Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bPvnu_9uH6DBwOfH2v3OYwj765U.roa
File: bPvnu_9uH6DBwOfH2v3OYwj765U.roa (raw, json)
Hash identifier: 97ZMcFWRlfG/GKBzHlHhOmxwZ0tMAX3T668jV5g4lO8=
Subject key identifier: 6C:FB:E7:BB:FF:6E:1F:A0:C1:C0:E7:C7:DA:FD:CE:63:08:FB:EB:95
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8E8A46DA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bPvnu_9uH6DBwOfH2v3OYwj765U.roa
Signing time: Tue 21 Jun 2022 00:10:44 +0000
ROA not before: Tue 21 Jun 2022 00:10:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2391426778 (0x8e8a46da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 21 00:10:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6cfbe7bbff6e1fa0c1c0e7c7dafdce6308fbeb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5f:b8:be:e0:46:c7:79:a0:a8:d8:05:83:55:
88:80:f1:18:92:64:b6:b9:ef:4e:55:86:f3:99:f5:
59:48:9b:fd:ee:0a:a0:59:71:96:b8:e8:9e:54:6a:
44:53:90:d4:91:f3:f7:56:84:6c:5b:f4:1e:a6:c0:
f0:b5:45:18:27:9c:7a:62:d4:98:50:c2:84:43:df:
c8:98:26:77:7d:b6:77:a0:6f:f8:4e:c6:7c:b9:6e:
8b:a6:17:a2:dd:92:51:74:89:62:86:3f:18:79:ff:
a3:53:38:c2:c3:6d:c0:e3:51:44:a2:1c:ca:af:fb:
ac:2e:94:bd:64:d8:3a:39:47:16:bd:66:9a:76:ad:
51:4d:51:98:12:25:d9:8f:98:e7:94:61:a3:2b:b0:
f3:d6:7d:6e:a0:75:b1:66:da:1e:40:df:f7:98:eb:
ee:82:99:e0:96:28:42:55:64:0f:19:4a:56:da:63:
23:79:15:11:bb:8b:ef:2f:2c:76:e6:92:cc:0b:5c:
80:be:f2:1c:e1:d6:89:6e:10:b1:ea:a4:42:fd:b9:
90:a7:3f:a0:ed:8b:77:25:58:59:70:a9:95:65:58:
48:45:00:e5:87:18:78:cc:07:07:db:4a:a9:1c:f6:
82:14:13:ab:28:b9:88:88:5f:b8:63:27:4b:da:d7:
84:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FB:E7:BB:FF:6E:1F:A0:C1:C0:E7:C7:DA:FD:CE:63:08:FB:EB:95
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bPvnu_9uH6DBwOfH2v3OYwj765U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:5d:15:01:3f:9c:ec:84:d2:05:9c:0a:0d:b3:ca:e5:ec:5a:
e3:6a:32:25:e7:38:49:f0:85:29:36:56:73:99:20:68:bf:93:
a5:7e:0a:04:34:d6:c6:21:eb:08:97:c0:66:f4:7f:10:33:e2:
b6:ca:55:33:11:83:89:7f:1a:87:26:ae:85:04:75:12:2f:b4:
e6:c0:2d:23:55:df:24:30:9a:fd:cd:b7:61:99:5a:4d:45:cd:
10:b9:a9:1f:65:25:ce:95:17:64:63:b1:0b:cc:21:7a:53:1d:
e9:7b:e7:bb:8c:ed:a4:a4:df:72:1d:fd:03:63:21:49:4a:42:
f2:fe:3a:11:e1:e1:6f:cc:1f:5d:82:11:a3:41:56:be:79:91:
8e:6d:77:6c:01:7d:3f:cf:92:22:e8:eb:94:61:28:ce:99:d0:
eb:e1:81:50:0e:e8:bb:62:ea:2e:63:e0:d0:99:dc:da:21:14:
0c:0b:29:02:a6:0e:e3:f7:a4:94:c6:81:0d:a1:99:06:bb:dc:
fc:ca:46:93:92:f5:f6:8e:1f:74:1c:f6:26:b7:cb:49:76:a2:
ac:0a:1b:94:d2:be:0a:54:48:60:11:ed:d6:e0:4a:1f:d4:11:
e3:d2:59:e0:f6:a2:fd:a2:f9:e1:72:28:3a:86:58:1f:fd:b7:
d2:f6:c8:65
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAI6KRtowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MjEwMDEwNDRaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDZjZmJlN2JiZmY2
ZTFmYTBjMWMwZTdjN2RhZmRjZTYzMDhmYmViOTUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCmX7i+4EbHeaCo2AWDVYiA8RiSZLa5705VhvOZ9VlIm/3u
CqBZcZa46J5UakRTkNSR8/dWhGxb9B6mwPC1RRgnnHpi1JhQwoRD38iYJnd9tneg
b/hOxny5boumF6LdklF0iWKGPxh5/6NTOMLDbcDjUUSiHMqv+6wulL1k2Do5Rxa9
Zpp2rVFNUZgSJdmPmOeUYaMrsPPWfW6gdbFm2h5A3/eY6+6CmeCWKEJVZA8ZSlba
YyN5FRG7i+8vLHbmkswLXIC+8hzh1oluELHqpEL9uZCnP6Dti3clWFlwqZVlWEhF
AOWHGHjMBwfbSqkc9oIUE6souYiIX7hjJ0va14Q3AgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUbPvnu/9uH6DBwOfH2v3OYwj765UwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9iUHZudV85dUg2REJ3T2ZIMnYzT1l3ajc2NVUucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEARF0VAT+c7ITSBZwKDbPK5exa42oyJec4SfCF
KTZWc5kgaL+TpX4KBDTWxiHrCJfAZvR/EDPitspVMxGDiX8ahyauhQR1Ei+05sAt
I1XfJDCa/c23YZlaTUXNELmpH2UlzpUXZGOxC8whelMd6Xvnu4ztpKTfch39A2Mh
SUpC8v46EeHhb8wfXYIRo0FWvnmRjm13bAF9P8+SIujrlGEozpnQ6+GBUA7ou2Lq
LmPg0Jnc2iEUDAspAqYO4/eklMaBDaGZBrvc/MpGk5L19o4fdBz2JrfLSXairAob
lNK+ClRIYBHt1uBKH9QR49JZ4Pai/aL54XIoOoZYH/230vbIZQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:19:10 2025 by rpki-client