Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6B2cPkml5H-qKYY9am5wsac59pc.roa
File: 6B2cPkml5H-qKYY9am5wsac59pc.roa (raw, json)
Hash identifier: jl5bdMvNjVWC0ODBO4W6s9HX8NB5cPHlMWohWs2CJOs=
Subject key identifier: E8:1D:9C:3E:49:A5:E4:7F:AA:29:86:3D:6A:6E:70:B1:A7:39:F6:97
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187BB1BEB68A163B8702A9954660C037D17
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6B2cPkml5H-qKYY9am5wsac59pc.roa
Signing time: Wed 26 Apr 2023 01:09:41 +0000
ROA not before: Wed 26 Apr 2023 01:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bb:1b:eb:68:a1:63:b8:70:2a:99:54:66:0c:03:7d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 26 01:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e81d9c3e49a5e47faa29863d6a6e70b1a739f697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:02:6c:d0:32:5a:02:2d:74:aa:bc:20:f9:
dd:23:a1:fa:24:a1:4b:88:73:eb:07:9b:e6:5f:87:
f8:5b:70:9a:b4:7e:54:1f:39:ed:eb:2f:f7:3e:e0:
aa:30:b1:eb:08:dd:19:0c:4b:f9:57:fa:fa:83:4c:
70:e9:d3:8c:77:cf:68:5d:8f:2a:83:0d:f3:bc:02:
e3:10:2d:b2:df:47:03:91:71:ef:36:12:34:0c:f3:
3a:87:32:cd:d1:84:6f:3c:67:3c:5b:21:08:79:b7:
11:2f:2d:6b:2e:b9:11:30:9c:37:b1:cc:1d:11:3f:
88:17:68:eb:e4:9b:b2:1e:46:80:f3:a4:ee:23:6a:
e3:79:73:00:6c:d7:59:b0:40:f3:15:c8:32:c9:b9:
d6:70:48:16:f5:e7:59:fa:8b:7d:97:7c:4b:00:6a:
cd:58:83:16:31:3e:ea:5d:fe:98:40:b4:33:7c:d1:
a6:d2:74:e9:df:c0:ad:da:ee:c3:48:ee:b1:46:8c:
82:2a:c4:6f:53:30:cb:a0:ed:be:e8:ff:a1:2c:b7:
c8:8b:84:69:a5:39:20:74:ea:34:1d:0e:4a:57:42:
2f:cc:88:fc:fe:08:30:31:9b:a7:e5:52:d1:7e:63:
1a:92:5e:b2:f6:7d:72:92:7c:c6:19:a6:06:14:57:
7c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1D:9C:3E:49:A5:E4:7F:AA:29:86:3D:6A:6E:70:B1:A7:39:F6:97
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6B2cPkml5H-qKYY9am5wsac59pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:81:ee:32:49:a5:cf:de:c2:3b:cd:f9:5d:4b:6a:aa:3a:28:
19:ad:43:9e:81:fd:b7:98:8b:90:f7:08:30:1c:20:79:48:4f:
19:1c:3f:14:0f:b9:ed:fb:3f:88:9a:b2:33:b1:52:e4:23:df:
42:eb:13:a1:85:fe:4d:c0:c7:3d:78:13:6a:6d:ae:96:b4:a7:
cc:b7:16:c6:1d:44:c1:fd:72:3a:5f:36:0b:7c:d7:4a:0e:fe:
b4:39:27:1e:01:ec:26:5c:26:19:5d:c5:87:84:37:61:26:b0:
17:98:72:2c:e7:1b:af:a1:27:69:06:06:a0:fb:62:f9:c4:87:
08:42:f1:00:8d:0e:4e:55:96:8a:ec:3f:9f:81:3f:48:49:5c:
f5:45:ba:39:06:c2:08:56:24:9f:11:cb:e0:a8:db:cb:9c:82:
05:69:e9:b3:09:d9:7e:21:b1:8a:26:42:6d:f1:63:29:a5:2e:
da:99:2d:0d:75:e0:03:bf:9e:b2:dc:f0:c8:52:a6:8a:37:61:
97:03:ae:af:91:91:a2:e8:c5:9d:58:d1:ae:58:75:80:21:2f:
20:00:e0:0b:a5:cd:38:11:5c:d7:4a:f3:26:21:8d:ba:d7:60:
b8:6f:40:fe:ff:82:17:5e:c3:06:f2:f5:52:18:a1:c2:e5:99:
44:08:9c:e8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYe7G+tooWO4cCqZVGYMA30XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDI2MDEwOTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODFkOWMzZTQ5YTVlNDdmYWEyOTg2M2Q2YTZlNzBiMWE3MzlmNjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAookCbNAyWgItdKq8IPndI6H6JKFL
iHPrB5vmX4f4W3CatH5UHznt6y/3PuCqMLHrCN0ZDEv5V/r6g0xw6dOMd89oXY8q
gw3zvALjEC2y30cDkXHvNhI0DPM6hzLN0YRvPGc8WyEIebcRLy1rLrkRMJw3scwd
ET+IF2jr5JuyHkaA86TuI2rjeXMAbNdZsEDzFcgyybnWcEgW9edZ+ot9l3xLAGrN
WIMWMT7qXf6YQLQzfNGm0nTp38Ct2u7DSO6xRoyCKsRvUzDLoO2+6P+hLLfIi4Rp
pTkgdOo0HQ5KV0IvzIj8/ggwMZun5VLRfmMakl6y9n1yknzGGaYGFFd8vwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOgdnD5JpeR/qimGPWpucLGnOfaXMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNkIyY1BrbWw1SC1xS1lZOWFtNXdzYWM1OXBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEuB7jJJpc/ewjvN+V1L
aqo6KBmtQ56B/beYi5D3CDAcIHlITxkcPxQPue37P4iasjOxUuQj30LrE6GF/k3A
xz14E2ptrpa0p8y3FsYdRMH9cjpfNgt810oO/rQ5Jx4B7CZcJhldxYeEN2EmsBeY
ciznG6+hJ2kGBqD7YvnEhwhC8QCNDk5VlorsP5+BP0hJXPVFujkGwghWJJ8Ry+Co
28ucggVp6bMJ2X4hsYomQm3xYymlLtqZLQ114AO/nrLc8MhSpoo3YZcDrq+RkaLo
xZ1Y0a5YdYAhLyAA4AulzTgRXNdK8yYhjbrXYLhvQP7/ghdewwby9VIYocLlmUQI
nOg=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:11:01 2025 by rpki-client