Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C6PxuVWlNDj490djUoEm79snXQw.roa
File: C6PxuVWlNDj490djUoEm79snXQw.roa (raw, json)
Hash identifier: tv7Y1LEwHZCo466+vHb4KFjDJfvDB/rFrD+0Yb/mlRo=
Subject key identifier: 0B:A3:F1:B9:55:A5:34:38:F8:F7:47:63:52:81:26:EF:DB:27:5D:0C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01875FB5CBBD1DEE0A970C10CD06F2E2477C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C6PxuVWlNDj490djUoEm79snXQw.roa
Signing time: Sat 08 Apr 2023 07:12:42 +0000
ROA not before: Sat 08 Apr 2023 07:12:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5f:b5:cb:bd:1d:ee:0a:97:0c:10:cd:06:f2:e2:47:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 8 07:12:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ba3f1b955a53438f8f74763528126efdb275d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9d:8f:a4:07:29:e6:fd:9b:05:d6:ca:1c:4b:
3c:af:a3:a6:08:db:7e:f8:2a:58:77:30:c4:03:c8:
02:22:bd:c1:72:50:af:4c:35:29:5f:43:73:c0:09:
f4:bb:3e:6f:e4:c4:f3:a7:0c:80:de:ad:db:fb:60:
0a:1d:17:b9:2c:94:ff:06:e6:b8:1b:a8:f7:ab:dc:
c8:6c:7c:cb:05:3c:57:b9:d2:02:33:82:dc:ad:c4:
ec:f6:4c:2e:8f:f3:6f:67:7c:8f:2a:24:03:2f:87:
0d:4c:bd:5e:37:34:45:e8:d7:bf:6b:37:bb:fc:05:
52:ac:0b:a4:fa:8e:35:2d:1e:d5:57:b8:43:5d:13:
b9:61:0d:25:05:e4:1b:f8:b1:08:d1:85:b2:46:c1:
82:b2:e9:0c:d6:b6:9c:5b:18:53:8b:5f:cb:16:23:
f6:b8:73:62:21:c9:8e:e0:af:4a:84:47:52:27:d7:
71:71:2a:4f:ca:0f:43:71:ac:ec:6e:21:3d:00:e1:
3f:5b:63:75:9b:77:dd:ea:27:47:95:f5:27:db:a0:
e9:da:58:ef:b1:a2:ab:dd:16:da:8e:f6:91:7a:6a:
02:ff:70:ad:f4:a0:61:c3:af:78:75:74:6a:9f:5e:
3f:06:ad:ef:3e:70:55:6f:82:2e:02:55:e7:bd:72:
df:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A3:F1:B9:55:A5:34:38:F8:F7:47:63:52:81:26:EF:DB:27:5D:0C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C6PxuVWlNDj490djUoEm79snXQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:ba:9a:05:f0:ab:f7:e7:48:6b:6c:46:04:54:0f:2f:a3:3d:
80:d7:55:76:91:f0:42:66:21:02:9b:06:92:fb:ed:99:90:55:
d1:90:9d:7d:82:fd:4b:95:ef:9a:1c:e1:ec:5d:f6:d5:7d:9a:
f8:94:1e:f9:57:58:56:26:a1:3e:ae:d0:05:a6:da:c6:4e:a4:
88:c5:1d:6f:ed:1d:47:44:b7:f2:ec:4e:2d:97:2a:67:ff:be:
35:32:80:1c:92:fe:d7:ca:0a:84:7f:eb:a2:1f:5e:17:6f:ae:
c3:14:b4:21:33:d7:d1:45:ae:1a:69:da:e1:ef:87:80:5e:6d:
67:11:9e:15:28:61:c8:8d:85:ff:48:c1:ae:bd:b5:7a:84:b4:
2f:82:9a:01:a9:53:4e:2b:6d:2c:31:66:c7:8d:50:41:07:e9:
9c:70:4e:6a:a3:c9:d7:30:78:e1:be:a7:55:4a:26:b7:22:f6:
92:47:15:73:37:6f:7e:5a:07:31:b8:db:3d:6e:6a:0d:92:0e:
94:bf:7c:72:4d:fc:56:17:49:b4:fb:63:b5:d0:7a:31:6d:e4:
22:4f:08:02:33:b1:f3:cf:5f:91:b0:34:94:67:7c:2c:63:cc:
c7:3f:f4:b1:e1:29:72:44:3a:8a:ca:0c:17:99:b7:12:a1:11:
8e:b1:0e:7e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdftcu9He4KlwwQzQby4kd8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDA4MDcxMjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmEzZjFiOTU1YTUzNDM4ZjhmNzQ3NjM1MjgxMjZlZmRiMjc1ZDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp2PpAcp5v2bBdbKHEs8r6OmCNt+
+CpYdzDEA8gCIr3BclCvTDUpX0NzwAn0uz5v5MTzpwyA3q3b+2AKHRe5LJT/Bua4
G6j3q9zIbHzLBTxXudICM4LcrcTs9kwuj/NvZ3yPKiQDL4cNTL1eNzRF6Ne/aze7
/AVSrAuk+o41LR7VV7hDXRO5YQ0lBeQb+LEI0YWyRsGCsukM1racWxhTi1/LFiP2
uHNiIcmO4K9KhEdSJ9dxcSpPyg9DcazsbiE9AOE/W2N1m3fd6idHlfUn26Dp2ljv
saKr3RbajvaRemoC/3Ct9KBhw694dXRqn14/Bq3vPnBVb4IuAlXnvXLf3QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAuj8blVpTQ4+PdHY1KBJu/bJ10MMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQzZQeHVWV2xORGo0OTBkalVvRW03OXNuWFF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAD26mgXwq/fnSGtsRgRU
Dy+jPYDXVXaR8EJmIQKbBpL77ZmQVdGQnX2C/UuV75oc4exd9tV9mviUHvlXWFYm
oT6u0AWm2sZOpIjFHW/tHUdEt/LsTi2XKmf/vjUygByS/tfKCoR/66IfXhdvrsMU
tCEz19FFrhpp2uHvh4BebWcRnhUoYciNhf9Iwa69tXqEtC+CmgGpU04rbSwxZseN
UEEH6ZxwTmqjydcweOG+p1VKJrci9pJHFXM3b35aBzG42z1uag2SDpS/fHJN/FYX
SbT7Y7XQejFt5CJPCAIzsfPPX5GwNJRnfCxjzMc/9LHhKXJEOorKDBeZtxKhEY6x
Dn4=
-----END CERTIFICATE-----
Generated at Thu May 1 05:01:25 2025 by rpki-client