Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bnRJ6FMTr5QBG9TTRLtCeUPshpA.roa
File: bnRJ6FMTr5QBG9TTRLtCeUPshpA.roa (raw, json)
Hash identifier: 5vFq0lBq/D8FOlTflyfogJz2jcKvyVAiCh8W/FNmwCQ=
Subject key identifier: 6E:74:49:E8:53:13:AF:94:01:1B:D4:D3:44:BB:42:79:43:EC:86:90
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B7745869AB94F8E9CF6CC4E798EF12DA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bnRJ6FMTr5QBG9TTRLtCeUPshpA.roa
Signing time: Mon 06 Mar 2023 15:05:00 +0000
ROA not before: Mon 06 Mar 2023 15:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:b773:be7a/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b7:74:58:69:ab:94:f8:e9:cf:6c:c4:e7:98:ef:12:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 15:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e7449e85313af94011bd4d344bb427943ec8690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:23:de:25:46:b7:ba:a9:c5:64:b8:23:48:d0:
4b:74:35:01:11:f2:e5:8b:e4:fc:a6:dc:d6:33:dd:
a1:5d:dd:a5:1b:ec:00:d3:b6:a0:c1:95:55:3b:69:
e6:9f:03:05:84:38:25:7c:80:22:a8:0e:59:93:2d:
f0:59:b8:38:5a:b6:23:b3:c9:9f:89:dd:57:65:9c:
4c:e9:d9:1b:be:67:24:10:ab:66:d8:cf:8a:29:9d:
2a:ee:1e:4d:24:a6:90:f7:2f:fa:90:82:ba:dd:51:
34:1e:9f:1a:12:79:af:8f:bf:f5:4e:05:80:64:fd:
d1:39:21:1f:03:43:fb:38:76:61:d1:65:61:77:04:
9e:6e:91:92:7d:4c:fd:b8:5b:6e:00:e8:2f:b0:b6:
48:16:9d:39:0f:52:e9:9e:3d:7a:dc:40:04:36:77:
9d:3b:a3:42:42:0d:c0:fc:ee:2f:13:5e:dd:91:18:
d0:f1:70:e3:f1:9c:3c:01:0f:82:3f:65:87:d3:f3:
52:b9:ef:d3:4d:90:b6:5c:9c:da:e1:bd:68:e0:b7:
f7:d7:02:9d:dc:11:cc:c6:74:12:ca:76:cd:6f:02:
b4:05:6c:f2:b8:e8:e9:06:2c:af:d7:3e:ad:c3:50:
08:49:25:a2:67:4c:cc:5f:db:b2:06:92:8f:fc:77:
82:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:74:49:E8:53:13:AF:94:01:1B:D4:D3:44:BB:42:79:43:EC:86:90
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bnRJ6FMTr5QBG9TTRLtCeUPshpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:b2:c1:31:f4:b6:34:2b:36:01:d7:43:58:00:3d:46:77:9a:
4a:2c:77:33:e3:cb:ae:97:35:fb:44:9b:0e:29:00:c6:cf:5f:
91:86:be:bc:53:bf:f3:0b:39:5d:5f:22:1d:37:87:11:ff:1e:
84:b8:b2:90:65:95:90:dd:26:8e:03:d0:b7:cd:dd:fe:ff:14:
0d:ec:67:75:0e:bb:41:83:99:53:44:61:8d:02:33:62:ab:8a:
5d:a8:77:de:e0:ab:f3:67:38:9c:67:40:a5:ed:fe:a9:75:30:
cd:5f:f4:d0:b0:bd:03:d9:65:ae:b9:40:fe:40:4c:79:63:92:
49:9b:71:25:4c:4d:a1:1e:ed:e0:b6:a2:07:9c:8c:0b:af:cc:
fd:66:c0:f6:01:c6:03:66:11:ab:a0:69:4a:ef:29:83:6b:b2:
fb:39:b8:21:27:72:ad:aa:b1:ca:95:ca:65:e9:0c:e6:81:a3:
bd:86:1f:ca:c2:e9:73:ec:b1:3a:34:a1:54:44:f0:bd:fb:d7:
d8:30:8f:8a:e0:7b:b6:1a:a6:c4:2b:75:fb:57:0b:16:e9:27:
fa:48:b4:b0:53:94:50:5d:0a:27:9e:a9:60:db:92:dc:8e:c5:
1b:9d:92:c3:ee:9d:6e:bd:2d:92:87:35:28:0e:1f:f3:cc:d5:
ba:52:b9:2e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYa3dFhpq5T46c9sxOeY7xLaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzA2MTUwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTc0NDllODUzMTNhZjk0MDExYmQ0ZDM0NGJiNDI3OTQzZWM4NjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SPeJUa3uqnFZLgjSNBLdDUBEfLl
i+T8ptzWM92hXd2lG+wA07agwZVVO2nmnwMFhDglfIAiqA5Zky3wWbg4WrYjs8mf
id1XZZxM6dkbvmckEKtm2M+KKZ0q7h5NJKaQ9y/6kIK63VE0Hp8aEnmvj7/1TgWA
ZP3ROSEfA0P7OHZh0WVhdwSebpGSfUz9uFtuAOgvsLZIFp05D1Lpnj163EAENned
O6NCQg3A/O4vE17dkRjQ8XDj8Zw8AQ+CP2WH0/NSue/TTZC2XJza4b1o4Lf31wKd
3BHMxnQSynbNbwK0BWzyuOjpBiyv1z6tw1AISSWiZ0zMX9uyBpKP/HeCKQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFG50SehTE6+UARvU00S7QnlD7IaQMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYm5SSjZGTVRyNVFCRzlUVFJMdENlVVBzaHBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGKywTH0tjQrNgHXQ1gA
PUZ3mkosdzPjy66XNftEmw4pAMbPX5GGvrxTv/MLOV1fIh03hxH/HoS4spBllZDd
Jo4D0LfN3f7/FA3sZ3UOu0GDmVNEYY0CM2Kril2od97gq/NnOJxnQKXt/ql1MM1f
9NCwvQPZZa65QP5ATHljkkmbcSVMTaEe7eC2ogecjAuvzP1mwPYBxgNmEaugaUrv
KYNrsvs5uCEncq2qscqVymXpDOaBo72GH8rC6XPssTo0oVRE8L3719gwj4rge7Ya
psQrdftXCxbpJ/pItLBTlFBdCieeqWDbktyOxRudksPunW69LZKHNSgOH/PM1bpS
uS4=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:51:26 2025 by rpki-client