Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_6-qcF6Rg3mF_PvewkHb9zqUP88.roa
File: _6-qcF6Rg3mF_PvewkHb9zqUP88.roa (raw, json)
Hash identifier: I0++MNZd5fa+5mMwSRlCNgl+Th5lZqQ9x1pBdRpNkJA=
Subject key identifier: FF:AF:AA:70:5E:91:83:79:85:FC:FB:DE:C2:41:DB:F7:3A:94:3F:CF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6B84C5F5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_6-qcF6Rg3mF_PvewkHb9zqUP88.roa
Signing time: Fri 18 Feb 2022 00:22:39 +0000
ROA not before: Fri 18 Feb 2022 00:22:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1803863541 (0x6b84c5f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 18 00:22:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffafaa705e91837985fcfbdec241dbf73a943fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7a:b2:54:c1:54:d9:e7:53:80:74:f8:45:ba:
6a:c6:70:e6:a9:84:78:6a:ab:36:27:0a:cd:60:82:
c7:4e:de:1f:0f:e5:08:05:70:25:78:35:d0:ec:3a:
4b:b9:02:a5:c3:b6:ad:52:04:d0:9a:ad:37:d5:4c:
fc:02:b9:74:31:71:82:72:ee:30:f9:a6:4c:cf:81:
ea:1b:8e:42:e4:3a:44:8c:d7:f4:4d:7d:f2:58:d7:
cd:aa:f5:45:95:e9:b9:9b:c8:5b:9e:54:8d:37:eb:
47:b7:46:1b:98:48:a8:f0:f6:fd:87:7a:7b:26:26:
70:b0:95:2b:87:21:9c:be:de:20:d6:8f:d4:2f:5c:
e1:50:ee:e4:3e:b1:a6:c3:d3:38:50:5a:0e:56:fb:
db:69:1f:d6:ce:1e:8f:77:df:ba:96:67:e4:a0:c0:
12:ee:3b:f4:c6:07:fc:5c:dd:87:f5:dd:7e:ce:9b:
70:0b:9a:73:fe:9a:ba:98:de:d1:38:31:b8:52:bc:
ef:aa:04:f6:39:78:92:ab:80:da:85:7d:6d:e5:57:
8b:88:62:52:42:76:e5:cb:fe:5b:bb:0a:12:a4:dd:
4f:38:94:3e:02:49:24:f4:8b:79:5e:23:19:9d:ec:
a1:a0:b1:25:58:1f:f7:92:51:8c:c1:82:27:e1:a9:
02:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AF:AA:70:5E:91:83:79:85:FC:FB:DE:C2:41:DB:F7:3A:94:3F:CF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_6-qcF6Rg3mF_PvewkHb9zqUP88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:e9:97:12:8f:38:63:8c:f9:5f:54:21:96:b7:64:5f:5a:ca:
9d:60:5d:c6:a6:a5:70:86:8f:2e:aa:e8:9b:41:7f:1c:24:3f:
99:b7:93:3a:15:02:3d:ee:b7:f2:4d:a5:f4:d9:42:8d:b0:fc:
25:a1:85:26:d7:39:b2:7c:8a:fd:99:ef:a7:36:96:34:f3:ed:
8b:91:17:c6:93:f7:5f:73:d1:e9:1a:58:32:a6:e7:3f:d6:27:
e2:dd:fb:bb:94:0c:6b:cc:7f:58:05:3d:d5:b7:c5:92:b7:eb:
6a:da:47:01:8c:23:26:e4:81:74:36:d8:79:d9:6e:58:48:da:
c1:6a:de:5a:1d:95:bf:a0:c3:97:fb:8b:66:ca:6e:aa:0e:57:
71:8e:24:33:87:bc:3b:3a:e0:c2:8f:2b:1d:b5:f1:61:b7:cd:
f9:49:77:d9:d9:db:c8:3e:a1:35:02:57:07:4d:19:d2:6b:a2:
c0:00:02:a0:06:58:f4:bb:35:8a:65:2d:ea:f3:b1:9f:37:16:
bb:1c:b7:34:81:c4:b7:51:8b:7d:50:17:66:cb:91:c4:09:a6:
fc:4a:e7:14:62:1a:c1:ce:64:dd:4d:7c:1d:bd:a7:54:38:ec:
98:8a:ba:57:c9:ab:de:13:e6:4b:de:72:a9:71:96:ca:66:f7:
c2:64:03:23
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEa4TF9TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIx
ODAwMjIzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmZhZmFhNzA1ZTkx
ODM3OTg1ZmNmYmRlYzI0MWRiZjczYTk0M2ZjZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKZ6slTBVNnnU4B0+EW6asZw5qmEeGqrNicKzWCCx07eHw/l
CAVwJXg10Ow6S7kCpcO2rVIE0JqtN9VM/AK5dDFxgnLuMPmmTM+B6huOQuQ6RIzX
9E198ljXzar1RZXpuZvIW55UjTfrR7dGG5hIqPD2/Yd6eyYmcLCVK4chnL7eINaP
1C9c4VDu5D6xpsPTOFBaDlb722kf1s4ej3ffupZn5KDAEu479MYH/Fzdh/Xdfs6b
cAuac/6aupje0TgxuFK876oE9jl4kquA2oV9beVXi4hiUkJ25cv+W7sKEqTdTziU
PgJJJPSLeV4jGZ3soaCxJVgf95JRjMGCJ+GpAs8CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBT/r6pwXpGDeYX8+97CQdv3OpQ/zzAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L182LXFjRjZSZzNtRl9QdmV3a0hiOXpxVVA4OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCx6ZcSjzhjjPlfVCGWt2RfWsqdYF3GpqVwho8u
quibQX8cJD+Zt5M6FQI97rfyTaX02UKNsPwloYUm1zmyfIr9me+nNpY08+2LkRfG
k/dfc9HpGlgypuc/1ifi3fu7lAxrzH9YBT3Vt8WSt+tq2kcBjCMm5IF0Nth52W5Y
SNrBat5aHZW/oMOX+4tmym6qDldxjiQzh7w7OuDCjysdtfFht835SXfZ2dvIPqE1
AlcHTRnSa6LAAAKgBlj0uzWKZS3q87GfNxa7HLc0gcS3UYt9UBdmy5HECab8SucU
YhrBzmTdTXwdvadUOOyYirpXyaveE+ZL3nKpcZbKZvfCZAMj
-----END CERTIFICATE-----
Generated at Sat May 3 19:58:44 2025 by rpki-client