VJQheX+UE06UI3FI7troL89y1ULCcy93pw/d0t23FxspNLpLFTLbGP9jyDF
XgXX7pBNDkwOHCqZ508c+0QIYBGAL1/dNCy1lTorAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUP6ywM6rQVbar/shlXViHDu3QnD0wHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9QNnl3TTZyUVZiYXJfc2hsWFZpSER1M1FuRDAucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAFZ7petkzQvkRV7W2hajPtfG/xXEoLXy9hMOs
ktoXIpjZ2LfndyorxGK8I41RF2HlCrf1o30bpuBLRtvL2duKk7xPEPsT63A2x0wU
UbB+zYepee5XUdwI34/Hng46RFrC8DGHer0s9EGnh9NlVa/DAPxQo6FL56htCj0J
8oJfWradpkk6VTD0DtSbRV9VI1W+f6auwM1UQPBeSnGmlsDOrsPReMgP1zvZg0JY
i+hMdWmo9TWO9Gvn4eDweq0iLkg6OpJqFF6rqq/xX9w0h9MJKzkWk3a5W97xtPhf
arB6OFebUWdYlww1sxGacbkLhEb1/fbqNxmIqifDf8p+YHXdAA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:52 2025 by rpki-client