Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b6RNxz4Cloy10tbkYiTPiz1hJFk.roa
File: b6RNxz4Cloy10tbkYiTPiz1hJFk.roa (raw, json)
Hash identifier: 9OHiYEFUvEvyHWFdHGI4g/tDTuCcTrB5imNASJnianA=
Subject key identifier: 6F:A4:4D:C7:3E:02:96:8C:B5:D2:D6:E4:62:24:CF:8B:3D:61:24:59
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868C24F404FEC10789B624E6F146D2AE46
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b6RNxz4Cloy10tbkYiTPiz1hJFk.roa
Signing time: Sun 26 Feb 2023 05:14:37 +0000
ROA not before: Sun 26 Feb 2023 05:14:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8c:24:f4:04:fe:c1:07:89:b6:24:e6:f1:46:d2:ae:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 05:14:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fa44dc73e02968cb5d2d6e46224cf8b3d612459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8f:64:c0:90:f4:2b:3c:74:08:c3:87:c6:67:
14:22:fd:44:5b:a3:a7:9f:b8:b7:d5:80:6f:01:05:
e4:fd:4a:dd:41:f3:31:f6:42:e3:ea:89:98:7c:88:
81:d3:c6:77:f5:b9:f5:fd:0b:5e:ef:5e:8b:f8:3f:
6a:f2:10:3b:a6:98:fd:4f:e9:25:e0:dd:65:0a:e6:
89:41:dd:35:6d:9d:10:a8:c2:fd:92:37:6d:ce:91:
61:4b:5c:62:82:63:8a:bc:15:0b:89:89:a1:ee:e8:
9c:67:76:e3:75:c2:a4:fe:18:98:bc:b8:ad:55:12:
87:a7:b7:cb:d0:78:db:90:85:3e:ce:d2:67:97:41:
0f:b2:a5:b0:5b:2e:1a:cd:17:91:33:36:01:cf:b3:
e7:b4:e6:c5:69:ca:28:3a:a5:78:c9:35:1a:3a:b0:
02:58:a4:05:bd:f8:79:c9:d2:15:e5:1c:ab:6e:e0:
d8:fe:1d:9b:03:8d:88:4e:aa:4b:e7:ac:86:a3:2c:
3a:a3:25:b0:f0:26:2b:71:f5:fa:5d:5d:88:4a:72:
d0:e9:0d:bd:83:3f:02:b2:fc:48:e8:6f:cf:14:95:
89:82:6d:a2:5d:6d:4d:28:41:e6:93:13:4f:ee:1b:
ab:a6:cb:bf:be:aa:d3:6b:b0:7a:16:d9:15:58:fb:
6d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A4:4D:C7:3E:02:96:8C:B5:D2:D6:E4:62:24:CF:8B:3D:61:24:59
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b6RNxz4Cloy10tbkYiTPiz1hJFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:57:9c:0e:37:72:fb:a2:9d:3c:b6:13:a2:77:2a:29:c1:5d:
0b:b5:87:e4:5d:9d:08:9e:f3:c6:77:d0:0f:ff:ce:05:1d:e1:
23:4f:99:b8:48:4e:86:b2:eb:d7:77:de:a3:7f:68:cb:23:ae:
9a:d0:1c:dc:84:f6:57:41:64:e4:b3:af:90:de:d1:e0:c5:95:
e7:64:1e:3b:eb:d8:20:f6:4c:55:cc:a9:07:bb:31:00:a7:ed:
ee:55:35:4c:f5:c7:d0:a0:2a:a6:40:dd:42:69:b3:8b:b6:ad:
a9:42:20:8c:48:3b:59:b3:89:2d:b1:e1:d0:04:10:a6:62:85:
ee:c7:7d:71:3f:0e:82:c0:3c:49:fe:a2:d6:7a:ee:9c:1d:82:
52:2b:cf:aa:2a:d0:26:7f:fb:d2:de:30:94:3c:48:1c:4a:eb:
90:19:69:53:ca:4e:04:df:11:bc:7e:ea:e0:44:51:31:58:31:
80:97:79:28:82:cf:31:cf:7f:59:1d:cb:dd:72:6b:66:1e:51:
b5:60:6e:d3:53:a7:66:f9:44:1d:25:06:ab:b2:74:e0:4c:c4:
79:b1:6c:39:f1:48:fb:83:72:48:e7:e0:7c:93:7e:1d:b6:8c:
68:57:73:3c:45:42:df:b2:1f:bd:c7:b5:20:bb:ef:d9:2e:90:
cc:f1:af:db
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaMJPQE/sEHibYk5vFG0q5GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjI2MDUxNDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmE0NGRjNzNlMDI5NjhjYjVkMmQ2ZTQ2MjI0Y2Y4YjNkNjEyNDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA249kwJD0Kzx0CMOHxmcUIv1EW6On
n7i31YBvAQXk/UrdQfMx9kLj6omYfIiB08Z39bn1/Qte716L+D9q8hA7ppj9T+kl
4N1lCuaJQd01bZ0QqML9kjdtzpFhS1xigmOKvBULiYmh7uicZ3bjdcKk/hiYvLit
VRKHp7fL0HjbkIU+ztJnl0EPsqWwWy4azReRMzYBz7PntObFacooOqV4yTUaOrAC
WKQFvfh5ydIV5RyrbuDY/h2bA42ITqpL56yGoyw6oyWw8CYrcfX6XV2ISnLQ6Q29
gz8CsvxI6G/PFJWJgm2iXW1NKEHmkxNP7hurpsu/vqrTa7B6FtkVWPttkQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFG+kTcc+ApaMtdLW5GIkz4s9YSRZMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYjZSTnh6NENsb3kxMHRia1lpVFBpejFoSkZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEpXnA43cvuinTy2E6J3
KinBXQu1h+RdnQie88Z30A//zgUd4SNPmbhIToay69d33qN/aMsjrprQHNyE9ldB
ZOSzr5De0eDFledkHjvr2CD2TFXMqQe7MQCn7e5VNUz1x9CgKqZA3UJps4u2ralC
IIxIO1mziS2x4dAEEKZihe7HfXE/DoLAPEn+otZ67pwdglIrz6oq0CZ/+9LeMJQ8
SBxK65AZaVPKTgTfEbx+6uBEUTFYMYCXeSiCzzHPf1kdy91ya2YeUbVgbtNTp2b5
RB0lBquydOBMxHmxbDnxSPuDckjn4HyTfh22jGhXczxFQt+yH73HtSC779kukMzx
r9s=
-----END CERTIFICATE-----
Generated at Thu May 1 11:36:30 2025 by rpki-client