Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bQEFgOVBoVpqCHXCQQ5lsDkmkWg.roa
File: bQEFgOVBoVpqCHXCQQ5lsDkmkWg.roa (raw, json)
Hash identifier: Lye4wma/15+TTIsIrDyQlDAIHzqFSj/uiRvTRM9sjHU=
Subject key identifier: 6D:01:05:80:E5:41:A1:5A:6A:08:75:C2:41:0E:65:B0:39:26:91:68
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6BB15E1F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bQEFgOVBoVpqCHXCQQ5lsDkmkWg.roa
Signing time: Fri 18 Feb 2022 15:09:14 +0000
ROA not before: Fri 18 Feb 2022 15:09:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1806786079 (0x6bb15e1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 18 15:09:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d010580e541a15a6a0875c2410e65b039269168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:29:0b:06:e9:3c:6b:14:50:f3:98:50:b2:90:
86:a9:4d:d6:f9:5a:77:eb:f4:87:f5:fd:91:35:fe:
3f:ae:e9:ea:79:ca:25:bf:d6:17:e8:10:c7:77:da:
21:f2:30:ee:2b:ad:da:0e:c5:03:fd:e3:28:e9:50:
8e:70:a2:45:b5:60:34:8b:b1:5a:0e:d7:c9:1d:dd:
82:8b:a7:d6:f6:d3:4b:b2:15:ad:d7:5e:60:5c:1f:
46:87:57:00:d6:87:5f:5a:d1:52:e0:be:98:a7:b2:
6b:94:1c:da:00:42:59:6c:ee:96:cb:8e:07:ac:ba:
71:c4:97:76:94:0e:da:03:20:56:50:ce:ac:6b:0f:
7e:3c:41:ed:ab:b4:f9:fa:1a:07:6b:ce:4d:5e:d9:
9d:33:aa:29:46:1d:2e:06:25:26:cb:e8:b3:97:67:
7f:01:49:7b:de:a7:f3:a5:56:42:7e:20:b4:b8:df:
90:31:96:f8:83:21:9d:00:a6:30:04:80:52:dc:74:
e5:f9:c2:aa:72:b8:8a:4f:79:a4:99:1c:54:8c:96:
01:63:56:07:05:65:73:4b:fc:af:1b:7c:48:10:d9:
46:c3:ed:05:23:1f:90:d3:38:a4:f3:0e:10:14:c7:
b7:58:92:24:dc:e2:fb:9b:3b:5d:e7:49:73:82:80:
0d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:01:05:80:E5:41:A1:5A:6A:08:75:C2:41:0E:65:B0:39:26:91:68
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bQEFgOVBoVpqCHXCQQ5lsDkmkWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:d8:12:53:79:f2:58:9e:73:b9:04:96:78:ea:35:77:c1:aa:
54:1b:3b:a0:20:30:c3:92:67:69:9b:1a:a2:46:3e:a1:ce:b9:
b9:c6:82:86:16:5c:48:2a:b2:18:be:35:ab:11:12:08:d5:44:
40:56:53:12:82:b2:1c:d6:3b:e8:43:a0:98:57:a6:0a:97:f0:
b2:24:ea:a2:63:cc:c4:07:91:b3:69:c7:54:ab:fa:99:b3:49:
9e:05:a1:3e:5c:c1:4d:f8:fc:6d:10:98:0a:a9:5e:11:49:ef:
dc:1a:79:6c:ce:4a:9e:44:d0:c1:67:8d:d6:f3:29:d3:62:5e:
7a:b3:66:f1:96:3a:a8:24:51:21:ec:f7:2e:40:5e:dd:a2:d7:
d0:90:71:18:69:fc:e5:f9:7c:7f:af:0f:3f:5b:9f:71:01:7d:
16:b7:bb:b4:9e:f0:d8:00:b4:95:e5:26:2b:15:b5:a6:69:bf:
c4:4e:16:4c:72:f6:dd:72:13:2c:32:51:24:9e:36:db:d4:2c:
20:0c:85:29:bf:cb:f2:0e:44:04:44:dc:e0:a7:40:4d:d6:78:
1c:1f:0d:af:86:7e:9d:99:09:38:22:a1:22:30:b3:72:14:5d:
a4:6b:71:01:ef:39:43:8c:25:bb:6c:fe:8c:5f:e2:ef:df:b1:
27:ad:fc:88
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEa7FeHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIx
ODE1MDkxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmQwMTA1ODBlNTQx
YTE1YTZhMDg3NWMyNDEwZTY1YjAzOTI2OTE2ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKYpCwbpPGsUUPOYULKQhqlN1vlad+v0h/X9kTX+P67p6nnK
Jb/WF+gQx3faIfIw7iut2g7FA/3jKOlQjnCiRbVgNIuxWg7XyR3dgoun1vbTS7IV
rddeYFwfRodXANaHX1rRUuC+mKeya5Qc2gBCWWzulsuOB6y6ccSXdpQO2gMgVlDO
rGsPfjxB7au0+foaB2vOTV7ZnTOqKUYdLgYlJsvos5dnfwFJe96n86VWQn4gtLjf
kDGW+IMhnQCmMASAUtx05fnCqnK4ik95pJkcVIyWAWNWBwVlc0v8rxt8SBDZRsPt
BSMfkNM4pPMOEBTHt1iSJNzi+5s7XedJc4KADXUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRtAQWA5UGhWmoIdcJBDmWwOSaRaDAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L2JRRUZnT1ZCb1ZwcUNIWENRUTVsc0RrbWtXZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCY2BJTefJYnnO5BJZ46jV3wapUGzugIDDDkmdp
mxqiRj6hzrm5xoKGFlxIKrIYvjWrERII1URAVlMSgrIc1jvoQ6CYV6YKl/CyJOqi
Y8zEB5GzacdUq/qZs0meBaE+XMFN+PxtEJgKqV4RSe/cGnlszkqeRNDBZ43W8ynT
Yl56s2bxljqoJFEh7PcuQF7dotfQkHEYafzl+Xx/rw8/W59xAX0Wt7u0nvDYALSV
5SYrFbWmab/EThZMcvbdchMsMlEknjbb1CwgDIUpv8vyDkQERNzgp0BN1ngcHw2v
hn6dmQk4IqEiMLNyFF2ka3EB7zlDjCW7bP6MX+Lv37EnrfyI
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:15 2025 by rpki-client