Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uoS6E_w_zX_A5-yLHxf5cvy-6Hk.roa
File: uoS6E_w_zX_A5-yLHxf5cvy-6Hk.roa (raw, json)
Hash identifier: JRomDNs7pK9JO/mBIDDlDTS36n8/wj+5PGN42KRx28I=
Subject key identifier: BA:84:BA:13:FC:3F:CD:7F:C0:E7:EC:8B:1F:17:F9:72:FC:BE:E8:79
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6665AB7E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uoS6E_w_zX_A5-yLHxf5cvy-6Hk.roa
Signing time: Sun 30 Jan 2022 16:10:31 +0000
ROA not before: Sun 30 Jan 2022 16:10:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1717939070 (0x6665ab7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 30 16:10:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba84ba13fc3fcd7fc0e7ec8b1f17f972fcbee879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8f:6e:ec:d6:c5:2c:f3:e5:ef:d3:f3:7e:43:
e4:59:ff:42:3b:ee:da:95:10:b7:5b:c7:cd:ae:f9:
86:76:7e:a3:8c:17:b4:16:e3:60:cc:3c:b0:b7:f0:
e7:ff:a8:5e:77:c1:db:cb:cd:76:6b:04:ee:8f:87:
8e:90:d2:d1:20:bf:31:c3:d0:d4:6e:52:c6:3e:4b:
46:9c:86:67:b4:af:f3:a0:29:85:74:7d:fa:64:05:
a3:7d:6f:95:c2:88:bf:b4:4d:34:10:45:ba:81:b0:
e4:c3:aa:8f:e4:5a:78:38:ce:9c:35:25:cc:84:2e:
0d:f1:f0:b2:5f:af:da:ab:d3:23:59:07:e1:d9:19:
e4:1c:4c:e1:2c:0e:3b:9a:e5:79:8e:23:0e:7c:0b:
ee:45:e8:93:4b:51:19:7e:6c:ec:33:1c:60:c9:4c:
29:8a:7f:f8:b2:63:94:39:ba:20:1d:8b:85:3a:90:
47:2c:93:5c:b8:6a:f7:c8:db:b0:98:55:2c:3e:6c:
8f:8e:bc:67:80:94:59:3b:8f:f5:6d:b1:b2:83:ec:
13:03:44:7c:11:ce:80:d1:9b:17:55:29:06:4d:9f:
01:35:63:c9:a1:63:e1:45:a7:02:7f:6b:9e:3d:af:
28:2c:6f:19:79:13:83:3e:8b:fc:cc:82:3a:9f:46:
9b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:84:BA:13:FC:3F:CD:7F:C0:E7:EC:8B:1F:17:F9:72:FC:BE:E8:79
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uoS6E_w_zX_A5-yLHxf5cvy-6Hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:bb:99:6e:0a:36:bf:9a:af:54:20:6f:10:34:91:b8:b4:0a:
1c:2f:f9:4e:61:5b:a1:88:ce:04:fe:bd:da:d2:5d:e6:20:07:
94:23:82:6f:fb:6c:5c:68:68:7d:f7:cf:1f:4a:e1:c9:b1:cb:
a9:78:84:b5:ee:23:de:58:dd:3e:60:fe:53:a0:bc:a3:db:b1:
09:89:db:8b:dd:81:17:c0:12:31:2a:6d:3b:ea:83:2b:eb:87:
d6:bd:cb:bf:bf:2d:81:11:c2:fd:7c:3c:17:00:81:df:b1:7d:
0d:e3:67:81:d6:45:f8:dc:08:f5:b5:03:fd:1b:ef:68:75:ac:
60:cb:ee:01:35:6b:65:39:57:08:4c:06:96:22:2c:49:77:f6:
8e:55:9e:36:ea:d5:ce:5d:00:10:f3:4d:67:21:9e:cd:af:cc:
94:e0:32:2b:01:3a:58:97:d5:dd:85:0d:b5:39:a2:61:b4:6c:
e8:26:8a:66:c2:34:a2:fc:78:93:f7:04:b7:65:d2:07:ca:0a:
a2:4a:45:02:f9:02:fb:48:b3:e0:e2:d5:de:7b:4d:6d:31:d0:
62:8c:8b:c9:a3:7c:f3:d1:ed:fb:13:7c:a5:ab:80:40:8d:90:
e5:25:55:1d:6b:60:a3:a9:10:a7:d8:79:d8:c8:5f:bb:67:66:
0a:ba:a8:1a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEZmWrfjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDEz
MDE2MTAzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmE4NGJhMTNmYzNm
Y2Q3ZmMwZTdlYzhiMWYxN2Y5NzJmY2JlZTg3OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOiPbuzWxSzz5e/T835D5Fn/Qjvu2pUQt1vHza75hnZ+o4wX
tBbjYMw8sLfw5/+oXnfB28vNdmsE7o+HjpDS0SC/McPQ1G5Sxj5LRpyGZ7Sv86Ap
hXR9+mQFo31vlcKIv7RNNBBFuoGw5MOqj+RaeDjOnDUlzIQuDfHwsl+v2qvTI1kH
4dkZ5BxM4SwOO5rleY4jDnwL7kXok0tRGX5s7DMcYMlMKYp/+LJjlDm6IB2LhTqQ
RyyTXLhq98jbsJhVLD5sj468Z4CUWTuP9W2xsoPsEwNEfBHOgNGbF1UpBk2fATVj
yaFj4UWnAn9rnj2vKCxvGXkTgz6L/MyCOp9GmwUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBS6hLoT/D/Nf8Dn7IsfF/ly/L7oeTAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L3VvUzZFX3dfelhfQTUteUxIeGY1Y3Z5LTZIay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCDu5luCja/mq9UIG8QNJG4tAocL/lOYVuhiM4E
/r3a0l3mIAeUI4Jv+2xcaGh9988fSuHJscupeIS17iPeWN0+YP5ToLyj27EJiduL
3YEXwBIxKm076oMr64fWvcu/vy2BEcL9fDwXAIHfsX0N42eB1kX43Aj1tQP9G+9o
daxgy+4BNWtlOVcITAaWIixJd/aOVZ426tXOXQAQ801nIZ7Nr8yU4DIrATpYl9Xd
hQ21OaJhtGzoJopmwjSi/HiT9wS3ZdIHygqiSkUC+QL7SLPg4tXee01tMdBijIvJ
o3zz0e37E3ylq4BAjZDlJVUda2CjqRCn2HnYyF+7Z2YKuqga
-----END CERTIFICATE-----
Generated at Fri May 2 09:15:11 2025 by rpki-client