Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a0r6clp3Hykwgma4DguAXX2D3f8.roa
File: a0r6clp3Hykwgma4DguAXX2D3f8.roa (raw, json)
Hash identifier: +FujQDTXGnAaHrkKnvWYWtoXpiwwZl+4wNufyHg0PpA=
Subject key identifier: 6B:4A:FA:72:5A:77:1F:29:30:82:66:B8:0E:0B:80:5D:7D:83:DD:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187390EF65AA403D6D7DEEA5B90709343C2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a0r6clp3Hykwgma4DguAXX2D3f8.roa
Signing time: Fri 31 Mar 2023 19:04:54 +0000
ROA not before: Fri 31 Mar 2023 19:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:187:390e:6698/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:39:0e:f6:5a:a4:03:d6:d7:de:ea:5b:90:70:93:43:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 31 19:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b4afa725a771f29308266b80e0b805d7d83ddff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:02:14:d3:d9:4c:00:44:90:51:08:01:23:14:
07:08:26:f0:fa:9a:4d:d6:34:3c:3e:8c:aa:b9:c8:
42:20:22:87:80:1c:61:58:d2:c0:ee:e3:40:26:b0:
4e:33:85:39:48:60:48:f1:67:6c:45:95:31:c4:2f:
5d:c9:9b:27:44:7d:24:8b:6b:3e:65:7d:cd:2c:cc:
c7:8a:46:c9:55:4d:f7:f2:75:6e:f3:7e:22:46:c3:
d0:7b:30:db:91:46:c3:2a:21:34:b6:a1:7d:46:5a:
35:3f:28:69:55:1a:bb:1f:e8:31:b5:7b:2a:93:20:
f9:de:79:0c:52:10:e9:78:0a:b1:32:1a:67:fd:84:
90:bc:e5:99:24:0b:26:f1:ad:55:f8:82:56:bf:35:
ed:85:ca:bb:5f:72:5a:3f:2a:f1:b9:3a:28:4f:2b:
d1:5e:7b:ff:9d:ca:aa:8f:63:e7:9e:a1:31:5b:62:
02:64:98:59:fb:86:7d:39:68:0f:f0:b6:44:d3:de:
73:b1:53:31:94:06:db:00:c2:08:7d:50:23:70:2b:
b5:c6:77:a4:7e:d0:28:d4:6d:90:08:4b:7b:86:20:
16:89:d1:86:58:c2:57:be:0b:10:39:d9:70:6a:b7:
58:50:49:e4:4d:9b:bf:08:f1:e1:39:af:ec:19:69:
90:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4A:FA:72:5A:77:1F:29:30:82:66:B8:0E:0B:80:5D:7D:83:DD:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a0r6clp3Hykwgma4DguAXX2D3f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:52:2b:56:ed:23:1d:20:23:3c:8b:50:40:17:04:6e:a9:c3:
e4:e1:2e:10:01:a8:24:59:f2:1f:e5:a2:ee:be:f5:a2:4b:fe:
d5:a3:e1:78:6a:41:d4:1a:df:4b:5b:4a:35:09:2b:5b:bc:b6:
65:47:07:15:30:a3:0a:5e:d0:f8:3f:fd:dc:5c:2f:dc:c2:ef:
32:f7:13:12:16:92:42:33:27:18:0f:96:e3:93:9d:30:10:11:
34:5c:2e:28:ce:a7:da:f4:a9:09:52:51:3e:73:75:d9:a7:94:
0d:6d:5f:b2:ce:ec:64:6a:ab:a3:c4:92:16:11:c7:f4:3c:cb:
b4:25:d3:4a:53:a0:f9:4a:07:8a:54:7b:f4:95:82:60:63:4f:
24:3f:a5:1e:8c:78:1e:8f:63:6e:1d:c2:1e:83:70:62:36:f7:
86:5f:53:1f:eb:4d:14:1f:f3:b5:33:34:f1:c1:18:10:3e:4e:
2c:8b:1f:56:dd:29:1c:48:bd:b1:2b:83:00:f1:72:56:7a:f0:
d9:97:d0:be:51:56:30:02:df:ee:63:19:1e:07:64:6c:93:0c:
45:d0:60:cb:18:1d:8e:27:af:12:55:17:22:da:d4:eb:47:81:
75:18:93:7f:be:c1:b4:27:e0:71:5b:47:cf:a6:b2:08:6e:cf:
99:9d:81:c9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYc5DvZapAPW197qW5Bwk0PCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzMxMTkwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjRhZmE3MjVhNzcxZjI5MzA4MjY2YjgwZTBiODA1ZDdkODNkZGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQIU09lMAESQUQgBIxQHCCbw+ppN
1jQ8PoyquchCICKHgBxhWNLA7uNAJrBOM4U5SGBI8WdsRZUxxC9dyZsnRH0ki2s+
ZX3NLMzHikbJVU338nVu834iRsPQezDbkUbDKiE0tqF9Rlo1PyhpVRq7H+gxtXsq
kyD53nkMUhDpeAqxMhpn/YSQvOWZJAsm8a1V+IJWvzXthcq7X3JaPyrxuTooTyvR
Xnv/ncqqj2PnnqExW2ICZJhZ+4Z9OWgP8LZE095zsVMxlAbbAMIIfVAjcCu1xnek
ftAo1G2QCEt7hiAWidGGWMJXvgsQOdlwardYUEnkTZu/CPHhOa/sGWmQPQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGtK+nJadx8pMIJmuA4LgF19g93/MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYTByNmNscDNIeWt3Z21hNERndUFYWDJEM2Y4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAxSK1btIx0gIzyLUEAX
BG6pw+ThLhABqCRZ8h/lou6+9aJL/tWj4XhqQdQa30tbSjUJK1u8tmVHBxUwowpe
0Pg//dxcL9zC7zL3ExIWkkIzJxgPluOTnTAQETRcLijOp9r0qQlSUT5zddmnlA1t
X7LO7GRqq6PEkhYRx/Q8y7Ql00pToPlKB4pUe/SVgmBjTyQ/pR6MeB6PY24dwh6D
cGI294ZfUx/rTRQf87UzNPHBGBA+TiyLH1bdKRxIvbErgwDxclZ68NmX0L5RVjAC
3+5jGR4HZGyTDEXQYMsYHY4nrxJVFyLa1OtHgXUYk3++wbQn4HFbR8+msghuz5md
gck=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:30:12 2025 by rpki-client