Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Akq8hgrnYIQsJR1glZ6dGZegQc.roa
File: 6Akq8hgrnYIQsJR1glZ6dGZegQc.roa (raw, json)
Hash identifier: 1oUWyzM4RtHlZK0LVtLnlD4QHQkVXurXp6Rw+2p6EBE=
Subject key identifier: E8:09:2A:F2:18:2B:9D:82:10:B0:94:75:82:56:7A:74:66:5E:81:07
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018566290321E67095828905C995F7BFDB59
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Akq8hgrnYIQsJR1glZ6dGZegQc.roa
Signing time: Sat 31 Dec 2022 03:10:41 +0000
ROA not before: Sat 31 Dec 2022 03:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:66:29:03:21:e6:70:95:82:89:05:c9:95:f7:bf:db:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 31 03:10:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8092af2182b9d8210b0947582567a74665e8107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7b:e7:79:a3:9b:fe:39:f8:87:e8:04:9e:a4:
a5:41:0b:d8:4f:4e:4c:2d:32:3e:21:5c:ec:5b:42:
3c:5c:e2:f5:5e:14:cd:81:67:1a:96:27:43:2f:5e:
5d:1a:21:58:22:a0:48:93:0c:cd:f7:2f:57:2f:9f:
a8:8e:e4:c6:47:b6:bc:ea:3e:55:c8:dc:f0:f8:5b:
8f:97:ab:ea:0d:9f:36:d1:b6:da:b8:84:d8:b0:46:
67:8c:a3:93:f4:87:04:5c:60:4b:6b:21:16:89:29:
3b:97:4d:2e:0c:91:72:5c:0b:30:cf:d6:03:50:4f:
53:6c:69:50:95:0c:42:ad:9b:e1:12:59:7c:61:b4:
d9:74:0f:4e:b7:27:a1:a9:1d:87:c2:a3:23:ce:89:
e6:c6:27:1c:15:bb:02:72:9c:2d:87:c1:87:f5:c5:
39:54:f9:1d:6d:80:ae:ff:56:5b:db:9c:5d:dc:d3:
94:e3:36:8e:c9:6d:d6:94:16:e4:20:78:1b:8a:ca:
30:93:23:35:26:2b:f8:20:20:c8:7f:46:54:76:2a:
48:52:32:e7:26:bb:58:63:c6:7a:2e:c3:ad:2c:84:
c2:9f:bf:a8:64:8c:16:6b:9d:50:0c:f5:65:51:ca:
35:ff:37:a0:49:9e:29:ca:e1:11:d7:0b:16:72:b4:
6c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:09:2A:F2:18:2B:9D:82:10:B0:94:75:82:56:7A:74:66:5E:81:07
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Akq8hgrnYIQsJR1glZ6dGZegQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:dc:13:ed:ca:bd:11:63:d9:8c:a1:6f:0a:5c:a5:fb:c2:4a:
8a:ee:72:38:68:d6:e9:0f:1e:58:71:ad:b0:4c:7b:60:fd:d3:
8c:57:72:96:21:c0:3d:08:4d:70:5c:39:ed:b4:b2:dd:bb:73:
64:0a:9c:2c:0f:bb:07:b4:9d:1d:32:47:72:d2:d5:2a:41:61:
16:3f:19:7e:64:87:f6:79:49:79:e7:b4:cd:68:03:10:f0:a8:
69:99:1a:62:da:70:d5:32:c6:b9:11:13:2e:21:69:48:38:b6:
2a:c5:8a:17:5d:55:23:07:62:0a:0f:3a:89:81:c8:dd:de:5a:
be:39:8b:a5:a8:13:58:93:63:f0:78:cd:cb:6b:71:20:5a:e6:
3e:10:d9:8d:a2:cd:dd:5a:b6:27:eb:0b:dd:7f:43:33:be:ff:
86:76:6f:c4:5d:cc:3d:45:37:b2:14:ea:34:1a:1d:52:7a:b0:
c9:2a:38:bd:f2:45:f4:74:7f:8e:d7:d8:57:fe:1f:64:93:6e:
86:c7:4a:07:31:ec:b7:d7:65:95:30:df:b9:f8:27:c0:df:ed:
20:d9:c2:3d:06:1a:09:04:9d:0a:0d:c9:72:46:49:52:5d:b3:
7e:0d:18:0e:98:17:aa:f8:d0:52:9a:c3:ec:14:21:13:e5:b1:
76:01:5f:dd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVmKQMh5nCVgokFyZX3v9tZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjMxMDMxMDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODA5MmFmMjE4MmI5ZDgyMTBiMDk0NzU4MjU2N2E3NDY2NWU4MTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXvneaOb/jn4h+gEnqSlQQvYT05M
LTI+IVzsW0I8XOL1XhTNgWcalidDL15dGiFYIqBIkwzN9y9XL5+ojuTGR7a86j5V
yNzw+FuPl6vqDZ820bbauITYsEZnjKOT9IcEXGBLayEWiSk7l00uDJFyXAswz9YD
UE9TbGlQlQxCrZvhEll8YbTZdA9OtyehqR2HwqMjzonmxiccFbsCcpwth8GH9cU5
VPkdbYCu/1Zb25xd3NOU4zaOyW3WlBbkIHgbisowkyM1Jiv4ICDIf0ZUdipIUjLn
JrtYY8Z6LsOtLITCn7+oZIwWa51QDPVlUco1/zegSZ4pyuER1wsWcrRsqwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOgJKvIYK52CELCUdYJWenRmXoEHMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNkFrcThoZ3JuWUlRc0pSMWdsWjZkR1plZ1FjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAbcE+3KvRFj2Yyhbwpc
pfvCSorucjho1ukPHlhxrbBMe2D904xXcpYhwD0ITXBcOe20st27c2QKnCwPuwe0
nR0yR3LS1SpBYRY/GX5kh/Z5SXnntM1oAxDwqGmZGmLacNUyxrkREy4haUg4tirF
ihddVSMHYgoPOomByN3eWr45i6WoE1iTY/B4zctrcSBa5j4Q2Y2izd1atifrC91/
QzO+/4Z2b8RdzD1FN7IU6jQaHVJ6sMkqOL3yRfR0f47X2Ff+H2STbobHSgcx7LfX
ZZUw37n4J8Df7SDZwj0GGgkEnQoNyXJGSVJds34NGA6YF6r40FKaw+wUIRPlsXYB
X90=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:46:13 2025 by rpki-client