Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a0W6FppZxmBGD5Vwb7PrH3mmxuQ.roa
File: a0W6FppZxmBGD5Vwb7PrH3mmxuQ.roa (raw, json)
Hash identifier: MOK6eSkDczqxE7zzD+59hXyHe9sTOFVDKQvy/eCJAqI=
Subject key identifier: 6B:45:BA:16:9A:59:C6:60:46:0F:95:70:6F:B3:EB:1F:79:A6:C6:E4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018624EAC15696D4AC8C8384000B1643B79F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a0W6FppZxmBGD5Vwb7PrH3mmxuQ.roa
Signing time: Mon 06 Feb 2023 04:10:09 +0000
ROA not before: Mon 06 Feb 2023 04:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:24:ea:c1:56:96:d4:ac:8c:83:84:00:0b:16:43:b7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 6 04:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b45ba169a59c660460f95706fb3eb1f79a6c6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:07:3c:bb:b7:28:b7:ed:d4:fb:9e:d0:06:0d:
30:e2:0a:0c:a5:6e:8a:f9:cd:59:c8:52:dd:db:20:
f5:21:c5:e6:49:64:97:8e:5e:da:bd:bc:0b:2e:32:
73:ea:2f:91:92:81:ad:1c:67:a3:fa:dd:de:36:7f:
3c:06:03:f3:10:cd:f5:dd:25:ef:d5:cb:6c:cf:17:
70:5b:cc:73:c3:16:8c:d8:f0:1a:39:f9:69:d7:d4:
b8:5d:f5:8c:e4:54:d9:e8:c6:d9:33:2c:e6:52:82:
53:bb:45:b9:5f:a7:14:46:b5:6a:fa:e3:6b:67:37:
9e:a3:8d:dd:3e:bf:e7:56:9e:e5:29:8a:5e:99:53:
28:49:97:2d:68:4d:41:ae:0b:a3:af:2a:cb:eb:ce:
14:bd:76:bc:d1:d6:fd:54:fb:13:63:aa:7c:fc:ed:
44:c8:ab:34:11:c6:57:af:f7:58:e2:65:34:b5:06:
8e:6f:47:13:09:fb:93:c8:cc:6f:d2:c2:17:05:9b:
c6:fb:52:d0:8f:70:05:f1:28:39:86:4f:a5:ce:e6:
b2:66:d2:b3:71:70:fe:4b:00:c8:32:79:82:5b:b3:
86:52:3f:60:f0:c9:0d:56:d9:73:66:7e:5a:91:0e:
58:10:7c:31:4d:bf:41:45:ad:9b:2a:64:af:1b:27:
97:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:45:BA:16:9A:59:C6:60:46:0F:95:70:6F:B3:EB:1F:79:A6:C6:E4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a0W6FppZxmBGD5Vwb7PrH3mmxuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:2f:86:d1:21:a8:dc:50:ba:5b:2a:fe:d9:6b:b0:dc:83:46:
7e:c7:ab:36:2a:1e:3c:f4:4f:cf:f4:03:5d:df:2a:73:58:11:
00:aa:3d:66:48:9c:71:0b:c6:52:05:bb:67:1a:e3:0a:16:a9:
c7:b4:95:f4:83:73:a8:4d:23:2b:72:32:d9:cc:fe:73:e6:20:
57:98:ce:a8:4e:8d:6f:28:a5:7f:a4:1a:92:e1:97:29:02:e1:
b4:2a:6a:55:ad:46:81:58:17:61:2f:e5:57:71:01:04:cf:85:
66:8b:16:2a:82:f0:67:56:3a:7e:6e:7d:da:50:43:ec:68:fa:
a0:e1:8c:d9:07:cd:38:5b:c2:0a:42:50:b0:82:86:44:a3:ea:
e3:63:0d:37:14:4d:af:01:93:a1:a8:71:42:2b:1d:92:3c:84:
76:85:ec:86:a9:2f:ce:97:f9:bf:8c:5b:c0:0b:29:40:7a:c9:
03:b3:ee:b4:b4:43:0c:d1:01:0b:66:36:dd:40:ef:ca:5a:b1:
fa:a2:24:b4:0e:7b:67:72:10:f5:cb:73:7e:6e:b5:28:89:09:
5b:b5:16:1d:1b:97:c8:9a:53:f1:31:9b:28:33:b8:34:c9:87:
a9:38:f8:44:d0:f8:2a:6a:c9:ec:0d:eb:fc:b2:f7:bb:e5:77:
b1:80:f5:6d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYYk6sFWltSsjIOEAAsWQ7efMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjA2MDQxMDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjQ1YmExNjlhNTljNjYwNDYwZjk1NzA2ZmIzZWIxZjc5YTZjNmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Qc8u7cot+3U+57QBg0w4goMpW6K
+c1ZyFLd2yD1IcXmSWSXjl7avbwLLjJz6i+RkoGtHGej+t3eNn88BgPzEM313SXv
1ctszxdwW8xzwxaM2PAaOflp19S4XfWM5FTZ6MbZMyzmUoJTu0W5X6cURrVq+uNr
Zzeeo43dPr/nVp7lKYpemVMoSZctaE1BrgujryrL684UvXa80db9VPsTY6p8/O1E
yKs0EcZXr/dY4mU0tQaOb0cTCfuTyMxv0sIXBZvG+1LQj3AF8Sg5hk+lzuayZtKz
cXD+SwDIMnmCW7OGUj9g8MkNVtlzZn5akQ5YEHwxTb9BRa2bKmSvGyeXqQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGtFuhaaWcZgRg+VcG+z6x95psbkMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYTBXNkZwcFp4bUJHRDVWd2I3UHJIM21teHVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGwvhtEhqNxQulsq/tlr
sNyDRn7HqzYqHjz0T8/0A13fKnNYEQCqPWZInHELxlIFu2ca4woWqce0lfSDc6hN
IytyMtnM/nPmIFeYzqhOjW8opX+kGpLhlykC4bQqalWtRoFYF2Ev5VdxAQTPhWaL
FiqC8GdWOn5ufdpQQ+xo+qDhjNkHzThbwgpCULCChkSj6uNjDTcUTa8Bk6GocUIr
HZI8hHaF7IapL86X+b+MW8ALKUB6yQOz7rS0QwzRAQtmNt1A78pasfqiJLQOe2dy
EPXLc35utSiJCVu1Fh0bl8iaU/ExmygzuDTJh6k4+ETQ+CpqyewN6/yy97vld7GA
9W0=
-----END CERTIFICATE-----
Generated at Fri May 2 21:38:52 2025 by rpki-client