Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s6OznWP6zNgvaSAM3Cu1FrwUW08.roa
File: s6OznWP6zNgvaSAM3Cu1FrwUW08.roa (raw, json)
Hash identifier: hT7/WTHQuGwGQqE1neK1gAEDaVZnaMUQvrywFFSKYaE=
Subject key identifier: B3:A3:B3:9D:63:FA:CC:D8:2F:69:20:0C:DC:2B:B5:16:BC:14:5B:4F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A39758C6288617E67A71EC5381004D61E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s6OznWP6zNgvaSAM3Cu1FrwUW08.roa
Signing time: Mon 28 Aug 2023 00:05:19 +0000
ROA not before: Mon 28 Aug 2023 00:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:3974:a73a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:39:75:8c:62:88:61:7e:67:a7:1e:c5:38:10:04:d6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 28 00:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3a3b39d63faccd82f69200cdc2bb516bc145b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a2:22:8b:3f:d5:1a:0c:6e:b9:b3:c6:0c:1b:
f1:f1:96:8b:0c:f0:25:b3:4e:10:2b:63:88:d5:78:
40:9d:88:d8:c8:cc:85:1e:98:0f:31:18:d6:08:7f:
da:10:35:ce:bf:20:ab:5e:f4:83:e7:78:c4:d2:cd:
a4:c5:10:61:58:ae:1a:be:af:6a:c2:7f:25:7b:27:
51:02:d2:81:7f:ac:ce:b1:17:37:01:c3:a8:79:9a:
ed:6c:11:22:29:f0:3e:19:77:ea:30:07:24:3c:31:
65:30:57:25:00:0b:c3:71:4f:c7:1e:9a:15:56:49:
a8:a5:7b:6b:e3:5c:e7:00:53:2d:c9:9d:b3:c6:cd:
cb:01:2c:9c:2d:f3:fd:16:50:e3:e9:f2:0d:9f:11:
e5:1b:98:37:4d:1e:d2:d0:2c:67:1b:bd:39:82:ae:
bf:f6:53:31:7d:ca:90:35:72:fe:a1:6f:64:fb:4b:
60:f9:24:a8:57:c1:c5:a5:de:cb:4d:41:17:9c:a5:
0c:fb:43:43:ec:27:ba:57:f6:a5:8c:60:79:73:91:
b9:14:80:0d:b8:c7:68:8f:b6:c9:48:04:22:27:56:
21:63:ec:87:f8:f8:37:7c:5b:32:37:d3:d9:b3:c4:
ac:fa:a8:ad:3b:95:59:09:9a:a5:4b:af:a2:10:14:
0c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A3:B3:9D:63:FA:CC:D8:2F:69:20:0C:DC:2B:B5:16:BC:14:5B:4F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s6OznWP6zNgvaSAM3Cu1FrwUW08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:fc:36:ac:5f:d7:e6:16:70:b8:2e:b0:d0:31:40:11:f4:69:
86:44:3f:54:c1:ef:4d:4e:a3:ea:99:df:be:59:b7:ea:1e:33:
55:73:7b:20:4a:ad:d5:82:78:13:47:32:c5:de:05:17:85:75:
10:c7:f5:7c:92:65:7a:53:2e:bb:1f:0d:7a:41:0c:2e:c4:e5:
36:40:89:b9:6a:eb:4a:43:90:1e:a0:2e:ca:7b:ae:d0:0a:a5:
fe:cf:41:35:8d:ca:be:02:a3:9b:7b:a6:26:3a:2f:5b:4b:8c:
cc:94:ac:d2:65:86:c9:92:69:83:15:d1:24:67:3b:52:54:71:
99:16:3d:78:87:14:a4:3d:6f:eb:6c:de:b6:4a:c8:d5:99:1f:
61:4c:a5:36:89:fc:dd:f4:17:9f:76:5f:1f:44:d0:22:c6:59:
ff:64:b8:97:59:c7:50:45:79:a6:88:56:b9:d9:9d:52:0f:7b:
c0:d3:65:8d:fc:dd:2a:dd:ca:40:c0:0f:21:a6:0a:86:6e:f5:
12:98:0f:38:e6:45:77:2e:ff:b1:57:2b:2f:9f:69:e4:2a:1a:
d3:66:00:a6:40:13:08:a9:4e:57:50:b8:25:44:d0:97:f5:11:
82:18:8a:b5:36:a8:81:07:e1:f9:c2:a4:c6:9f:f4:42:b7:65:
5a:3e:52:dd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYo5dYxiiGF+Z6cexTgQBNYeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODI4MDAwNTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2EzYjM5ZDYzZmFjY2Q4MmY2OTIwMGNkYzJiYjUxNmJjMTQ1YjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKIiiz/VGgxuubPGDBvx8ZaLDPAl
s04QK2OI1XhAnYjYyMyFHpgPMRjWCH/aEDXOvyCrXvSD53jE0s2kxRBhWK4avq9q
wn8leydRAtKBf6zOsRc3AcOoeZrtbBEiKfA+GXfqMAckPDFlMFclAAvDcU/HHpoV
VkmopXtr41znAFMtyZ2zxs3LASycLfP9FlDj6fINnxHlG5g3TR7S0CxnG705gq6/
9lMxfcqQNXL+oW9k+0tg+SSoV8HFpd7LTUEXnKUM+0ND7Ce6V/aljGB5c5G5FIAN
uMdoj7bJSAQiJ1YhY+yH+Pg3fFsyN9PZs8Ss+qitO5VZCZqlS6+iEBQM/wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLOjs51j+szYL2kgDNwrtRa8FFtPMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvczZPem5XUDZ6Tmd2YVNBTTNDdTFGcndVVzA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEr8Nqxf1+YWcLgusNAx
QBH0aYZEP1TB701Oo+qZ375Zt+oeM1VzeyBKrdWCeBNHMsXeBReFdRDH9XySZXpT
LrsfDXpBDC7E5TZAiblq60pDkB6gLsp7rtAKpf7PQTWNyr4Co5t7piY6L1tLjMyU
rNJlhsmSaYMV0SRnO1JUcZkWPXiHFKQ9b+ts3rZKyNWZH2FMpTaJ/N30F592Xx9E
0CLGWf9kuJdZx1BFeaaIVrnZnVIPe8DTZY383SrdykDADyGmCoZu9RKYDzjmRXcu
/7FXKy+faeQqGtNmAKZAEwipTldQuCVE0Jf1EYIYirU2qIEH4fnCpMaf9EK3ZVo+
Ut0=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:27:40 2025 by rpki-client