Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6S9KfZPiVFYvGRR3wcLcWaGadaA.roa
File: 6S9KfZPiVFYvGRR3wcLcWaGadaA.roa (raw, json)
Hash identifier: lo+znZ3iZpbHbAKZIFRomTA9r72b/skhdhI/PF+vFzc=
Subject key identifier: E9:2F:4A:7D:93:E2:54:56:2F:19:14:77:C1:C2:DC:59:A1:9A:75:A0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01870006A202615611D9895672A4A50B2A3A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6S9KfZPiVFYvGRR3wcLcWaGadaA.roa
Signing time: Mon 20 Mar 2023 17:17:27 +0000
ROA not before: Mon 20 Mar 2023 17:17:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:00:06:a2:02:61:56:11:d9:89:56:72:a4:a5:0b:2a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 20 17:17:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e92f4a7d93e254562f191477c1c2dc59a19a75a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:75:9f:32:08:d4:09:f9:f0:77:a1:49:3b:f3:
cc:11:e5:e6:a0:aa:ce:fa:3a:03:a2:ce:7f:d3:b8:
c5:15:4b:22:4a:dc:06:e2:8a:1a:71:e3:88:88:c9:
29:be:60:60:f3:02:1a:a7:d3:32:e0:58:38:56:45:
65:b7:fc:03:36:77:cf:ce:ad:07:70:72:18:de:85:
28:7f:3c:39:75:1a:d4:89:4c:75:2b:d5:b1:82:cb:
46:63:3a:5b:08:27:dc:52:2f:0a:d7:a3:5b:e3:69:
52:b6:91:b9:42:31:58:8c:7d:e7:77:6e:a1:50:75:
f9:0e:8e:7b:cf:45:3f:14:36:f9:96:7a:70:06:3d:
be:14:df:d1:bb:c7:c5:c3:0d:00:03:ab:b9:32:23:
5d:34:f5:a0:3c:ec:27:f1:d4:66:a1:15:f0:2e:cf:
ee:f5:d4:c5:16:2e:74:f7:6d:b4:6b:fc:fd:8c:84:
cd:74:82:d8:8f:55:71:91:94:73:03:43:d5:2d:32:
0c:5e:58:1d:f7:23:22:78:76:0f:3b:ff:8a:8d:24:
a8:37:19:81:de:ed:35:12:ec:a7:d8:81:a4:73:98:
e2:0d:8c:b3:a0:6c:8a:66:33:78:a1:ad:29:43:39:
42:d8:e7:b3:39:4a:c8:2b:60:3a:41:8f:06:06:c7:
86:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2F:4A:7D:93:E2:54:56:2F:19:14:77:C1:C2:DC:59:A1:9A:75:A0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6S9KfZPiVFYvGRR3wcLcWaGadaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:e0:35:93:4a:7b:3b:d3:71:bf:67:52:39:e3:1a:e9:5e:06:
e2:a9:a9:81:c1:6a:9b:25:79:85:24:6d:a3:ef:a4:a1:24:6b:
45:6a:3e:b7:4f:e6:71:be:06:b9:6c:a2:c3:3c:0f:de:85:39:
ca:d5:75:63:2a:83:1b:ea:4a:7b:5f:83:d9:32:24:6b:e1:e8:
0d:9e:ab:a8:b2:df:5d:47:8a:c2:6d:90:10:e8:0c:15:50:87:
84:23:4f:a1:e3:87:b6:b9:b5:65:b9:aa:aa:de:aa:4b:d9:52:
c1:1d:99:f2:b9:04:6d:da:7d:8c:13:c5:bd:a4:5d:9b:55:9a:
4a:9e:2c:39:80:4d:53:a3:d2:ea:a2:2d:ed:5e:db:2a:ef:d9:
90:f6:f8:f4:7c:1b:33:de:f9:c4:ac:6e:58:6d:61:14:4f:ed:
c9:f9:89:d9:65:ab:ad:c9:d0:68:4d:86:b4:26:eb:7d:3f:4f:
93:15:f9:db:b4:93:3e:22:5e:8a:dc:50:15:20:d9:2c:a1:25:
9d:ff:bd:90:13:ba:a9:8b:3c:c9:76:c8:bb:a3:b6:e3:a7:b3:
57:6c:80:33:4d:5f:83:f6:e1:0d:91:08:f9:36:d7:f2:ea:10:
80:bf:ec:d2:7f:89:18:0b:3c:43:2c:53:1a:42:9e:1c:19:d7:
18:d9:9f:4b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYcABqICYVYR2YlWcqSlCyo6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzIwMTcxNzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTJmNGE3ZDkzZTI1NDU2MmYxOTE0NzdjMWMyZGM1OWExOWE3NWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnWfMgjUCfnwd6FJO/PMEeXmoKrO
+joDos5/07jFFUsiStwG4ooaceOIiMkpvmBg8wIap9My4Fg4VkVlt/wDNnfPzq0H
cHIY3oUofzw5dRrUiUx1K9WxgstGYzpbCCfcUi8K16Nb42lStpG5QjFYjH3nd26h
UHX5Do57z0U/FDb5lnpwBj2+FN/Ru8fFww0AA6u5MiNdNPWgPOwn8dRmoRXwLs/u
9dTFFi509220a/z9jITNdILYj1VxkZRzA0PVLTIMXlgd9yMieHYPO/+KjSSoNxmB
3u01Euyn2IGkc5jiDYyzoGyKZjN4oa0pQzlC2OezOUrIK2A6QY8GBseGiQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOkvSn2T4lRWLxkUd8HC3FmhmnWgMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNlM5S2ZaUGlWRll2R1JSM3djTGNXYUdhZGFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEbgNZNKezvTcb9nUjnj
GuleBuKpqYHBapsleYUkbaPvpKEka0VqPrdP5nG+BrlsosM8D96FOcrVdWMqgxvq
Sntfg9kyJGvh6A2eq6iy311HisJtkBDoDBVQh4QjT6Hjh7a5tWW5qqreqkvZUsEd
mfK5BG3afYwTxb2kXZtVmkqeLDmATVOj0uqiLe1e2yrv2ZD2+PR8GzPe+cSsblht
YRRP7cn5idllq63J0GhNhrQm630/T5MV+du0kz4iXorcUBUg2SyhJZ3/vZATuqmL
PMl2yLujtuOns1dsgDNNX4P24Q2RCPk21/LqEIC/7NJ/iRgLPEMsUxpCnhwZ1xjZ
n0s=
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:14:22 2025 by rpki-client