Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Ufjq_ON0H3aqjQVHXzS8xFQePU.roa
File: 6Ufjq_ON0H3aqjQVHXzS8xFQePU.roa (raw, json)
Hash identifier: Gj7pjHwEKYg3WZLez95IkkFaVvzwFHf0rhrkrurQZYc=
Subject key identifier: E9:47:E3:AB:F3:8D:D0:7D:DA:AA:34:15:1D:7C:D2:F3:11:50:78:F5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187E786A0841C09C3F3C253FC08BC656BC0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Ufjq_ON0H3aqjQVHXzS8xFQePU.roa
Signing time: Thu 04 May 2023 16:09:32 +0000
ROA not before: Thu 04 May 2023 16:09:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e7:86:a0:84:1c:09:c3:f3:c2:53:fc:08:bc:65:6b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 4 16:09:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e947e3abf38dd07ddaaa34151d7cd2f3115078f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fe:69:db:5a:d1:98:13:e9:96:6c:f2:53:b1:
0e:bf:e8:06:6f:db:69:a0:bc:31:7c:7a:fa:9e:b7:
0b:b3:66:e5:71:b9:1c:e7:7b:b4:0c:93:89:c0:49:
fb:26:a2:d3:3b:d6:24:96:aa:bb:69:1e:17:7d:1a:
58:87:5d:26:8b:31:f3:12:ea:e9:09:3b:02:be:94:
e2:ba:18:99:42:0f:8f:f8:f4:10:8a:2e:47:6f:e9:
e2:d3:4b:7b:ca:e0:0d:ac:90:72:c9:94:35:49:e1:
6e:31:07:85:37:7f:31:d1:aa:0d:23:a4:84:65:d7:
2a:0c:28:b8:44:43:c6:94:32:8a:e5:99:1c:68:c1:
51:92:ac:50:72:10:40:63:82:cd:3f:6d:16:b7:13:
ff:a7:c1:7b:07:b8:2b:12:e3:d5:4a:b7:ab:7a:6a:
61:69:5b:4d:c0:80:4b:0e:0d:92:12:e9:94:4e:d0:
87:86:17:d7:5f:7f:42:10:ef:83:eb:e2:49:c0:1d:
ca:c8:a3:05:cd:f8:18:60:fc:8e:16:67:66:81:8c:
85:b0:f7:40:e2:12:89:51:f3:e3:fe:48:df:7f:fa:
bd:ff:25:42:37:73:76:5e:a5:01:93:00:61:56:dc:
ee:be:11:63:24:ab:63:60:67:a8:97:65:da:67:8b:
d8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:47:E3:AB:F3:8D:D0:7D:DA:AA:34:15:1D:7C:D2:F3:11:50:78:F5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Ufjq_ON0H3aqjQVHXzS8xFQePU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:31:03:b7:f5:04:32:17:29:e6:c5:fc:b8:30:a7:12:4c:be:
c2:9b:3d:c2:fe:0e:d5:27:55:12:8a:f0:8d:a4:b3:8b:ae:0a:
a4:45:fc:b3:0f:1d:8f:b3:38:7a:77:0d:5f:12:56:65:80:e6:
b0:91:78:0f:91:ce:8c:71:c3:5e:d1:60:fa:a1:b2:b5:87:ac:
8b:1c:3c:43:67:6f:0e:cb:ff:a8:7d:12:aa:9a:3a:ae:19:08:
71:66:83:65:1f:53:e5:85:ab:e6:e0:61:8e:9e:41:55:63:a9:
30:3a:f5:3a:77:c0:74:23:ef:65:a9:ad:8f:df:9d:82:a0:84:
0d:4c:7a:33:c3:eb:c3:f8:92:e7:82:b3:52:11:f3:f2:9d:9c:
92:5c:95:f9:cf:c0:1b:12:9c:e4:70:d7:cd:0c:c3:07:57:e4:
db:90:b4:de:2f:81:4b:e4:e0:7c:9d:b2:b8:fd:e5:c1:f8:57:
d5:2f:32:cb:34:02:f7:c1:1c:7b:06:18:18:f9:68:7f:ed:9a:
97:e9:a5:b0:25:b4:c9:5f:42:44:62:7d:0a:a1:fb:c9:fb:07:
f5:04:3e:22:4e:bf:74:fd:75:2f:54:79:03:16:5f:ad:5e:95:
71:16:64:35:7a:d4:74:37:a1:d1:96:af:49:e8:85:99:39:30:
2b:87:74:ec
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYfnhqCEHAnD88JT/Ai8ZWvAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTA0MTYwOTMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTQ3ZTNhYmYzOGRkMDdkZGFhYTM0MTUxZDdjZDJmMzExNTA3OGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv5p21rRmBPplmzyU7EOv+gGb9tp
oLwxfHr6nrcLs2blcbkc53u0DJOJwEn7JqLTO9Yklqq7aR4XfRpYh10mizHzEurp
CTsCvpTiuhiZQg+P+PQQii5Hb+ni00t7yuANrJByyZQ1SeFuMQeFN38x0aoNI6SE
ZdcqDCi4REPGlDKK5ZkcaMFRkqxQchBAY4LNP20WtxP/p8F7B7grEuPVSreremph
aVtNwIBLDg2SEumUTtCHhhfXX39CEO+D6+JJwB3KyKMFzfgYYPyOFmdmgYyFsPdA
4hKJUfPj/kjff/q9/yVCN3N2XqUBkwBhVtzuvhFjJKtjYGeol2XaZ4vY0wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOlH46vzjdB92qo0FR180vMRUHj1MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNlVmanFfT04wSDNhcWpRVkhYelM4eEZRZVBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIMxA7f1BDIXKebF/Lgw
pxJMvsKbPcL+DtUnVRKK8I2ks4uuCqRF/LMPHY+zOHp3DV8SVmWA5rCReA+Rzoxx
w17RYPqhsrWHrIscPENnbw7L/6h9EqqaOq4ZCHFmg2UfU+WFq+bgYY6eQVVjqTA6
9Tp3wHQj72WprY/fnYKghA1MejPD68P4kueCs1IR8/KdnJJclfnPwBsSnORw180M
wwdX5NuQtN4vgUvk4Hydsrj95cH4V9UvMss0AvfBHHsGGBj5aH/tmpfppbAltMlf
QkRifQqh+8n7B/UEPiJOv3T9dS9UeQMWX61elXEWZDV61HQ3odGWr0nohZk5MCuH
dOw=
-----END CERTIFICATE-----
Generated at Fri May 2 22:10:04 2025 by rpki-client