Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-c6MaMc_OSWcAHGlx5__KrvQEU8.roa
File: 1-c6MaMc_OSWcAHGlx5__KrvQEU8.roa (raw, json)
Hash identifier: eGDPfsfVqOwwI8nBXhQtd8bXg7VltvUEI9YGlLoumzM=
Subject key identifier: F9:CE:8C:68:C7:3F:39:25:9C:00:71:A5:C7:9F:FF:2A:BB:D0:11:4F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187FDA211390FC5C857F38A18478DFA6710
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-c6MaMc_OSWcAHGlx5__KrvQEU8.roa
Signing time: Mon 08 May 2023 23:11:09 +0000
ROA not before: Mon 08 May 2023 23:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fd:a2:11:39:0f:c5:c8:57:f3:8a:18:47:8d:fa:67:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 8 23:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9ce8c68c73f39259c0071a5c79fff2abbd0114f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:86:28:c3:07:85:aa:b9:21:79:fc:39:56:
33:58:19:29:84:3a:1c:91:07:93:48:e9:d5:94:e8:
a5:38:37:f4:dc:31:68:ed:45:6e:8d:4d:b1:20:ae:
4f:d3:05:b0:f5:38:25:1b:4b:5e:96:a4:9b:ba:48:
7c:e3:2c:d6:fb:44:8c:ed:06:f0:72:59:44:e8:11:
16:0c:85:5c:78:03:de:82:32:c2:16:22:62:ce:bc:
80:e7:a8:ac:f5:56:ec:17:4a:f5:7b:28:8b:94:05:
06:34:66:b0:48:82:9c:b2:13:2b:03:e5:31:df:1b:
63:7b:fa:67:ec:8d:4a:32:a2:03:57:ec:96:55:f8:
40:82:ce:6c:cd:15:97:69:e9:a0:17:45:f7:75:c5:
d2:ba:bf:a8:a6:f1:18:f9:9e:78:f8:32:dd:b7:30:
16:6c:e9:2c:08:78:4f:0d:b0:38:77:01:65:d2:f9:
89:e1:11:35:e2:26:30:da:19:c4:eb:b2:67:97:ee:
f5:5a:ba:39:4e:d2:44:03:5a:9b:1c:c9:95:ca:a4:
aa:40:d1:9b:86:0b:bd:ae:1c:64:c2:4e:c3:f6:31:
f0:19:b6:dc:67:e5:6f:76:e0:8c:fa:db:c8:f5:28:
a6:fd:29:ae:cf:07:60:22:72:b5:7d:94:db:7d:22:
dc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CE:8C:68:C7:3F:39:25:9C:00:71:A5:C7:9F:FF:2A:BB:D0:11:4F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-c6MaMc_OSWcAHGlx5__KrvQEU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:54:06:19:7f:97:76:88:46:d4:77:f7:9a:cc:67:d8:5c:bb:
9a:a3:ea:66:2a:9f:15:29:38:8f:fa:35:ac:c6:d3:52:a0:c7:
4c:5a:fd:af:a7:b4:98:03:1d:45:42:1a:84:bb:73:7b:2d:cd:
dd:60:25:22:57:23:0c:b1:5f:18:38:bb:7b:6d:45:c7:39:f8:
a8:11:dd:35:8a:a6:ab:ac:d7:15:93:b8:20:48:f5:33:23:76:
85:c4:3e:bd:bd:c1:29:c9:93:6f:3d:b2:91:14:9f:99:80:67:
a9:49:0d:0f:c7:2f:af:9c:57:1a:ee:22:d1:3e:0d:98:22:9b:
2d:e6:13:a0:4d:cc:00:ca:89:98:ab:73:fa:2b:19:45:7f:f3:
02:b4:51:88:d6:cf:d4:fa:b8:89:48:b1:cb:1a:c4:84:a4:46:
ab:e1:eb:2d:83:fc:ce:85:3f:6a:06:82:77:e5:2d:01:94:4f:
1f:30:8e:ea:46:75:38:26:91:d7:2b:de:ed:e2:07:30:d4:1c:
84:4d:87:e4:b2:af:62:d6:cb:99:df:c5:02:35:8d:bc:cb:cc:
cc:f7:4a:6f:89:f1:68:8e:8d:f7:1d:9d:41:f3:2f:c3:a1:7b:
26:57:b6:44:1d:3f:bd:77:11:c1:1a:98:30:e1:97:06:53:e0:
8b:3a:db:3f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYf9ohE5D8XIV/OKGEeN+mcQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTA4MjMxMTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWNlOGM2OGM3M2YzOTI1OWMwMDcxYTVjNzlmZmYyYWJiZDAxMTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYaGKMMHhaq5IXn8OVYzWBkphDoc
kQeTSOnVlOilODf03DFo7UVujU2xIK5P0wWw9TglG0telqSbukh84yzW+0SM7Qbw
cllE6BEWDIVceAPegjLCFiJizryA56is9VbsF0r1eyiLlAUGNGawSIKcshMrA+Ux
3xtje/pn7I1KMqIDV+yWVfhAgs5szRWXaemgF0X3dcXSur+opvEY+Z54+DLdtzAW
bOksCHhPDbA4dwFl0vmJ4RE14iYw2hnE67Jnl+71Wro5TtJEA1qbHMmVyqSqQNGb
hgu9rhxkwk7D9jHwGbbcZ+VvduCM+tvI9Sim/SmuzwdgInK1fZTbfSLciQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPnOjGjHPzklnABxpcef/yq70BFPMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMS1jNk1hTWNfT1NXY0FIR2x4NV9fS3J2UUVVOC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFh
Ni8xL2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQAHVAYZf5d2iEbUd/ea
zGfYXLuao+pmKp8VKTiP+jWsxtNSoMdMWv2vp7SYAx1FQhqEu3N7Lc3dYCUiVyMM
sV8YOLt7bUXHOfioEd01iqarrNcVk7ggSPUzI3aFxD69vcEpyZNvPbKRFJ+ZgGep
SQ0Pxy+vnFca7iLRPg2YIpst5hOgTcwAyomYq3P6KxlFf/MCtFGI1s/U+riJSLHL
GsSEpEar4estg/zOhT9qBoJ35S0BlE8fMI7qRnU4JpHXK97t4gcw1ByETYfksq9i
1suZ38UCNY28y8zM90pvifFojo33HZ1B8y/DoXsmV7ZEHT+9dxHBGpgw4ZcGU+CL
Ots/
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:29 2025 by rpki-client