Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/_R6-ct2FIsT35Ct-mCqa6IagGkk.roa
File: _R6-ct2FIsT35Ct-mCqa6IagGkk.roa (raw, json)
Hash identifier: iKg952xKj8ukZR4BM4h/AUv9L1cDvwqbBqKnmcJTjRo=
Subject key identifier: FD:1E:BE:72:DD:85:22:C4:F7:E4:2B:7E:98:2A:9A:E8:86:A0:1A:49
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A4730F1B18F4346E1B39587D7C8DEFBCD
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/_R6-ct2FIsT35Ct-mCqa6IagGkk.roa
Signing time: Wed 30 Aug 2023 16:05:04 +0000
ROA not before: Wed 30 Aug 2023 16:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:4730:361b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:47:30:f1:b1:8f:43:46:e1:b3:95:87:d7:c8:de:fb:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Aug 30 16:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd1ebe72dd8522c4f7e42b7e982a9ae886a01a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:72:08:aa:24:40:01:05:88:fd:86:d0:e1:31:
74:76:91:66:cb:c5:15:62:65:85:6d:5a:aa:18:bb:
ec:ae:5c:1a:79:9e:f9:3e:8c:92:11:fa:6c:68:cb:
bd:ee:f4:6f:44:d0:d4:a5:58:d6:39:76:16:ee:4d:
7e:e0:18:5e:21:6e:18:a0:bb:25:17:81:02:69:7b:
f8:3e:75:a2:1e:7a:6a:0a:76:82:82:1c:24:1a:c9:
c2:49:9a:db:88:f5:82:8a:10:46:38:40:6b:b3:b4:
5f:a4:0f:fc:1e:b2:cf:00:b0:64:3a:51:80:d5:bc:
e4:9c:4e:24:6f:15:15:eb:46:fc:7a:e6:68:d6:f2:
43:48:34:51:27:2d:62:a6:78:38:81:e7:2a:f3:60:
39:ae:27:d1:0a:a1:f8:23:a1:11:d5:4b:54:f3:f8:
23:9e:57:b0:14:32:1a:70:eb:7a:10:34:90:3d:85:
cc:44:99:21:d9:e1:1c:5f:da:ba:9a:ff:b7:de:6b:
30:79:dc:96:37:c0:ec:e9:bc:4c:a7:90:a0:6e:93:
bb:ed:78:aa:07:c6:8a:a1:69:b5:bc:0a:be:5f:8e:
3f:1e:ed:09:ad:3f:7a:85:36:93:2b:21:12:16:05:
b2:1a:09:33:df:a6:42:47:18:68:e5:0c:3b:b8:e7:
d4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1E:BE:72:DD:85:22:C4:F7:E4:2B:7E:98:2A:9A:E8:86:A0:1A:49
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/_R6-ct2FIsT35Ct-mCqa6IagGkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:1a:65:fd:d6:1b:25:54:7d:7d:b0:71:ca:22:d2:97:87:00:
fc:57:34:13:45:09:9f:79:e1:15:70:02:41:0a:ef:42:fb:79:
3a:77:e4:a6:f0:99:e7:a0:92:d1:e2:52:d2:36:3a:6f:eb:d0:
f1:53:ae:6f:f5:12:03:ab:c3:b5:db:54:47:f4:1d:1a:c0:87:
9c:22:0e:a6:da:9c:c4:05:d9:4c:d2:c0:08:af:2e:6c:c1:cb:
12:96:6a:2e:f5:68:dd:51:4f:33:26:f2:d7:5a:b3:30:d7:96:
48:b6:ac:fd:4b:1b:f4:dd:ec:bd:47:3d:2e:6a:f6:18:d1:92:
3f:62:4f:bf:df:62:33:f7:ce:c5:6a:36:5d:82:51:dd:76:92:
12:9d:f1:c8:ef:b5:66:68:b2:c0:68:a6:6a:8e:20:95:15:70:
05:54:c4:29:bd:89:ed:0f:13:7d:19:5e:eb:34:51:5e:dc:25:
8e:f0:18:1d:fb:97:66:56:bd:bf:33:4c:ae:a8:c9:68:12:1f:
c3:e7:6d:33:74:7c:61:35:dc:e6:b8:a1:5a:23:cb:7f:fd:38:
ba:d3:f4:95:52:c5:37:e1:e7:50:99:ce:26:f4:4c:c2:b8:68:
04:28:23:88:17:c6:3d:db:9a:02:a8:60:80:97:44:b2:7c:36:
b7:42:e0:61
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYpHMPGxj0NG4bOVh9fI3vvNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwODMwMTYwNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDFlYmU3MmRkODUyMmM0ZjdlNDJiN2U5ODJhOWFlODg2YTAxYTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHIIqiRAAQWI/YbQ4TF0dpFmy8UV
YmWFbVqqGLvsrlwaeZ75PoySEfpsaMu97vRvRNDUpVjWOXYW7k1+4BheIW4YoLsl
F4ECaXv4PnWiHnpqCnaCghwkGsnCSZrbiPWCihBGOEBrs7RfpA/8HrLPALBkOlGA
1bzknE4kbxUV60b8euZo1vJDSDRRJy1ipng4gecq82A5rifRCqH4I6ER1UtU8/gj
nlewFDIacOt6EDSQPYXMRJkh2eEcX9q6mv+33mswedyWN8Ds6bxMp5CgbpO77Xiq
B8aKoWm1vAq+X44/Hu0JrT96hTaTKyESFgWyGgkz36ZCRxho5Qw7uOfUswIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFP0evnLdhSLE9+QrfpgqmuiGoBpJMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvX1I2LWN0MkZJc1QzNUN0LW1DcWE2SWFnR2trLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADAaZf3WGyVUfX2wccoi
0peHAPxXNBNFCZ954RVwAkEK70L7eTp35KbwmeegktHiUtI2Om/r0PFTrm/1EgOr
w7XbVEf0HRrAh5wiDqbanMQF2UzSwAivLmzByxKWai71aN1RTzMm8tdaszDXlki2
rP1LG/Td7L1HPS5q9hjRkj9iT7/fYjP3zsVqNl2CUd12khKd8cjvtWZossBopmqO
IJUVcAVUxCm9ie0PE30ZXus0UV7cJY7wGB37l2ZWvb8zTK6oyWgSH8PnbTN0fGE1
3Oa4oVojy3/9OLrT9JVSxTfh51CZzib0TMK4aAQoI4gXxj3bmgKoYICXRLJ8NrdC
4GE=
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:46:52 2025 by rpki-client