Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A6C2QDceVw-wVc5yvH7E0n-6iRI.roa
File: A6C2QDceVw-wVc5yvH7E0n-6iRI.roa (raw, json)
Hash identifier: CvQlXtxhjM9AgcMf0cJYEYJ7yWUOQJpK7ba4BG1OqmU=
Subject key identifier: 03:A0:B6:40:37:1E:57:0F:B0:55:CE:72:BC:7E:C4:D2:7F:BA:89:12
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01876547454D45E28FF73FEF2823E7C21300
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A6C2QDceVw-wVc5yvH7E0n-6iRI.roa
Signing time: Sun 09 Apr 2023 09:09:42 +0000
ROA not before: Sun 09 Apr 2023 09:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:65:47:45:4d:45:e2:8f:f7:3f:ef:28:23:e7:c2:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 9 09:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03a0b640371e570fb055ce72bc7ec4d27fba8912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:73:75:7a:f0:a6:dd:ca:f2:f3:4b:c5:34:34:
e2:0f:2e:bd:89:ca:48:2a:e9:ea:b3:6c:4b:c1:82:
fe:ad:21:7d:75:2e:2b:23:13:92:38:04:7a:61:9e:
86:4a:b8:b6:d3:29:fa:94:9b:a9:ae:dc:29:1f:52:
79:03:ef:a9:7a:b2:b2:36:2a:64:94:dc:a9:ce:8a:
96:b7:5d:f8:5e:66:5e:5d:23:97:a0:dc:f8:67:a2:
b3:ae:88:9e:d3:2b:5b:1b:6f:a5:1b:37:ba:56:1b:
cd:a0:3d:68:6f:c0:e4:2f:cc:7e:7c:2c:68:f2:bd:
dc:70:3f:51:f5:7a:d0:f6:57:2c:f6:eb:04:18:15:
b3:5e:ae:36:59:b2:76:a4:62:2b:18:bb:aa:c6:47:
3c:b6:b8:8e:eb:8f:55:2f:1a:5b:90:af:1c:5f:ee:
0d:a5:3e:a3:3f:3b:89:1a:f9:b2:c0:ef:29:30:23:
e3:37:79:e2:ad:6e:ff:0e:d8:d1:ea:b9:df:ff:14:
c0:cd:d8:ee:2f:53:6d:88:65:03:77:06:01:9f:e5:
0d:42:0a:09:0c:89:58:2f:58:0a:3b:28:d7:df:56:
48:8b:eb:ea:35:38:f2:2e:0c:ae:dd:3b:49:2f:f6:
ea:cf:e1:59:97:7b:fb:7f:7c:25:4c:e2:d9:89:ca:
98:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A0:B6:40:37:1E:57:0F:B0:55:CE:72:BC:7E:C4:D2:7F:BA:89:12
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A6C2QDceVw-wVc5yvH7E0n-6iRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:8d:bd:8e:db:5c:cb:8d:21:23:14:44:05:69:df:75:99:b1:
29:72:92:7f:41:0a:d1:ce:6f:fe:dd:a8:b4:8a:86:65:03:7e:
f6:f7:ee:5a:34:c9:eb:24:bf:30:a0:7a:72:51:d8:55:47:93:
69:8c:84:d0:fb:10:3a:90:ef:66:b3:e3:c1:e2:c8:55:0c:3e:
ff:c6:c6:d3:77:f4:1a:98:f7:56:23:c3:c1:db:b5:e1:44:5b:
92:c1:28:7e:8e:87:a5:97:27:c8:19:cb:be:9f:7c:4f:01:cc:
7b:cf:89:9c:c0:eb:6c:d6:66:67:7b:ee:1e:35:3c:41:28:70:
97:82:41:e9:0c:14:05:e2:52:e6:b5:eb:89:55:51:62:de:a8:
11:a3:e1:3e:43:a7:5f:45:6b:ba:19:44:fc:1d:e1:a8:6e:15:
40:4d:93:e4:b3:83:de:c6:88:25:75:1e:c6:1b:e0:a3:7a:4a:
a6:c2:9c:2a:51:e7:bb:a0:a7:86:3a:eb:dc:12:2f:c6:4b:03:
e3:f1:c5:68:c1:1d:d4:19:93:aa:79:a3:50:63:ea:37:cf:f5:
01:f6:c4:4a:60:6e:ea:4d:05:68:59:46:7d:6d:62:d6:f9:3f:
7c:94:43:38:1e:c5:66:e8:a1:90:1c:3e:c9:6a:ad:7b:3d:e3:
d8:90:5a:50
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdlR0VNReKP9z/vKCPnwhMAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDA5MDkwOTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2EwYjY0MDM3MWU1NzBmYjA1NWNlNzJiYzdlYzRkMjdmYmE4OTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXN1evCm3cry80vFNDTiDy69icpI
Kunqs2xLwYL+rSF9dS4rIxOSOAR6YZ6GSri20yn6lJuprtwpH1J5A++perKyNipk
lNypzoqWt134XmZeXSOXoNz4Z6Kzroie0ytbG2+lGze6VhvNoD1ob8DkL8x+fCxo
8r3ccD9R9XrQ9lcs9usEGBWzXq42WbJ2pGIrGLuqxkc8triO649VLxpbkK8cX+4N
pT6jPzuJGvmywO8pMCPjN3nirW7/DtjR6rnf/xTAzdjuL1NtiGUDdwYBn+UNQgoJ
DIlYL1gKOyjX31ZIi+vqNTjyLgyu3TtJL/bqz+FZl3v7f3wlTOLZicqYlQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAOgtkA3HlcPsFXOcrx+xNJ/uokSMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQTZDMlFEY2VWdy13VmM1eXZIN0Uwbi02aVJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGSNvY7bXMuNISMURAVp
33WZsSlykn9BCtHOb/7dqLSKhmUDfvb37lo0yeskvzCgenJR2FVHk2mMhND7EDqQ
72az48HiyFUMPv/GxtN39BqY91Yjw8HbteFEW5LBKH6Oh6WXJ8gZy76ffE8BzHvP
iZzA62zWZmd77h41PEEocJeCQekMFAXiUua164lVUWLeqBGj4T5Dp19Fa7oZRPwd
4ahuFUBNk+Szg97GiCV1HsYb4KN6SqbCnCpR57ugp4Y669wSL8ZLA+PxxWjBHdQZ
k6p5o1Bj6jfP9QH2xEpgbupNBWhZRn1tYtb5P3yUQzgexWbooZAcPslqrXs949iQ
WlA=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:20:38 2025 by rpki-client