Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6ZSmG5_bd9L6r9cdinzqOpD071o.roa
File: 6ZSmG5_bd9L6r9cdinzqOpD071o.roa (raw, json)
Hash identifier: GV8VUg3iJH2Vhasd1TxCezzNLd2wTRX5MciBj7PAhXw=
Subject key identifier: E9:94:A6:1B:9F:DB:77:D2:FA:AF:D7:1D:8A:7C:EA:3A:90:F4:EF:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018688F04D98C367DE0E0E80A910B34A7BE0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6ZSmG5_bd9L6r9cdinzqOpD071o.roa
Signing time: Sat 25 Feb 2023 14:18:15 +0000
ROA not before: Sat 25 Feb 2023 14:18:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:88:f0:4d:98:c3:67:de:0e:0e:80:a9:10:b3:4a:7b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 25 14:18:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e994a61b9fdb77d2faafd71d8a7cea3a90f4ef5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b8:58:0f:0a:93:51:a7:f7:cd:6c:52:44:75:
bc:99:28:e2:c4:9d:30:94:38:4d:f1:fa:8e:5f:55:
f0:cd:a0:0e:43:c8:df:c8:54:ee:82:b1:82:b0:25:
08:b1:1f:02:f5:a1:7a:2f:ae:f8:bb:68:8d:32:64:
4a:7a:24:31:cf:ea:d1:65:ed:94:ae:cf:26:59:96:
45:8e:e5:d9:25:4c:26:71:32:d8:59:88:ca:85:cb:
73:a8:1e:2f:46:d9:49:aa:0e:76:17:33:66:f3:57:
cb:47:fe:00:23:cb:e6:2f:f7:67:42:ee:cb:ce:0f:
3f:55:22:b7:55:0b:56:48:5f:4f:49:14:98:45:22:
fc:23:fd:9b:8e:50:0a:26:fa:bc:a9:65:fb:9e:06:
f7:07:b2:e4:a6:2c:06:8b:54:93:6e:b8:9a:b1:52:
c6:e1:d0:df:58:a8:2b:19:a4:f2:b5:0e:43:a1:ad:
8b:db:b7:60:df:43:a3:86:6a:be:8b:b0:63:f3:95:
69:9b:2d:ef:66:bd:47:e8:63:73:a6:f3:06:f8:21:
e6:b9:c5:62:e4:bd:bf:f8:2e:3d:eb:d6:87:7f:3d:
4e:82:a5:f4:f3:db:5e:71:97:7e:0a:62:ad:03:86:
de:48:e3:b1:58:90:bf:4b:8c:e8:ee:17:24:61:0f:
9a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:94:A6:1B:9F:DB:77:D2:FA:AF:D7:1D:8A:7C:EA:3A:90:F4:EF:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6ZSmG5_bd9L6r9cdinzqOpD071o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:16:47:37:46:75:26:b2:46:d1:96:e1:1c:d7:0f:be:d5:de:
4a:59:3b:8c:cf:0d:95:fd:54:3a:8d:80:a7:de:e0:7b:da:7c:
e6:f6:51:53:ae:18:6d:4e:e8:91:a8:9f:f1:70:4c:8a:a3:9c:
59:3f:df:21:72:b7:ad:24:a9:7d:8f:7a:da:df:d6:7e:f1:c2:
58:f7:e5:49:30:72:89:d7:3a:7a:2c:04:20:eb:81:b7:93:26:
c0:42:d2:c1:e1:90:ad:10:88:6f:6c:d1:01:ab:02:75:e6:3f:
00:07:cd:dd:6c:68:fe:0c:a7:53:9f:73:07:8f:6c:0f:f5:c3:
72:ef:6d:c5:1f:2c:e4:37:c1:7c:6a:53:66:23:e7:5b:a5:6c:
9a:ea:24:a9:25:ca:8f:76:ed:fb:ef:6a:80:0d:25:dc:0e:7c:
07:c2:1b:9a:aa:31:ce:8b:1a:bc:fd:04:a5:ae:dd:05:eb:bf:
30:e4:e1:2b:73:4c:1a:44:2b:87:9c:2c:aa:73:a4:e4:59:c0:
cb:2d:9e:4c:14:99:21:75:1d:eb:28:21:a2:86:8e:d4:d7:49:
eb:6c:ab:b2:01:b0:c6:50:98:8e:69:46:43:7e:03:ce:51:aa:
d9:3e:b6:65:db:4a:5a:43:97:9d:8f:6e:32:7e:57:7c:6a:93:
15:14:37:2b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaI8E2Yw2feDg6AqRCzSnvgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjI1MTQxODE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTk0YTYxYjlmZGI3N2QyZmFhZmQ3MWQ4YTdjZWEzYTkwZjRlZjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7hYDwqTUaf3zWxSRHW8mSjixJ0w
lDhN8fqOX1XwzaAOQ8jfyFTugrGCsCUIsR8C9aF6L674u2iNMmRKeiQxz+rRZe2U
rs8mWZZFjuXZJUwmcTLYWYjKhctzqB4vRtlJqg52FzNm81fLR/4AI8vmL/dnQu7L
zg8/VSK3VQtWSF9PSRSYRSL8I/2bjlAKJvq8qWX7ngb3B7LkpiwGi1STbriasVLG
4dDfWKgrGaTytQ5Doa2L27dg30Ojhmq+i7Bj85Vpmy3vZr1H6GNzpvMG+CHmucVi
5L2/+C4969aHfz1OgqX089tecZd+CmKtA4beSOOxWJC/S4zo7hckYQ+aCQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOmUphuf23fS+q/XHYp86jqQ9O9aMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNlpTbUc1X2JkOUw2cjljZGluenFPcEQwNzFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADYWRzdGdSayRtGW4RzX
D77V3kpZO4zPDZX9VDqNgKfe4HvafOb2UVOuGG1O6JGon/FwTIqjnFk/3yFyt60k
qX2Petrf1n7xwlj35UkwconXOnosBCDrgbeTJsBC0sHhkK0QiG9s0QGrAnXmPwAH
zd1saP4Mp1OfcwePbA/1w3LvbcUfLOQ3wXxqU2Yj51ulbJrqJKklyo927fvvaoAN
JdwOfAfCG5qqMc6LGrz9BKWu3QXrvzDk4StzTBpEK4ecLKpzpORZwMstnkwUmSF1
HesoIaKGjtTXSetsq7IBsMZQmI5pRkN+A85Rqtk+tmXbSlpDl52PbjJ+V3xqkxUU
Nys=
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:13:12 2025 by rpki-client