Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Ax7P5A8pzqr0LtIdw8CyClB0ck.roa
File: 6Ax7P5A8pzqr0LtIdw8CyClB0ck.roa (raw, json)
Hash identifier: QiAgiTwUzYBCAve+JX5QE5Zwt7Bo491quRLvim8dH+w=
Subject key identifier: E8:0C:7B:3F:90:3C:A7:3A:AB:D0:BB:48:77:0F:02:C8:29:41:D1:C9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187771698840513F3C193FA766BE3080C7B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Ax7P5A8pzqr0LtIdw8CyClB0ck.roa
Signing time: Wed 12 Apr 2023 20:09:41 +0000
ROA not before: Wed 12 Apr 2023 20:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:77:16:98:84:05:13:f3:c1:93:fa:76:6b:e3:08:0c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 12 20:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e80c7b3f903ca73aabd0bb48770f02c82941d1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:c8:a6:c2:39:72:51:fe:9f:8e:12:15:68:
f6:1c:f5:a0:35:b4:72:77:b5:28:4b:37:35:d0:c1:
34:8b:e2:de:f0:fb:2e:09:cb:ea:99:8f:e8:4d:96:
de:76:65:6f:5c:4e:9f:5e:12:4e:7e:b6:57:64:20:
5f:9d:5c:5b:e6:73:86:8f:ed:64:ec:b4:2d:83:bb:
d3:15:80:c7:98:cf:55:0a:8d:7b:19:4a:53:d5:d4:
02:06:6e:33:34:35:64:5f:bb:f9:2e:28:41:e0:57:
dd:95:45:92:45:04:29:00:0e:ff:35:ae:20:6e:38:
f2:00:d1:08:bf:2f:8f:55:df:4b:bc:da:1a:80:ab:
e3:3d:9c:6f:3d:96:3e:d5:7e:c1:27:2b:29:27:56:
40:4e:e0:bf:3c:72:46:5f:0f:7a:3a:67:94:27:dc:
b2:6f:cc:ac:22:82:5f:80:73:47:bb:6f:88:6e:69:
96:34:99:5b:45:de:0a:01:54:00:0a:59:57:66:5e:
9b:5e:38:a8:05:59:79:2d:68:0f:66:5e:aa:0d:a6:
4e:74:44:18:06:83:02:d4:16:94:34:e7:c0:72:ea:
89:0e:6a:6b:55:60:5e:ea:b4:d0:89:4b:8a:50:fd:
12:1f:ce:df:83:4c:31:b4:fb:16:81:a6:9a:19:ae:
3a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0C:7B:3F:90:3C:A7:3A:AB:D0:BB:48:77:0F:02:C8:29:41:D1:C9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Ax7P5A8pzqr0LtIdw8CyClB0ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:69:7b:77:09:63:69:03:bc:21:4d:82:6c:bf:d6:9c:7e:93:
58:36:86:c3:4d:ee:d5:8e:0a:62:46:88:f0:43:57:da:29:f1:
f5:9a:1d:3e:30:ce:26:b5:d9:e5:b8:96:cb:c5:da:9d:47:80:
1c:5b:83:64:8c:1d:0b:ad:d1:df:62:a1:90:5e:28:91:b8:d3:
c3:78:a7:f9:15:8b:a9:75:9b:0d:31:29:e0:a6:e1:c9:ee:07:
87:a8:8b:23:c5:94:9b:01:5c:e5:dc:e4:5a:c5:62:87:f0:8b:
82:f3:07:85:ba:42:c4:48:49:2b:15:69:13:f1:5d:52:1f:90:
c1:bb:e1:df:2d:69:97:91:bd:87:b9:36:18:31:4f:65:c5:bd:
82:c2:70:ac:ba:67:51:20:4c:7d:b4:78:10:ba:3c:ee:00:65:
c1:a0:7d:98:38:b1:ce:fa:0d:ea:5f:b5:62:1d:af:fb:d5:10:
14:da:87:63:cd:18:92:39:11:eb:3d:e8:05:1c:78:6b:af:22:
12:1d:1f:a3:22:22:d6:30:44:1f:db:78:67:35:35:54:e0:70:
89:e2:ad:56:73:3f:55:1d:12:d9:31:bb:0a:ad:a4:ff:b8:de:
fb:4e:8b:a2:6c:2b:82:2c:c0:31:60:e7:27:13:33:c8:e5:61:
ff:13:d7:1d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYd3FpiEBRPzwZP6dmvjCAx7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDEyMjAwOTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODBjN2IzZjkwM2NhNzNhYWJkMGJiNDg3NzBmMDJjODI5NDFkMWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5LIpsI5clH+n44SFWj2HPWgNbRy
d7UoSzc10ME0i+Le8PsuCcvqmY/oTZbedmVvXE6fXhJOfrZXZCBfnVxb5nOGj+1k
7LQtg7vTFYDHmM9VCo17GUpT1dQCBm4zNDVkX7v5LihB4FfdlUWSRQQpAA7/Na4g
bjjyANEIvy+PVd9LvNoagKvjPZxvPZY+1X7BJyspJ1ZATuC/PHJGXw96OmeUJ9yy
b8ysIoJfgHNHu2+IbmmWNJlbRd4KAVQACllXZl6bXjioBVl5LWgPZl6qDaZOdEQY
BoMC1BaUNOfAcuqJDmprVWBe6rTQiUuKUP0SH87fg0wxtPsWgaaaGa46WwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOgMez+QPKc6q9C7SHcPAsgpQdHJMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNkF4N1A1QThwenFyMEx0SWR3OEN5Q2xCMGNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE1pe3cJY2kDvCFNgmy/
1px+k1g2hsNN7tWOCmJGiPBDV9op8fWaHT4wzia12eW4lsvF2p1HgBxbg2SMHQut
0d9ioZBeKJG408N4p/kVi6l1mw0xKeCm4cnuB4eoiyPFlJsBXOXc5FrFYofwi4Lz
B4W6QsRISSsVaRPxXVIfkMG74d8taZeRvYe5NhgxT2XFvYLCcKy6Z1EgTH20eBC6
PO4AZcGgfZg4sc76DepftWIdr/vVEBTah2PNGJI5Ees96AUceGuvIhIdH6MiItYw
RB/beGc1NVTgcInirVZzP1UdEtkxuwqtpP+43vtOi6JsK4IswDFg5ycTM8jlYf8T
1x0=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:25 2025 by rpki-client