Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ajARNzt6GuCyQZhgomZxcJVpM-g.roa
File: ajARNzt6GuCyQZhgomZxcJVpM-g.roa (raw, json)
Hash identifier: GhZ7ItWo4DcMP4GYEackFVriaTxF9sJL5Ht9OIX/s2w=
Subject key identifier: 6A:30:11:37:3B:7A:1A:E0:B2:41:98:60:A2:66:71:70:95:69:33:E8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01884E878802D64DA7456E676BDA41CE5AEE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ajARNzt6GuCyQZhgomZxcJVpM-g.roa
Signing time: Wed 24 May 2023 16:11:24 +0000
ROA not before: Wed 24 May 2023 16:11:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4e:87:88:02:d6:4d:a7:45:6e:67:6b:da:41:ce:5a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 24 16:11:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a3011373b7a1ae0b2419860a2667170956933e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:6d:9a:44:fa:a3:ea:d7:99:d3:a6:3b:55:
78:f3:57:2d:80:60:06:9a:d2:8e:fc:94:53:4b:a2:
86:ca:f6:bb:63:36:8a:7d:5c:5f:53:f0:14:60:04:
e6:2e:ac:b3:e8:73:ba:ed:0d:01:22:e9:5b:18:79:
d3:3d:4d:4e:4b:29:76:f8:9f:75:8d:21:56:d5:b2:
e7:af:1d:3d:9f:3f:a5:71:1f:65:21:48:e5:62:0d:
07:68:7c:ee:49:64:2d:9a:3a:bb:fb:63:ea:96:94:
4f:43:9f:15:d1:3a:d0:35:49:8c:2b:29:8d:24:a4:
e8:0a:75:5a:a9:00:b0:2b:c2:62:78:69:66:9a:e7:
f4:dd:d7:15:47:2b:b4:e8:8d:98:29:b1:70:f4:23:
80:fa:3a:ef:2e:5a:96:aa:af:f8:3c:9e:5f:0e:ef:
8a:cd:c8:c2:04:35:fa:b9:bb:7a:c6:f1:46:69:5b:
ac:ce:35:a1:93:fa:e9:bc:86:a2:08:bf:b7:c3:4a:
0a:69:f6:61:72:57:d3:b7:39:da:fc:9e:8c:22:32:
c4:22:14:c9:06:b3:b8:6f:34:e1:43:9f:86:0b:85:
51:f5:da:70:67:3b:de:f6:3a:ac:44:ce:53:0b:e8:
2a:25:db:de:3b:e3:a3:01:29:53:4f:d7:56:df:a6:
f5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:30:11:37:3B:7A:1A:E0:B2:41:98:60:A2:66:71:70:95:69:33:E8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ajARNzt6GuCyQZhgomZxcJVpM-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:71:07:ab:d6:a8:5a:36:9a:63:b3:fe:ed:b9:09:9c:df:8e:
b8:c4:d4:02:de:d0:57:33:5d:3f:4e:e1:e6:53:9a:50:de:0c:
7e:6d:51:df:5a:c4:e6:b5:10:60:71:a1:51:fa:10:2f:56:8a:
60:16:d1:13:89:15:1a:19:0b:ad:96:27:20:16:9e:7d:2a:85:
b2:c0:89:12:85:61:60:1b:04:b6:fe:24:56:ac:cb:ed:c5:45:
e5:25:f3:9c:20:5f:72:f7:7f:04:a0:52:5f:55:46:19:1c:4f:
71:db:c6:52:ad:b7:c4:9e:61:42:90:e8:b3:89:01:6f:00:53:
80:c3:99:60:8c:0f:74:b8:09:df:f3:6c:54:90:9d:a4:49:ac:
33:25:1b:d8:3d:c5:1e:77:f4:1f:66:10:8b:49:3c:25:2a:1a:
c3:be:43:25:70:9a:42:fe:14:58:a7:1f:d5:7e:f8:2b:73:65:
5c:14:d8:ae:24:5a:97:d7:e0:fe:2a:e2:a3:00:e8:73:09:a7:
b7:a2:39:ab:e8:4e:90:ee:29:2f:91:1e:9a:ba:f2:90:0c:d9:
81:65:b6:c1:c6:28:f3:81:05:11:a4:b4:f5:c8:bb:5d:a4:f0:
6d:b7:57:af:0e:17:71:57:43:07:57:3b:2a:de:93:44:b4:7d:
b4:13:39:5c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhOh4gC1k2nRW5na9pBzlruMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTI0MTYxMTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTMwMTEzNzNiN2ExYWUwYjI0MTk4NjBhMjY2NzE3MDk1NjkzM2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGFtmkT6o+rXmdOmO1V481ctgGAG
mtKO/JRTS6KGyva7YzaKfVxfU/AUYATmLqyz6HO67Q0BIulbGHnTPU1OSyl2+J91
jSFW1bLnrx09nz+lcR9lIUjlYg0HaHzuSWQtmjq7+2PqlpRPQ58V0TrQNUmMKymN
JKToCnVaqQCwK8JieGlmmuf03dcVRyu06I2YKbFw9COA+jrvLlqWqq/4PJ5fDu+K
zcjCBDX6ubt6xvFGaVuszjWhk/rpvIaiCL+3w0oKafZhclfTtzna/J6MIjLEIhTJ
BrO4bzThQ5+GC4VR9dpwZzve9jqsRM5TC+gqJdveO+OjASlTT9dW36b1MQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGowETc7ehrgskGYYKJmcXCVaTPoMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYWpBUk56dDZHdUN5UVpoZ29tWnhjSlZwTS1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC1xB6vWqFo2mmOz/u25
CZzfjrjE1ALe0FczXT9O4eZTmlDeDH5tUd9axOa1EGBxoVH6EC9WimAW0ROJFRoZ
C62WJyAWnn0qhbLAiRKFYWAbBLb+JFasy+3FReUl85wgX3L3fwSgUl9VRhkcT3Hb
xlKtt8SeYUKQ6LOJAW8AU4DDmWCMD3S4Cd/zbFSQnaRJrDMlG9g9xR539B9mEItJ
PCUqGsO+QyVwmkL+FFinH9V++CtzZVwU2K4kWpfX4P4q4qMA6HMJp7eiOavoTpDu
KS+RHpq68pAM2YFltsHGKPOBBRGktPXIu12k8G23V68OF3FXQwdXOyrek0S0fbQT
OVw=
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:01:26 2025 by rpki-client