Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0W6BO78HhvbJx_iVauQ8ofbJyAg.roa
File: 0W6BO78HhvbJx_iVauQ8ofbJyAg.roa (raw, json)
Hash identifier: MgAnXEcbi4MK2i/4dxXJMDHc911y0RWbDZzA/kKpZDE=
Subject key identifier: D1:6E:81:3B:BF:07:86:F6:C9:C7:F8:95:6A:E4:3C:A1:F6:C9:C8:08
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01873383E4B0DE8AC236C694FBFAD33AB2D4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0W6BO78HhvbJx_iVauQ8ofbJyAg.roa
Signing time: Thu 30 Mar 2023 17:14:54 +0000
ROA not before: Thu 30 Mar 2023 17:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:33:83:e4:b0:de:8a:c2:36:c6:94:fb:fa:d3:3a:b2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 30 17:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d16e813bbf0786f6c9c7f8956ae43ca1f6c9c808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fd:ba:49:18:9f:80:7e:14:f3:f8:20:3a:22:
f3:55:d0:b0:7d:aa:21:81:96:43:24:1c:bc:66:3c:
90:9e:c1:ae:23:e1:33:80:9c:20:7a:b3:3c:26:76:
43:76:8f:64:d4:8a:5f:9b:66:f8:e3:26:3c:f6:02:
b7:09:50:1b:67:bc:6d:a8:b1:7f:10:76:e3:93:9f:
6e:ae:4b:dc:2d:64:cd:7e:78:d6:d2:98:28:3f:d3:
0b:f7:da:ae:06:ab:19:ee:ff:1f:6d:06:cc:de:7d:
18:98:30:92:2d:40:ae:19:e5:2d:59:7f:a6:23:3a:
91:4c:2b:f1:ab:85:dc:22:7a:1f:4b:c5:b2:43:2e:
3d:9c:43:49:e4:5e:a3:18:6b:d6:d4:de:f8:6b:21:
89:4f:3b:d4:2c:f0:99:42:4e:80:fd:cd:66:af:86:
31:17:04:b9:fe:80:37:74:87:2a:e4:45:eb:be:29:
06:5e:53:f4:96:94:c8:81:2a:b4:ed:88:91:b0:31:
12:9b:ff:73:f1:36:2f:6e:e7:e3:42:9a:9e:ec:cc:
cd:e6:e3:93:25:3c:b5:28:96:b7:19:d5:8c:5c:b0:
de:22:6d:a9:78:c9:0a:59:e2:37:b5:af:04:a0:fc:
0f:23:ce:1f:03:f3:30:e3:5d:2d:1b:4c:5f:f2:cb:
14:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6E:81:3B:BF:07:86:F6:C9:C7:F8:95:6A:E4:3C:A1:F6:C9:C8:08
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0W6BO78HhvbJx_iVauQ8ofbJyAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:75:a7:33:ae:10:e6:15:10:75:0c:b5:e2:ab:b5:dc:e7:73:
bc:08:7f:6e:33:bf:22:db:01:d4:b3:69:82:a6:f8:bd:27:fe:
1c:c7:89:08:46:73:1f:b9:c9:da:13:7e:4e:93:3e:9e:cf:95:
b6:82:83:ea:88:d8:15:71:0b:79:0a:da:56:b6:29:b1:1c:57:
df:84:69:47:b2:b6:33:9a:30:52:9e:20:b2:fd:5b:0c:28:4b:
2d:00:94:e8:d6:1d:cc:0e:56:d6:f4:8d:02:d4:fc:84:49:0c:
05:d0:e2:d8:bf:cc:77:65:71:dd:73:63:68:e8:50:06:fc:66:
11:99:a5:82:cf:7d:d0:27:44:a4:15:b1:8b:96:de:d7:98:1c:
4d:d9:9d:f6:de:68:e1:79:e4:e5:a5:5b:bd:c4:15:b9:36:b8:
04:f3:a0:0d:47:07:56:19:70:e4:f4:b0:2c:16:f4:43:15:71:
19:da:2f:f5:91:f4:3a:09:b7:69:77:d2:69:10:b0:95:49:53:
dc:33:1c:cb:9e:4b:45:58:57:fa:41:19:39:fa:8f:9f:3b:04:
de:ed:54:23:cc:fa:bb:02:a7:f7:b9:fa:7a:fd:49:49:6e:02:
ac:64:e4:a7:e3:0e:28:df:d9:db:71:35:9e:b7:32:eb:cc:a6:
fb:bd:18:fb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYczg+Sw3orCNsaU+/rTOrLUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzMwMTcxNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTZlODEzYmJmMDc4NmY2YzljN2Y4OTU2YWU0M2NhMWY2YzljODA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP26SRifgH4U8/ggOiLzVdCwfaoh
gZZDJBy8ZjyQnsGuI+EzgJwgerM8JnZDdo9k1Ipfm2b44yY89gK3CVAbZ7xtqLF/
EHbjk59urkvcLWTNfnjW0pgoP9ML99quBqsZ7v8fbQbM3n0YmDCSLUCuGeUtWX+m
IzqRTCvxq4XcInofS8WyQy49nENJ5F6jGGvW1N74ayGJTzvULPCZQk6A/c1mr4Yx
FwS5/oA3dIcq5EXrvikGXlP0lpTIgSq07YiRsDESm/9z8TYvbufjQpqe7MzN5uOT
JTy1KJa3GdWMXLDeIm2peMkKWeI3ta8EoPwPI84fA/Mw410tG0xf8ssUBQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNFugTu/B4b2ycf4lWrkPKH2ycgIMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMFc2Qk83OEhodmJKeF9pVmF1UThvZmJKeUFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADR1pzOuEOYVEHUMteKr
tdznc7wIf24zvyLbAdSzaYKm+L0n/hzHiQhGcx+5ydoTfk6TPp7PlbaCg+qI2BVx
C3kK2la2KbEcV9+EaUeytjOaMFKeILL9WwwoSy0AlOjWHcwOVtb0jQLU/IRJDAXQ
4ti/zHdlcd1zY2joUAb8ZhGZpYLPfdAnRKQVsYuW3teYHE3ZnfbeaOF55OWlW73E
Fbk2uATzoA1HB1YZcOT0sCwW9EMVcRnaL/WR9DoJt2l30mkQsJVJU9wzHMueS0VY
V/pBGTn6j587BN7tVCPM+rsCp/e5+nr9SUluAqxk5KfjDijf2dtxNZ63MuvMpvu9
GPs=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:06:46 2025 by rpki-client