Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5_e6y01egbnS3VxojpalrioKZ-k.roa
File: 5_e6y01egbnS3VxojpalrioKZ-k.roa (raw, json)
Hash identifier: D8WzD7/ajZTsYyafk2iIosHLEKp2It1IdsvpZ7hXLsA=
Subject key identifier: E7:F7:BA:CB:4D:5E:81:B9:D2:DD:5C:68:8E:96:A5:AE:2A:0A:67:E9
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD686DBF74F7C035F336466A25FC4938B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5_e6y01egbnS3VxojpalrioKZ-k.roa
Signing time: Wed 27 Sep 2023 12:04:36 +0000
ROA not before: Wed 27 Sep 2023 12:04:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:d686:a8b2/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:86:db:f7:4f:7c:03:5f:33:64:66:a2:5f:c4:93:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 27 12:04:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7f7bacb4d5e81b9d2dd5c688e96a5ae2a0a67e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:62:c0:8d:60:10:63:19:c1:7e:1c:54:23:f8:
b7:a0:7b:c6:ff:b4:30:c4:69:63:5a:ae:8f:2e:33:
a5:3b:82:ba:8d:24:93:2a:cb:06:6b:f3:f5:5d:54:
a1:35:59:b2:59:7b:03:09:ca:ca:2a:c0:93:e0:45:
2d:65:1e:4e:3c:c9:f5:0f:2a:6f:52:2e:1f:3b:13:
38:a4:dc:cd:9f:9e:bd:2a:47:30:a4:2e:99:6a:d1:
20:60:16:73:b7:e5:61:30:ee:ed:12:0e:6a:7f:e8:
3b:68:90:7b:f4:2a:f8:6f:c1:ba:c6:87:b5:68:aa:
c0:09:81:a8:0d:4c:0b:2b:22:56:9d:f0:39:09:f1:
32:4a:43:68:2a:56:38:b1:bf:da:cc:c7:73:62:2c:
41:6e:bb:a4:aa:b1:42:11:8c:ce:41:e8:a2:47:24:
75:ce:78:2e:e0:b0:06:13:4b:84:ec:2e:35:c1:7b:
26:df:03:3a:63:80:5a:ab:ec:49:37:9b:d8:74:db:
55:d1:b2:12:38:17:58:5a:e1:97:bf:e4:86:b7:f4:
a3:31:8e:11:f5:17:e2:2b:ea:c9:7a:9d:5a:31:9e:
11:4c:7c:ab:df:2a:ec:1b:ba:39:c5:a2:73:a5:ba:
e0:d7:ba:48:eb:52:a6:32:8e:54:ff:14:64:67:6b:
e8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F7:BA:CB:4D:5E:81:B9:D2:DD:5C:68:8E:96:A5:AE:2A:0A:67:E9
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5_e6y01egbnS3VxojpalrioKZ-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:8b:c7:17:fa:75:8b:fb:9a:66:2b:d6:f0:b1:8f:cf:8d:30:
cc:92:81:86:f2:c4:dd:ac:80:de:37:5a:31:22:9c:64:21:10:
57:dd:f0:97:1a:f1:fc:da:7f:84:55:41:94:38:5f:7e:a8:ad:
3e:6b:90:97:f7:e0:34:79:f2:5c:bb:f0:74:2d:89:e0:05:85:
c8:d7:1f:af:df:22:6e:88:42:11:f6:7a:8e:1c:60:49:b7:51:
de:53:7a:f5:52:bd:23:d6:2d:ea:ee:c7:75:f8:87:b9:68:c4:
7b:96:fe:5e:8a:b5:e3:8d:fb:5b:a7:30:8f:f4:be:15:1f:d3:
99:86:e8:82:10:9e:a9:e0:d1:5a:c1:c1:80:98:5a:bb:c7:62:
f8:60:3e:87:72:e3:00:7e:46:06:53:73:9e:b4:aa:c2:27:9f:
d5:57:22:77:00:af:c5:3f:b1:5b:f7:1f:9d:4e:39:a5:c1:1b:
ba:e8:3d:b0:3c:1c:43:4d:1a:76:bd:0d:1f:41:ca:ad:d9:fc:
f0:4d:b2:58:75:43:ca:ec:6a:fc:2e:3f:3e:d0:44:5e:00:94:
43:7d:76:27:be:9b:68:5a:5b:26:b7:46:93:8d:d1:56:d8:b8:
44:4c:45:1f:02:71:ca:0b:c6:08:af:3f:48:3d:07:ff:fe:e0:
70:36:75:a9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrWhtv3T3wDXzNkZqJfxJOLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTI3MTIwNDM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2Y3YmFjYjRkNWU4MWI5ZDJkZDVjNjg4ZTk2YTVhZTJhMGE2N2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8WLAjWAQYxnBfhxUI/i3oHvG/7Qw
xGljWq6PLjOlO4K6jSSTKssGa/P1XVShNVmyWXsDCcrKKsCT4EUtZR5OPMn1Dypv
Ui4fOxM4pNzNn569KkcwpC6ZatEgYBZzt+VhMO7tEg5qf+g7aJB79Cr4b8G6xoe1
aKrACYGoDUwLKyJWnfA5CfEySkNoKlY4sb/azMdzYixBbrukqrFCEYzOQeiiRyR1
zngu4LAGE0uE7C41wXsm3wM6Y4Baq+xJN5vYdNtV0bISOBdYWuGXv+SGt/SjMY4R
9RfiK+rJep1aMZ4RTHyr3yrsG7o5xaJzpbrg17pI61KmMo5U/xRkZ2votwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOf3ustNXoG50t1caI6Wpa4qCmfpMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvNV9lNnkwMWVnYm5TM1Z4b2pwYWxyaW9LWi1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH2Lxxf6dYv7mmYr1vCx
j8+NMMySgYbyxN2sgN43WjEinGQhEFfd8Jca8fzaf4RVQZQ4X36orT5rkJf34DR5
8ly78HQtieAFhcjXH6/fIm6IQhH2eo4cYEm3Ud5TevVSvSPWLerux3X4h7loxHuW
/l6KteON+1unMI/0vhUf05mG6IIQnqng0VrBwYCYWrvHYvhgPody4wB+RgZTc560
qsInn9VXIncAr8U/sVv3H51OOaXBG7roPbA8HENNGna9DR9Byq3Z/PBNslh1Q8rs
avwuPz7QRF4AlEN9die+m2haWya3RpON0VbYuERMRR8CccoLxgivP0g9B//+4HA2
dak=
-----END CERTIFICATE-----
Generated at Tue Jun 17 02:48:24 2025 by rpki-client