Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-1DQ6ZiVwUcFhS8LfHweigxPew0.roa
File: 1-1DQ6ZiVwUcFhS8LfHweigxPew0.roa (raw, json)
Hash identifier: a6I3xkLVCidTG6RISu0qfy/dgc6gYtqAbnrpjAJdO5Q=
Subject key identifier: FB:50:D0:E9:98:95:C1:47:05:85:2F:0B:7C:7C:1E:8A:0C:4F:7B:0D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B2F162093919373F854133D53F8298C1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-1DQ6ZiVwUcFhS8LfHweigxPew0.roa
Signing time: Tue 13 Jun 2023 04:09:03 +0000
ROA not before: Tue 13 Jun 2023 04:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b2:f1:62:09:39:19:37:3f:85:41:33:d5:3f:82:98:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 13 04:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb50d0e99895c14705852f0b7c7c1e8a0c4f7b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:34:e6:0a:06:c9:a3:04:46:69:a1:4a:5e:0f:
12:a5:1d:0d:4c:25:fa:f0:7a:42:cb:f6:0a:16:99:
6f:0d:31:99:91:e3:80:24:ee:75:bc:7f:09:b9:4e:
ed:98:7e:fe:a5:78:7c:d0:63:45:be:9e:55:7e:00:
6a:a6:53:ea:a9:cc:36:42:d7:94:81:0b:dc:fd:10:
50:9f:dc:99:73:b5:83:b1:05:6a:9a:c3:5d:08:c5:
c5:0e:20:f0:0f:cb:fd:ab:08:15:76:73:f1:2c:47:
5b:18:6c:43:c0:1d:0a:ad:30:80:d0:c2:35:a8:71:
33:2a:2c:a0:91:e9:9c:23:f3:d2:73:a6:f1:24:22:
9a:0a:40:56:6a:cd:b4:18:bb:89:17:22:8c:a7:94:
5c:45:e7:1c:35:eb:af:f5:a4:49:89:81:05:b6:8a:
69:b5:8c:a7:75:c4:ac:ba:da:ae:35:75:38:97:8d:
9d:43:d1:7b:8d:6e:17:4b:e4:57:a2:5b:e5:a0:49:
57:b8:05:da:96:82:42:f0:28:87:47:af:aa:26:7b:
2a:04:55:e1:30:c6:a7:29:b3:65:32:43:37:46:d6:
c5:1a:13:f2:35:87:9a:6b:9c:6f:de:17:c8:9e:1a:
47:fc:47:1d:01:7e:e6:b5:06:47:65:b1:28:26:ad:
fd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:50:D0:E9:98:95:C1:47:05:85:2F:0B:7C:7C:1E:8A:0C:4F:7B:0D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-1DQ6ZiVwUcFhS8LfHweigxPew0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:95:c4:12:f8:a4:dc:e1:90:32:a2:e9:5b:54:96:d2:2f:43:
b2:0e:4f:72:8e:77:65:48:d3:69:2c:4f:92:15:54:67:95:70:
65:5e:60:61:16:27:bc:86:86:ce:cc:a3:e7:15:e5:c5:82:30:
64:93:34:41:74:d3:f0:f4:ab:20:82:ea:67:1a:b1:72:64:04:
b3:fe:f2:43:84:92:b1:f5:ef:79:51:c5:58:e8:d5:a4:b3:28:
e7:2b:01:83:66:99:16:34:4b:97:86:9c:74:fc:07:c5:3c:91:
c9:fc:1b:33:74:c8:c3:5c:b5:48:28:fb:de:4c:17:a8:a1:3b:
d3:38:8f:bf:46:c3:b1:69:ac:19:50:5f:70:28:4f:83:8e:31:
c5:31:c0:07:39:53:3f:87:a8:63:6b:f3:54:0f:08:bb:f6:47:
0c:ba:58:37:43:5a:c5:26:75:17:63:d9:3b:e7:07:4b:f0:1c:
ed:85:84:06:88:65:63:a7:66:b8:3f:c1:5e:1f:b0:9c:38:f0:
c4:10:bd:cc:02:ec:9b:f9:2c:07:9e:02:fa:22:e1:f8:b9:3a:
42:4d:52:bd:de:02:fa:9c:6d:54:67:99:95:6c:0d:25:aa:59:
75:d3:0f:64:99:e9:51:e9:32:64:b8:96:4e:6c:c9:9e:83:a2:
40:e3:6e:cd
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYiy8WIJORk3P4VBM9U/gpjBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjEzMDQwOTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjUwZDBlOTk4OTVjMTQ3MDU4NTJmMGI3YzdjMWU4YTBjNGY3YjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTTmCgbJowRGaaFKXg8SpR0NTCX6
8HpCy/YKFplvDTGZkeOAJO51vH8JuU7tmH7+pXh80GNFvp5VfgBqplPqqcw2QteU
gQvc/RBQn9yZc7WDsQVqmsNdCMXFDiDwD8v9qwgVdnPxLEdbGGxDwB0KrTCA0MI1
qHEzKiygkemcI/PSc6bxJCKaCkBWas20GLuJFyKMp5RcReccNeuv9aRJiYEFtopp
tYyndcSsutquNXU4l42dQ9F7jW4XS+RXolvloElXuAXaloJC8CiHR6+qJnsqBFXh
MManKbNlMkM3RtbFGhPyNYeaa5xv3hfInhpH/EcdAX7mtQZHZbEoJq39RwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPtQ0OmYlcFHBYUvC3x8HooMT3sNMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMS0xRFE2WmlWd1VjRmhTOExmSHdlaWd4UGV3MC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFh
Ni8xL2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQCalcQS+KTc4ZAyoulb
VJbSL0OyDk9yjndlSNNpLE+SFVRnlXBlXmBhFie8hobOzKPnFeXFgjBkkzRBdNPw
9KsggupnGrFyZASz/vJDhJKx9e95UcVY6NWksyjnKwGDZpkWNEuXhpx0/AfFPJHJ
/BszdMjDXLVIKPveTBeooTvTOI+/RsOxaawZUF9wKE+DjjHFMcAHOVM/h6hja/NU
Dwi79kcMulg3Q1rFJnUXY9k75wdL8BzthYQGiGVjp2a4P8FeH7CcOPDEEL3MAuyb
+SwHngL6IuH4uTpCTVK93gL6nG1UZ5mVbA0lqll10w9kmelR6TJkuJZObMmeg6JA
427N
-----END CERTIFICATE-----
Generated at Mon Jun 9 02:42:42 2025 by rpki-client