Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-6Ou4JMmBPTf8D6fWtB6MvC9R68.roa
File: 1-6Ou4JMmBPTf8D6fWtB6MvC9R68.roa (raw, json)
Hash identifier: GffpnIglLgUeULg53ndVEYUP1Gachk7Q7lIH/q/jHHw=
Subject key identifier: FB:A3:AE:E0:93:26:04:F4:DF:F0:3E:9F:5A:D0:7A:32:F0:BD:47:AF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01882FD257CA3D8DC1885DC5AE8F921AEFE4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-6Ou4JMmBPTf8D6fWtB6MvC9R68.roa
Signing time: Thu 18 May 2023 17:04:54 +0000
ROA not before: Thu 18 May 2023 17:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:2fd1:c792/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2f:d2:57:ca:3d:8d:c1:88:5d:c5:ae:8f:92:1a:ef:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 18 17:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fba3aee0932604f4dff03e9f5ad07a32f0bd47af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f7:06:a4:51:c6:eb:aa:2c:11:c3:aa:d2:5a:
51:36:05:dc:2b:f0:95:5c:3b:68:70:64:58:5b:9c:
ef:ea:2c:68:c5:3f:a4:05:59:4b:e1:36:39:41:fd:
7c:12:19:ce:01:32:9e:6e:79:40:47:e5:ff:c2:b6:
ca:7c:9f:3f:be:3a:82:70:1b:19:b2:b0:f5:79:6d:
52:64:48:68:ce:bb:f2:15:7c:83:8b:c8:36:16:06:
c1:b6:c3:78:5c:5f:87:f3:da:2b:c1:36:79:78:a8:
9d:94:0d:0a:4f:6e:f7:90:b2:91:78:8b:12:69:ff:
74:5d:43:5f:d9:dd:62:3a:cc:5e:06:1d:19:0f:f1:
ba:6c:09:87:1e:2a:06:20:0f:f1:e9:94:2d:39:d9:
ce:ff:49:64:bd:aa:ee:46:8e:ca:ac:37:6c:5d:bd:
d4:30:d2:6c:fc:a6:4f:83:9d:26:b2:db:d1:5d:9e:
be:49:72:aa:4b:c6:9e:14:59:56:c0:62:ab:53:a5:
f1:2f:a1:dc:48:f7:48:4a:26:46:ec:05:ae:d6:fa:
c3:ab:68:02:78:f2:d1:18:fe:17:85:4e:dc:d8:5d:
48:25:71:f1:ea:d4:aa:06:e3:6c:2d:69:73:f3:40:
33:74:e2:08:c1:5e:66:63:e5:4d:6f:5f:94:62:59:
a8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A3:AE:E0:93:26:04:F4:DF:F0:3E:9F:5A:D0:7A:32:F0:BD:47:AF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-6Ou4JMmBPTf8D6fWtB6MvC9R68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:bf:5d:c6:5e:a0:dc:b7:01:79:7b:54:42:ca:96:d2:7d:54:
c4:28:fc:bb:fc:03:d3:ad:87:7f:55:b8:5c:aa:05:22:3e:ac:
0b:d9:3a:a6:38:8a:57:6d:9f:42:62:6a:78:1b:76:7d:59:7c:
27:10:3e:77:99:93:00:de:ad:c0:f8:51:16:c5:3f:76:08:06:
06:88:22:ac:41:3d:fd:06:b9:d4:91:a1:5b:fd:22:e6:b5:d7:
76:39:ae:27:8f:21:72:e9:13:57:67:7c:73:83:6c:9f:e4:ee:
5d:77:7f:5f:45:8d:c7:b9:34:38:49:cb:5d:04:b5:9b:20:41:
0e:bb:08:87:e2:cb:e3:79:7c:c1:a0:50:20:22:17:27:f3:d9:
b5:fc:ab:10:2e:b6:cf:68:d5:64:6b:e8:3f:9c:8b:10:f0:53:
7d:bc:6f:bf:e3:dc:85:cf:33:47:ae:a1:cf:3b:4b:b4:8e:c9:
01:a6:0b:50:8e:f5:7b:42:52:8a:70:f3:a9:88:39:42:e4:a7:
49:1c:c6:c1:1c:53:99:0f:47:43:5d:aa:60:70:ab:fc:7b:cf:
8c:38:a7:2f:a4:56:4b:e6:c7:72:b4:21:88:bf:4a:24:6c:90:
d3:44:29:3d:6b:b4:f3:67:fd:10:81:11:a5:dd:4a:a9:5c:77:
bc:1c:56:f7
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYgv0lfKPY3BiF3Fro+SGu/kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTE4MTcwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmEzYWVlMDkzMjYwNGY0ZGZmMDNlOWY1YWQwN2EzMmYwYmQ0N2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfcGpFHG66osEcOq0lpRNgXcK/CV
XDtocGRYW5zv6ixoxT+kBVlL4TY5Qf18EhnOATKebnlAR+X/wrbKfJ8/vjqCcBsZ
srD1eW1SZEhozrvyFXyDi8g2FgbBtsN4XF+H89orwTZ5eKidlA0KT273kLKReIsS
af90XUNf2d1iOsxeBh0ZD/G6bAmHHioGIA/x6ZQtOdnO/0lkvaruRo7KrDdsXb3U
MNJs/KZPg50mstvRXZ6+SXKqS8aeFFlWwGKrU6XxL6HcSPdISiZG7AWu1vrDq2gC
ePLRGP4XhU7c2F1IJXHx6tSqBuNsLWlz80AzdOIIwV5mY+VNb1+UYlmoTQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPujruCTJgT03/A+n1rQejLwvUevMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMS02T3U0Sk1tQlBUZjhENmZXdEI2TXZDOVI2OC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFh
Ni8xL2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQCBv13GXqDctwF5e1RC
ypbSfVTEKPy7/APTrYd/VbhcqgUiPqwL2TqmOIpXbZ9CYmp4G3Z9WXwnED53mZMA
3q3A+FEWxT92CAYGiCKsQT39BrnUkaFb/SLmtdd2Oa4njyFy6RNXZ3xzg2yf5O5d
d39fRY3HuTQ4SctdBLWbIEEOuwiH4svjeXzBoFAgIhcn89m1/KsQLrbPaNVka+g/
nIsQ8FN9vG+/49yFzzNHrqHPO0u0jskBpgtQjvV7QlKKcPOpiDlC5KdJHMbBHFOZ
D0dDXapgcKv8e8+MOKcvpFZL5sdytCGIv0okbJDTRCk9a7TzZ/0QgRGl3UqpXHe8
HFb3
-----END CERTIFICATE-----
Generated at Mon Jun 9 05:19:47 2025 by rpki-client