Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c6bYbfwXqn8n3w-xXhgpBXIY1z0.roa
File: c6bYbfwXqn8n3w-xXhgpBXIY1z0.roa (raw, json)
Hash identifier: YXC12wR1PyP0BbhLix69Z/GVHubct6ZMiUbTqsvRAvU=
Subject key identifier: 73:A6:D8:6D:FC:17:AA:7F:27:DF:0F:B1:5E:18:29:05:72:18:D7:3D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7089B607
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c6bYbfwXqn8n3w-xXhgpBXIY1z0.roa
Signing time: Mon 07 Mar 2022 16:10:30 +0000
ROA not before: Mon 07 Mar 2022 16:10:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1888073223 (0x7089b607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 7 16:10:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73a6d86dfc17aa7f27df0fb15e1829057218d73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ea:00:28:23:b0:6c:a0:ee:a6:40:b9:1b:5f:
be:cb:56:87:27:80:ec:48:25:3d:a0:21:28:19:f9:
4a:dc:d0:7f:71:fd:a2:fc:aa:c4:90:2b:70:19:52:
4b:6d:72:9b:ad:4d:f8:87:64:0d:c0:e3:26:97:1b:
5d:59:3b:f3:9e:44:b0:c0:17:df:c5:e3:69:5b:6d:
db:1d:cb:3e:3b:c2:9d:f3:34:07:4f:5b:58:ef:06:
db:73:32:e8:8a:f8:70:00:46:4c:a8:1f:c4:7b:3d:
15:07:1d:2a:b4:3a:d1:59:67:4d:c2:f2:ee:b3:26:
67:28:83:57:22:b6:8e:8c:58:3a:ff:ec:85:2d:07:
a8:ef:ae:a5:5b:f7:2e:5f:5a:a2:1e:dc:a4:66:8c:
78:fd:08:78:b6:48:1d:80:27:29:d7:87:e7:66:1f:
a7:74:2b:28:3d:be:99:d2:3f:24:b4:ce:eb:24:d4:
d9:0f:67:6a:ec:b1:f0:ab:78:e5:aa:ee:ca:a4:3b:
4a:39:d5:41:9e:4d:6d:ac:5e:6a:8f:71:1a:ec:34:
5f:48:09:1a:57:3a:40:ce:ac:37:74:77:80:93:c0:
2b:a7:fe:43:f0:b5:35:64:af:a6:b8:82:fa:38:42:
2e:f4:65:d3:e4:df:c6:45:8c:c1:5b:b8:fd:94:af:
2d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A6:D8:6D:FC:17:AA:7F:27:DF:0F:B1:5E:18:29:05:72:18:D7:3D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c6bYbfwXqn8n3w-xXhgpBXIY1z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:c3:ef:fc:b6:0c:01:cb:64:8e:ae:73:7b:41:51:ce:92:76:
5e:49:eb:b1:1c:80:d1:99:50:f7:4e:36:9e:06:d1:42:d1:d7:
02:51:f3:29:89:d5:5c:e8:79:9f:3e:91:73:9a:1e:19:82:c3:
ea:aa:52:c2:c3:38:2a:9b:66:3b:56:bd:4b:10:6b:22:41:bb:
20:6c:90:11:82:79:f9:19:7b:88:2e:6a:69:bc:22:43:dc:be:
37:22:08:cf:59:f7:cb:bc:55:fc:22:7b:06:00:b8:29:60:ab:
f2:08:a5:b9:21:e1:3d:c8:b0:02:47:65:8f:86:c0:ad:89:a7:
a9:f8:26:cc:0b:2d:6c:ce:26:dd:91:f3:36:ff:29:6a:98:b9:
e5:c3:fe:6f:09:bf:2e:b0:cb:4e:b9:35:2a:7a:42:4c:27:5b:
88:d7:c9:2e:b1:95:71:52:ab:18:01:e6:52:69:0f:85:8e:96:
ad:3f:8e:ae:ac:95:98:99:6f:58:8b:e1:89:54:f6:70:06:45:
f5:a5:78:88:a5:04:ec:04:6a:88:18:81:a6:9b:57:d6:52:5b:
f0:b6:39:63:4d:0f:f8:0c:00:c8:5d:df:07:7c:7a:b4:02:ae:
a7:17:ea:2e:bd:45:e5:75:7f:00:54:33:9f:2d:e8:2f:73:5b:
08:60:ef:b7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEcIm2BzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMw
NzE2MTAzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzNhNmQ4NmRmYzE3
YWE3ZjI3ZGYwZmIxNWUxODI5MDU3MjE4ZDczZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJnqACgjsGyg7qZAuRtfvstWhyeA7EglPaAhKBn5StzQf3H9
ovyqxJArcBlSS21ym61N+IdkDcDjJpcbXVk7855EsMAX38XjaVtt2x3LPjvCnfM0
B09bWO8G23My6Ir4cABGTKgfxHs9FQcdKrQ60VlnTcLy7rMmZyiDVyK2joxYOv/s
hS0HqO+upVv3Ll9aoh7cpGaMeP0IeLZIHYAnKdeH52Yfp3QrKD2+mdI/JLTO6yTU
2Q9nauyx8Kt45aruyqQ7SjnVQZ5Nbaxeao9xGuw0X0gJGlc6QM6sN3R3gJPAK6f+
Q/C1NWSvpriC+jhCLvRl0+TfxkWMwVu4/ZSvLUcCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRzptht/BeqfyffD7FeGCkFchjXPTAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L2M2YlliZndYcW44bjN3LXhYaGdwQlhJWTF6MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQA3w+/8tgwBy2SOrnN7QVHOknZeSeuxHIDRmVD3
TjaeBtFC0dcCUfMpidVc6HmfPpFzmh4ZgsPqqlLCwzgqm2Y7Vr1LEGsiQbsgbJAR
gnn5GXuILmppvCJD3L43IgjPWffLvFX8InsGALgpYKvyCKW5IeE9yLACR2WPhsCt
iaep+CbMCy1szibdkfM2/ylqmLnlw/5vCb8usMtOuTUqekJMJ1uI18kusZVxUqsY
AeZSaQ+FjpatP46urJWYmW9Yi+GJVPZwBkX1pXiIpQTsBGqIGIGmm1fWUlvwtjlj
TQ/4DADIXd8HfHq0Aq6nF+ouvUXldX8AVDOfLegvc1sIYO+3
-----END CERTIFICATE-----
Generated at Thu May 1 11:18:24 2025 by rpki-client