Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m6_xR7yWNhBhbOkndLoWwRrGw8A.roa
File: m6_xR7yWNhBhbOkndLoWwRrGw8A.roa (raw, json)
Hash identifier: cr86J/TvqMQHzAt1EAu3TT69mXBRwCXWYatmXg6/PBg=
Subject key identifier: 9B:AF:F1:47:BC:96:36:10:61:6C:E9:27:74:BA:16:C1:1A:C6:C3:C0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018551FC83FCAD4E5A1F487DE00522A292E5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m6_xR7yWNhBhbOkndLoWwRrGw8A.roa
Signing time: Tue 27 Dec 2022 05:09:41 +0000
ROA not before: Tue 27 Dec 2022 05:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:51:fc:83:fc:ad:4e:5a:1f:48:7d:e0:05:22:a2:92:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 27 05:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9baff147bc963610616ce92774ba16c11ac6c3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:02:60:74:63:dc:94:c0:95:77:eb:c2:0a:
b5:ad:12:24:9d:d0:39:25:be:3a:ae:3d:c6:a1:c7:
ff:26:df:37:54:1a:04:2c:e3:97:93:bc:70:c4:5c:
fd:ee:72:ba:9a:be:b0:6e:19:02:0f:55:3c:6e:49:
8b:31:b7:c5:9d:40:5d:0c:79:a1:29:ac:8b:14:82:
02:f4:aa:e1:fd:de:65:1b:4d:ad:43:0b:3d:d8:fd:
e5:5f:4c:60:e6:ba:48:df:cc:ee:e4:7a:73:42:ae:
65:aa:d7:ee:3f:d8:8f:3d:4f:36:73:79:c0:7c:71:
cb:c7:42:2d:5d:f0:82:52:b2:e3:1e:0f:3e:23:e5:
f3:44:05:5c:67:9b:af:0c:57:cc:2a:50:d6:c3:7a:
87:f0:92:42:b7:6d:8f:33:8a:17:69:73:17:25:dd:
25:f4:90:d4:da:d9:6e:6f:19:33:32:c6:27:e2:38:
5d:49:2b:a5:3e:23:16:64:4c:61:b0:96:26:2b:8e:
b3:1d:7f:ea:0a:48:ab:08:2d:83:31:f3:d3:7d:c5:
cf:56:ab:c5:4f:9d:af:5c:44:19:ff:99:57:c6:63:
94:5a:55:68:62:e1:73:c6:18:2c:7f:a3:c3:17:16:
01:dd:33:cc:47:b1:0b:27:49:56:61:8a:1c:a8:33:
00:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AF:F1:47:BC:96:36:10:61:6C:E9:27:74:BA:16:C1:1A:C6:C3:C0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m6_xR7yWNhBhbOkndLoWwRrGw8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:62:e2:bf:81:92:46:da:64:f6:5d:dc:80:d0:d9:6e:8d:19:
70:0c:af:bd:c5:74:04:6a:4b:c4:6b:d1:ad:2a:2a:ec:37:c4:
c7:c6:12:30:87:02:7b:d8:85:65:85:b5:da:36:6c:5e:d4:67:
79:27:eb:08:a6:be:6c:29:3f:8b:32:a9:8e:a6:14:56:81:72:
5a:0f:19:3e:b9:ab:eb:82:c6:ca:54:a8:1e:a4:f8:fa:17:88:
68:ce:75:58:75:44:fe:db:00:0f:51:34:f2:d9:39:e6:47:96:
77:f1:78:88:dc:c4:d6:39:a0:c1:7c:19:2a:74:c6:0f:91:12:
af:50:39:92:a6:b4:c6:8b:0d:59:91:ab:e9:82:11:3d:19:b8:
fd:99:0b:1b:5d:f3:d3:78:ce:df:c3:14:83:a3:00:3c:a7:68:
87:86:c7:8d:fd:d8:6b:7a:33:76:5e:27:f7:1d:d7:cc:5c:0b:
25:eb:77:49:cf:22:58:08:a0:3d:21:14:f9:a2:05:76:01:58:
e7:d2:f7:51:73:90:50:cf:5b:f9:4d:26:54:e5:1e:48:ef:12:
6f:18:3e:55:b9:41:68:d0:16:4c:7b:5a:6a:2b:fb:97:b9:a3:
12:e7:9b:ec:36:22:ce:04:95:6a:fb:bc:96:92:9e:8f:d1:e1:
75:11:ed:f8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVR/IP8rU5aH0h94AUiopLlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjI3MDUwOTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmFmZjE0N2JjOTYzNjEwNjE2Y2U5Mjc3NGJhMTZjMTFhYzZjM2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDYCYHRj3JTAlXfrwgq1rRIkndA5
Jb46rj3Gocf/Jt83VBoELOOXk7xwxFz97nK6mr6wbhkCD1U8bkmLMbfFnUBdDHmh
KayLFIIC9Krh/d5lG02tQws92P3lX0xg5rpI38zu5HpzQq5lqtfuP9iPPU82c3nA
fHHLx0ItXfCCUrLjHg8+I+XzRAVcZ5uvDFfMKlDWw3qH8JJCt22PM4oXaXMXJd0l
9JDU2tlubxkzMsYn4jhdSSulPiMWZExhsJYmK46zHX/qCkirCC2DMfPTfcXPVqvF
T52vXEQZ/5lXxmOUWlVoYuFzxhgsf6PDFxYB3TPMR7ELJ0lWYYocqDMAYwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJuv8Ue8ljYQYWzpJ3S6FsEaxsPAMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbTZfeFI3eVdOaEJoYk9rbmRMb1d3UnJHdzhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFli4r+BkkbaZPZd3IDQ
2W6NGXAMr73FdARqS8Rr0a0qKuw3xMfGEjCHAnvYhWWFtdo2bF7UZ3kn6wimvmwp
P4syqY6mFFaBcloPGT65q+uCxspUqB6k+PoXiGjOdVh1RP7bAA9RNPLZOeZHlnfx
eIjcxNY5oMF8GSp0xg+REq9QOZKmtMaLDVmRq+mCET0ZuP2ZCxtd89N4zt/DFIOj
ADynaIeGx4392Gt6M3ZeJ/cd18xcCyXrd0nPIlgIoD0hFPmiBXYBWOfS91FzkFDP
W/lNJlTlHkjvEm8YPlW5QWjQFkx7Wmor+5e5oxLnm+w2Is4ElWr7vJaSno/R4XUR
7fg=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:15:23 2025 by rpki-client