Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a0KmPnJNaKMzI0-tGRChmKkoUQA.roa
File: a0KmPnJNaKMzI0-tGRChmKkoUQA.roa (raw, json)
Hash identifier: d24KG0v7XlQ/97gYAe1OD4tvH9Lldhst7hmk/0O2ilY=
Subject key identifier: 6B:42:A6:3E:72:4D:68:A3:33:23:4F:AD:19:10:A1:98:A9:28:51:00
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6D0A1430
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a0KmPnJNaKMzI0-tGRChmKkoUQA.roa
Signing time: Wed 23 Feb 2022 15:04:42 +0000
ROA not before: Wed 23 Feb 2022 15:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:271c:f0b0/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1829377072 (0x6d0a1430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 23 15:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b42a63e724d68a333234fad1910a198a9285100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:69:42:cd:38:8b:e1:54:44:dc:f9:a0:4d:
6e:1f:f8:e2:7e:bb:ff:ac:c2:05:09:11:84:9f:0d:
78:a3:1c:ad:3e:e6:dc:4a:e1:fa:f0:a1:01:0c:6d:
e1:83:18:e9:be:73:c1:39:2a:ac:2b:99:aa:29:26:
70:47:06:2a:49:f7:6e:a0:41:d9:86:17:c7:51:71:
21:41:df:4a:34:5b:c4:03:40:75:ab:69:f2:d6:2c:
2b:57:00:d0:76:a2:a9:9a:ed:c3:02:ec:72:f3:0e:
17:80:90:3b:68:56:2a:56:ee:ce:13:aa:14:5a:18:
75:3a:58:5b:8b:96:1d:c2:41:c2:72:d8:90:a4:c7:
35:7e:c9:60:79:ae:8f:f2:a5:c0:8f:e5:b9:91:68:
fe:25:27:e2:62:56:82:1a:dc:a7:ff:d7:fc:98:d5:
a6:f1:67:ca:8f:5b:e7:4d:a0:b4:bc:b0:3d:92:02:
2d:f3:54:e8:ac:ab:7d:91:1f:a4:2a:e4:11:49:2e:
54:ee:2f:8c:4e:cb:85:58:ad:3f:1b:4d:70:e2:15:
c2:d4:48:c1:4a:a4:2e:e0:b5:1b:97:af:65:d5:6b:
65:ab:a2:5b:58:c6:1c:f2:b7:b4:72:f3:07:77:d6:
49:51:01:56:e7:6e:ce:22:f6:39:ac:85:2e:d1:0f:
06:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:42:A6:3E:72:4D:68:A3:33:23:4F:AD:19:10:A1:98:A9:28:51:00
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a0KmPnJNaKMzI0-tGRChmKkoUQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:59:cc:19:d7:60:45:1e:f3:ac:e7:56:0e:de:ac:7e:5e:18:
a3:86:1f:c9:a1:7c:68:47:e9:72:9a:c1:8d:f0:56:e9:f6:9b:
c9:d0:f1:77:84:be:9d:57:13:5a:e3:80:4a:f3:f6:25:d9:43:
ac:30:90:6d:59:84:1c:36:d9:4d:bb:a5:15:fb:d6:f0:fd:20:
f8:8e:7c:1b:17:91:69:b3:18:b4:65:43:49:ee:84:d7:fc:60:
75:5d:e2:74:bb:2c:7b:c4:ef:ea:cc:03:cd:15:6d:5a:6f:57:
44:e7:39:97:d1:e0:59:4c:19:3d:01:c2:ed:73:ce:f9:c4:29:
d6:b0:d2:e1:ed:ba:8b:64:f0:5d:a3:c1:aa:eb:cc:74:ff:bb:
4a:5a:91:c9:ec:c9:c0:4a:c3:d3:c1:91:9e:30:b9:f5:09:3c:
a9:35:a3:e5:5d:05:5d:05:4a:2a:1a:1d:6b:7c:bf:7c:9a:a6:
d1:17:35:b7:02:41:9b:6f:21:76:42:a0:0d:30:45:91:bf:5c:
79:f7:21:71:7d:f2:48:9b:f1:92:59:e9:3c:e2:92:62:b6:15:
ca:56:54:48:98:03:69:48:d0:e4:fc:05:ae:7b:00:fb:c7:16:
fa:df:53:59:96:b3:0d:86:82:c2:fd:30:27:57:a6:71:ea:c7:
f6:90:af:85
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEbQoUMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIy
MzE1MDQ0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmI0MmE2M2U3MjRk
NjhhMzMzMjM0ZmFkMTkxMGExOThhOTI4NTEwMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALaWaULNOIvhVETc+aBNbh/44n67/6zCBQkRhJ8NeKMcrT7m
3Erh+vChAQxt4YMY6b5zwTkqrCuZqikmcEcGKkn3bqBB2YYXx1FxIUHfSjRbxANA
datp8tYsK1cA0HaiqZrtwwLscvMOF4CQO2hWKlbuzhOqFFoYdTpYW4uWHcJBwnLY
kKTHNX7JYHmuj/KlwI/luZFo/iUn4mJWghrcp//X/JjVpvFnyo9b502gtLywPZIC
LfNU6KyrfZEfpCrkEUkuVO4vjE7LhVitPxtNcOIVwtRIwUqkLuC1G5evZdVrZaui
W1jGHPK3tHLzB3fWSVEBVuduziL2OayFLtEPBrECAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRrQqY+ck1oozMjT60ZEKGYqShRADAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L2EwS21QbkpOYUtNekkwLXRHUkNobUtrb1VRQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAIWcwZ12BFHvOs51YO3qx+Xhijhh/JoXxoR+ly
msGN8Fbp9pvJ0PF3hL6dVxNa44BK8/Yl2UOsMJBtWYQcNtlNu6UV+9bw/SD4jnwb
F5Fpsxi0ZUNJ7oTX/GB1XeJ0uyx7xO/qzAPNFW1ab1dE5zmX0eBZTBk9AcLtc875
xCnWsNLh7bqLZPBdo8Gq68x0/7tKWpHJ7MnASsPTwZGeMLn1CTypNaPlXQVdBUoq
Gh1rfL98mqbRFzW3AkGbbyF2QqANMEWRv1x59yFxffJIm/GSWek84pJithXKVlRI
mANpSNDk/AWuewD7xxb631NZlrMNhoLC/TAnV6Zx6sf2kK+F
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:09:35 2025 by rpki-client