Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/at6qnIuTMP-KfgnmZxQIvlP5WEc.roa
File: at6qnIuTMP-KfgnmZxQIvlP5WEc.roa (raw, json)
Hash identifier: B0iPnAyuIIpDko0tTRQuXxHpwhAZ53S4R2vdoVWxlEE=
Subject key identifier: 6A:DE:AA:9C:8B:93:30:FF:8A:7E:09:E6:67:14:08:BE:53:F9:58:47
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183F69743B945B2E9C8A889F90340746FDC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/at6qnIuTMP-KfgnmZxQIvlP5WEc.roa
Signing time: Thu 20 Oct 2022 18:10:51 +0000
ROA not before: Thu 20 Oct 2022 18:10:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f6:97:43:b9:45:b2:e9:c8:a8:89:f9:03:40:74:6f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 20 18:10:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6adeaa9c8b9330ff8a7e09e6671408be53f95847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b0:91:d7:4b:c0:53:69:09:db:2c:04:a9:b3:
04:e5:4f:d9:dd:7a:57:d4:75:80:48:34:98:dc:d2:
20:b0:8c:ed:9d:14:98:32:9a:2a:d2:72:e1:ed:f2:
89:36:12:4c:7e:07:94:00:62:b1:94:8e:ab:9d:31:
50:ae:23:28:53:83:df:78:7f:58:3d:02:17:21:38:
dd:0d:4b:9b:52:ed:81:b2:b7:79:2d:85:23:97:5d:
ec:7d:b0:b1:29:7d:49:d6:3c:67:13:a8:a8:b9:4c:
5e:41:e7:19:4f:95:d8:d8:54:51:ae:33:57:29:8c:
71:98:c8:22:9a:4e:fb:ac:b8:a1:e2:57:b3:a8:f7:
ad:5f:00:11:09:78:3e:ef:8c:45:d6:68:ff:47:e9:
c5:61:45:8f:29:34:b7:9f:83:6a:5e:e0:35:0b:4b:
c5:87:0b:4e:64:52:e4:db:d5:68:c5:48:0a:76:ec:
17:87:c0:1a:f9:0d:1d:2f:12:42:af:3b:4c:51:1c:
de:47:9b:c4:08:1d:6d:52:c2:2f:08:fb:86:3f:48:
3c:14:1e:5a:65:25:40:2e:d4:b3:11:af:b5:cb:5d:
40:db:26:fb:32:ba:4f:20:e6:5e:12:1c:51:81:a4:
dc:f6:f1:6c:5c:c2:d5:eb:b7:14:60:86:3b:a1:9b:
0c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DE:AA:9C:8B:93:30:FF:8A:7E:09:E6:67:14:08:BE:53:F9:58:47
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/at6qnIuTMP-KfgnmZxQIvlP5WEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:8a:c2:f5:43:c1:6d:57:7d:f2:d1:2e:69:aa:14:8f:e0:d0:
8a:bc:42:4c:d0:89:47:6d:84:d1:4d:55:3a:12:59:81:88:b3:
11:f8:dc:27:38:77:be:80:cf:c4:7c:51:a5:2e:5b:67:ff:30:
87:18:c8:9b:15:2b:ba:45:bb:93:a0:e7:7e:20:e3:7f:23:f6:
26:4d:6c:91:26:4c:3c:bd:13:f0:98:20:0f:12:06:e1:c8:0d:
f7:05:5c:ff:69:7f:fa:4c:e9:79:11:11:60:da:f7:c5:6d:ec:
f3:94:c5:dc:7b:22:39:b7:8c:1f:5f:35:84:aa:15:f5:18:99:
23:40:ba:01:97:61:9e:b6:cc:87:c5:43:07:39:75:95:7c:65:
bf:ff:55:04:ae:c9:3f:bd:8c:8d:80:ce:52:b4:f2:85:ed:3a:
3c:9a:26:63:ef:be:5e:2d:e5:95:03:b8:90:4a:fc:0a:38:f3:
89:6c:bc:97:56:f5:5c:b2:a3:01:08:da:29:44:5a:d3:1f:15:
df:f3:bb:9d:9b:73:8d:d0:a7:32:6d:89:3d:8a:5d:9b:bb:f7:
d1:2c:a9:49:61:8c:25:70:25:25:b7:3b:cc:d2:c4:bb:42:3d:
04:19:40:24:2c:50:a5:61:20:b9:1d:ba:c5:12:69:50:9c:e7:
94:1a:db:52
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYP2l0O5RbLpyKiJ+QNAdG/cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDIwMTgxMDUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWRlYWE5YzhiOTMzMGZmOGE3ZTA5ZTY2NzE0MDhiZTUzZjk1ODQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLCR10vAU2kJ2ywEqbME5U/Z3XpX
1HWASDSY3NIgsIztnRSYMpoq0nLh7fKJNhJMfgeUAGKxlI6rnTFQriMoU4PfeH9Y
PQIXITjdDUubUu2Bsrd5LYUjl13sfbCxKX1J1jxnE6iouUxeQecZT5XY2FRRrjNX
KYxxmMgimk77rLih4lezqPetXwARCXg+74xF1mj/R+nFYUWPKTS3n4NqXuA1C0vF
hwtOZFLk29VoxUgKduwXh8Aa+Q0dLxJCrztMURzeR5vECB1tUsIvCPuGP0g8FB5a
ZSVALtSzEa+1y11A2yb7MrpPIOZeEhxRgaTc9vFsXMLV67cUYIY7oZsMHQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGreqpyLkzD/in4J5mcUCL5T+VhHMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYXQ2cW5JdVRNUC1LZmdubVp4UUl2bFA1V0VjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE2KwvVDwW1XffLRLmmq
FI/g0Iq8QkzQiUdthNFNVToSWYGIsxH43Cc4d76Az8R8UaUuW2f/MIcYyJsVK7pF
u5Og534g438j9iZNbJEmTDy9E/CYIA8SBuHIDfcFXP9pf/pM6XkREWDa98Vt7POU
xdx7Ijm3jB9fNYSqFfUYmSNAugGXYZ62zIfFQwc5dZV8Zb//VQSuyT+9jI2AzlK0
8oXtOjyaJmPvvl4t5ZUDuJBK/Ao484lsvJdW9VyyowEI2ilEWtMfFd/zu52bc43Q
pzJtiT2KXZu799EsqUlhjCVwJSW3O8zSxLtCPQQZQCQsUKVhILkdusUSaVCc55Qa
21I=
-----END CERTIFICATE-----
Generated at Thu May 1 09:59:37 2025 by rpki-client