Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bsO6BAsVVXeloHWfAqJVOHShWnw.roa
File: bsO6BAsVVXeloHWfAqJVOHShWnw.roa (raw, json)
Hash identifier: WbNe0kXIk7K+P3ClJvvV3e31mfOyP9x7PWUO6sEoUNc=
Subject key identifier: 6E:C3:BA:04:0B:15:55:77:A5:A0:75:9F:02:A2:55:38:74:A1:5A:7C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018848BA8BC50DC86E5C1D4084551C26013D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bsO6BAsVVXeloHWfAqJVOHShWnw.roa
Signing time: Tue 23 May 2023 13:09:24 +0000
ROA not before: Tue 23 May 2023 13:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:48:ba:8b:c5:0d:c8:6e:5c:1d:40:84:55:1c:26:01:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 23 13:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ec3ba040b155577a5a0759f02a2553874a15a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:75:de:67:2e:2b:63:97:7d:c1:88:74:39:62:
6b:d1:17:5b:2f:32:d3:25:b3:c5:bc:24:13:aa:62:
7e:44:f4:6a:c7:17:89:98:c6:c4:f3:55:54:86:68:
20:64:2f:32:df:15:c4:10:27:e3:15:d1:7a:3f:a9:
38:66:ef:d1:66:4c:ba:7e:84:fb:33:99:0f:10:d5:
c7:f6:4d:6e:9e:4a:df:bd:66:e9:da:81:87:5b:c0:
30:c5:94:23:12:fc:02:08:76:4a:19:a8:f9:b2:20:
3e:2d:94:94:e7:a4:c1:2c:1f:21:ad:cd:d4:e0:97:
dd:0a:86:9f:2e:e6:b4:91:06:d3:4b:20:d3:67:cf:
37:ca:2b:9e:4e:b1:1b:9d:da:f4:fd:56:02:e1:c0:
b3:ae:f9:29:bb:52:48:e4:e5:c0:1d:28:bb:6a:9c:
3d:8a:1b:c1:e6:3c:39:23:ea:21:ec:ae:3d:2c:69:
f1:26:0f:46:ec:c0:6d:46:18:d3:7b:67:10:74:e8:
34:ad:cc:0a:bb:d9:23:61:23:60:82:f5:0c:1e:24:
b2:6f:9b:05:a8:23:29:dc:b2:50:9d:e8:13:2e:fb:
b2:7b:8c:88:ff:5d:5c:b8:b2:a5:31:8c:b6:6f:ac:
3b:51:6a:90:14:30:1f:e3:dd:52:00:52:d4:f0:94:
90:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C3:BA:04:0B:15:55:77:A5:A0:75:9F:02:A2:55:38:74:A1:5A:7C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bsO6BAsVVXeloHWfAqJVOHShWnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:b0:96:69:53:fc:96:87:82:4c:e3:e1:ef:c6:7c:96:e4:37:
22:97:9e:de:b4:bf:92:da:bb:78:65:a8:cf:04:ab:7d:f0:cf:
2e:aa:72:38:4c:b1:e3:f4:a4:75:e2:0b:06:6f:6e:7b:c4:f4:
00:af:2b:3e:de:4d:da:d7:ff:03:30:58:8e:85:79:43:25:3c:
38:8d:c2:e6:92:d5:31:52:c0:55:fc:33:f1:cb:2e:30:fa:7d:
dd:16:e4:c6:ef:f2:4b:00:58:0d:3b:3b:93:39:4c:ef:58:80:
f9:c8:fa:e2:c6:12:f0:52:21:10:34:b9:dd:0e:e9:5c:9b:52:
bc:4e:9d:cd:59:f4:a3:ba:26:26:77:5e:88:aa:87:c2:92:4f:
82:ae:be:55:3c:c1:78:c9:20:f5:49:4e:38:73:22:2e:c6:8e:
01:9e:16:a5:e3:6f:2f:f5:95:79:a8:17:13:2f:49:0d:3a:90:
51:64:2b:7e:9d:a1:99:99:78:73:fd:5c:19:a4:ba:6b:51:4d:
d8:c5:a7:64:3c:d1:15:6f:5d:b6:1f:77:0a:de:f8:3b:6b:5e:
b4:00:d2:52:50:a0:ba:7b:0e:09:ff:f3:64:17:82:57:3e:e5:
85:c6:3f:89:92:7b:ef:3e:f8:d7:80:2b:84:97:ed:3c:33:9a:
03:7c:f7:26
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhIuovFDchuXB1AhFUcJgE9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTIzMTMwOTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWMzYmEwNDBiMTU1NTc3YTVhMDc1OWYwMmEyNTUzODc0YTE1YTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HXeZy4rY5d9wYh0OWJr0RdbLzLT
JbPFvCQTqmJ+RPRqxxeJmMbE81VUhmggZC8y3xXEECfjFdF6P6k4Zu/RZky6foT7
M5kPENXH9k1unkrfvWbp2oGHW8AwxZQjEvwCCHZKGaj5siA+LZSU56TBLB8hrc3U
4JfdCoafLua0kQbTSyDTZ883yiueTrEbndr0/VYC4cCzrvkpu1JI5OXAHSi7apw9
ihvB5jw5I+oh7K49LGnxJg9G7MBtRhjTe2cQdOg0rcwKu9kjYSNggvUMHiSyb5sF
qCMp3LJQnegTLvuye4yI/11cuLKlMYy2b6w7UWqQFDAf491SAFLU8JSQFwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFG7DugQLFVV3paB1nwKiVTh0oVp8MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYnNPNkJBc1ZWWGVsb0hXZkFxSlZPSFNoV253LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGGwlmlT/JaHgkzj4e/G
fJbkNyKXnt60v5Lau3hlqM8Eq33wzy6qcjhMseP0pHXiCwZvbnvE9ACvKz7eTdrX
/wMwWI6FeUMlPDiNwuaS1TFSwFX8M/HLLjD6fd0W5Mbv8ksAWA07O5M5TO9YgPnI
+uLGEvBSIRA0ud0O6VybUrxOnc1Z9KO6JiZ3Xoiqh8KST4KuvlU8wXjJIPVJTjhz
Ii7GjgGeFqXjby/1lXmoFxMvSQ06kFFkK36doZmZeHP9XBmkumtRTdjFp2Q80RVv
XbYfdwre+DtrXrQA0lJQoLp7Dgn/82QXglc+5YXGP4mSe+8++NeAK4SX7TwzmgN8
9yY=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:21:01 2025 by rpki-client