Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m6cjPEeWBqaLb_h4qUQ_BNRbe9c.roa
File: m6cjPEeWBqaLb_h4qUQ_BNRbe9c.roa (raw, json)
Hash identifier: fZ9sj052/1oi3GJ1AiUDA+XOu9NehE4vnQNgeN3aQWM=
Subject key identifier: 9B:A7:23:3C:47:96:06:A6:8B:6F:F8:78:A9:44:3F:04:D4:5B:7B:D7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01862145D48D902A8A7FF5A14DEC156579D6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m6cjPEeWBqaLb_h4qUQ_BNRbe9c.roa
Signing time: Sun 05 Feb 2023 11:11:09 +0000
ROA not before: Sun 05 Feb 2023 11:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:21:45:d4:8d:90:2a:8a:7f:f5:a1:4d:ec:15:65:79:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 5 11:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ba7233c479606a68b6ff878a9443f04d45b7bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:e3:ed:00:7a:ce:40:9d:6d:d8:ac:4c:56:
58:85:8a:8a:eb:2e:73:28:05:93:f9:63:cb:0d:ad:
d1:86:e1:42:31:a1:e8:72:fa:8f:33:86:a5:d9:10:
8a:38:67:f7:b0:76:03:c3:23:80:38:41:46:cd:82:
e3:07:fa:d6:26:ab:af:86:67:35:c6:ac:b4:76:9b:
89:7f:a4:08:4e:21:1e:76:d5:30:30:e3:61:cf:92:
29:fd:5d:9d:11:2a:c5:55:d9:7f:9c:54:21:bf:68:
c1:70:0b:28:8d:d2:f0:84:29:23:73:81:db:5d:d0:
91:1f:45:3b:c7:a1:fc:cd:96:92:9e:3f:3a:33:08:
bf:1e:40:85:5e:50:a8:21:88:2f:eb:d0:d8:4f:4e:
5d:0b:b9:44:8d:19:cd:1c:f2:b0:f2:c4:be:44:1d:
e6:17:ae:8c:37:78:3e:c4:ee:87:77:1b:6d:30:2a:
c8:ae:88:1d:9a:85:2d:66:86:63:62:fc:a6:47:ff:
41:43:0d:65:13:ca:89:4c:d7:0d:6d:c7:59:28:7d:
5a:bc:c7:2a:aa:a2:39:53:1d:8c:46:bd:19:40:fa:
3c:5a:57:6c:13:ad:b7:21:61:f1:fe:f2:34:81:ad:
3c:24:ba:8d:bf:79:3e:a8:04:71:9e:de:ba:12:b8:
01:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A7:23:3C:47:96:06:A6:8B:6F:F8:78:A9:44:3F:04:D4:5B:7B:D7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m6cjPEeWBqaLb_h4qUQ_BNRbe9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:b8:14:f1:89:45:28:23:b3:67:e7:5f:3c:80:b5:92:8d:1a:
82:a6:e8:e0:2e:49:38:f7:3c:90:f6:19:60:65:29:0b:8f:f3:
9c:c3:a8:ad:be:1a:eb:0f:07:e9:b7:39:62:0f:db:4e:51:e0:
1e:6c:04:32:7f:ae:ca:7d:ec:80:56:3f:34:35:06:6d:3a:7c:
e5:f0:dc:ce:6f:8a:f2:57:e9:a1:ee:05:8b:a3:f6:e9:81:d7:
c9:ef:6f:2e:aa:84:96:a1:d1:99:c3:24:76:96:5a:e4:05:c1:
e7:08:37:91:6e:7d:dc:45:e6:0f:b3:fe:b6:17:10:35:45:ab:
b4:09:ea:cd:2d:02:e3:52:e8:33:08:2e:d2:42:79:b9:b6:3e:
db:01:9e:d8:34:7f:25:2a:72:0b:e1:e6:1e:28:cd:f0:fa:e2:
6b:6c:38:68:d0:05:6b:0a:54:bd:21:6b:49:32:d1:d5:2c:c1:
52:43:3c:4c:35:c9:7a:33:68:6f:29:8d:23:01:7f:ff:15:ff:
27:98:af:db:17:23:df:9d:59:bb:c1:33:02:99:e9:cc:af:d6:
40:be:53:98:26:ae:e1:52:9c:aa:5b:51:a7:b8:5f:1a:ac:e9:
bf:77:48:5c:06:31:e3:79:59:10:01:f8:f8:fa:66:61:61:79:
91:01:49:48
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYYhRdSNkCqKf/WhTewVZXnWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjA1MTExMTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmE3MjMzYzQ3OTYwNmE2OGI2ZmY4NzhhOTQ0M2YwNGQ0NWI3YmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri3j7QB6zkCdbdisTFZYhYqK6y5z
KAWT+WPLDa3RhuFCMaHocvqPM4al2RCKOGf3sHYDwyOAOEFGzYLjB/rWJquvhmc1
xqy0dpuJf6QITiEedtUwMONhz5Ip/V2dESrFVdl/nFQhv2jBcAsojdLwhCkjc4Hb
XdCRH0U7x6H8zZaSnj86Mwi/HkCFXlCoIYgv69DYT05dC7lEjRnNHPKw8sS+RB3m
F66MN3g+xO6HdxttMCrIrogdmoUtZoZjYvymR/9BQw1lE8qJTNcNbcdZKH1avMcq
qqI5Ux2MRr0ZQPo8WldsE623IWHx/vI0ga08JLqNv3k+qARxnt66ErgB6wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJunIzxHlgami2/4eKlEPwTUW3vXMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbTZjalBFZVdCcWFMYl9oNHFVUV9CTlJiZTljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG24FPGJRSgjs2fnXzyA
tZKNGoKm6OAuSTj3PJD2GWBlKQuP85zDqK2+GusPB+m3OWIP205R4B5sBDJ/rsp9
7IBWPzQ1Bm06fOXw3M5vivJX6aHuBYuj9umB18nvby6qhJah0ZnDJHaWWuQFwecI
N5FufdxF5g+z/rYXEDVFq7QJ6s0tAuNS6DMILtJCebm2PtsBntg0fyUqcgvh5h4o
zfD64mtsOGjQBWsKVL0ha0ky0dUswVJDPEw1yXozaG8pjSMBf/8V/yeYr9sXI9+d
WbvBMwKZ6cyv1kC+U5gmruFSnKpbUae4Xxqs6b93SFwGMeN5WRAB+Pj6ZmFheZEB
SUg=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:04 2025 by rpki-client