Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6tDYV8KtJFHQGduKEmcmpOtD3fQ.roa
File: 6tDYV8KtJFHQGduKEmcmpOtD3fQ.roa (raw, json)
Hash identifier: EpcXm72dedDSvOTpUlpPEJkEEK+4Eeu0CmpftOgWGlA=
Subject key identifier: EA:D0:D8:57:C2:AD:24:51:D0:19:DB:8A:12:67:26:A4:EB:43:DD:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189ED19CD268EC22A9F8A29C00399DA570A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6tDYV8KtJFHQGduKEmcmpOtD3fQ.roa
Signing time: Sun 13 Aug 2023 04:13:58 +0000
ROA not before: Sun 13 Aug 2023 04:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ed:19:cd:26:8e:c2:2a:9f:8a:29:c0:03:99:da:57:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 13 04:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ead0d857c2ad2451d019db8a126726a4eb43ddf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6f:8d:60:ed:44:8b:eb:39:6e:cb:a4:e7:d8:
c7:95:fb:54:99:b6:14:5d:db:5e:c7:64:ee:a6:b1:
53:62:1c:a8:70:22:64:08:6a:d2:a3:87:57:41:7d:
85:dd:80:e4:a9:58:6c:83:9a:04:60:46:0a:93:92:
cd:7b:bd:1a:a7:db:96:5a:ac:8e:fc:22:98:2a:d1:
98:90:35:84:8f:90:c9:39:c8:69:bf:4b:68:96:02:
e6:83:91:54:e5:4a:91:ff:12:f3:c3:76:6a:0d:8e:
a3:7c:09:b9:eb:3e:2d:cc:6e:9c:d8:e0:af:62:95:
18:d5:6d:4d:c2:29:ea:40:78:d5:59:df:bc:db:5e:
fc:a9:9b:cb:bc:44:2f:68:42:42:9b:e1:11:f7:8d:
39:06:24:ed:8d:aa:15:54:78:f4:2b:54:34:6c:fd:
91:2b:27:3c:a2:6c:6c:d3:37:05:6f:8d:84:e8:c1:
19:aa:03:19:21:e3:6e:67:df:61:3a:5c:42:8b:8e:
c9:55:38:f8:2c:a8:74:c7:fc:01:c6:c5:1e:85:c7:
e4:db:99:25:bd:e8:2c:7c:1b:8f:86:00:57:64:15:
72:9a:20:5c:8a:ea:72:6e:58:29:9a:df:79:f0:dd:
4f:c0:9c:8b:ea:67:85:e4:f2:f9:23:ad:7b:16:82:
b8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D0:D8:57:C2:AD:24:51:D0:19:DB:8A:12:67:26:A4:EB:43:DD:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6tDYV8KtJFHQGduKEmcmpOtD3fQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:84:68:d0:16:c1:c3:ea:b1:ec:f5:70:bb:03:af:8a:98:23:
b0:a8:9e:66:5e:d4:83:ef:fb:9b:62:4e:28:f6:ff:60:ca:55:
f9:ee:57:6c:4c:68:57:62:12:79:00:cf:d9:fe:5a:d9:00:46:
2b:bc:7d:b9:0d:33:f6:dc:4f:a0:42:2e:dc:e6:b7:77:6b:8d:
cb:31:be:96:19:39:1a:88:44:50:07:26:20:f5:b4:8a:fc:c2:
ca:fb:c2:08:11:65:2d:8e:38:f9:91:dd:95:f5:5c:22:59:c5:
d9:dd:f4:dd:51:e1:8b:0a:d0:72:90:3b:22:fd:6d:71:90:68:
26:54:f3:9b:e6:60:de:b0:38:d0:af:42:2f:3b:a2:62:9a:a9:
e6:b0:38:a7:29:a3:6f:d8:70:8c:8d:45:bc:90:ca:1d:e1:f8:
a9:1d:50:3e:25:83:44:08:98:88:48:5f:0c:09:49:c1:70:c7:
b5:4d:04:04:c9:44:45:24:aa:2f:87:90:03:8e:ff:d7:ee:41:
fa:c2:35:01:44:d5:84:11:b5:6f:eb:47:4a:e7:d6:9e:cb:26:
33:f4:fa:72:6c:c2:c6:69:41:dc:0a:70:52:dc:b7:97:60:dc:
16:3d:f1:90:81:e6:c7:00:87:c2:97:7e:0f:09:71:e7:17:4f:
de:61:ea:59
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYntGc0mjsIqn4opwAOZ2lcKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODEzMDQxMzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWQwZDg1N2MyYWQyNDUxZDAxOWRiOGExMjY3MjZhNGViNDNkZGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW+NYO1Ei+s5bsuk59jHlftUmbYU
Xdtex2TuprFTYhyocCJkCGrSo4dXQX2F3YDkqVhsg5oEYEYKk5LNe70ap9uWWqyO
/CKYKtGYkDWEj5DJOchpv0tolgLmg5FU5UqR/xLzw3ZqDY6jfAm56z4tzG6c2OCv
YpUY1W1NwinqQHjVWd+82178qZvLvEQvaEJCm+ER9405BiTtjaoVVHj0K1Q0bP2R
Kyc8omxs0zcFb42E6MEZqgMZIeNuZ99hOlxCi47JVTj4LKh0x/wBxsUehcfk25kl
vegsfBuPhgBXZBVymiBciupyblgpmt958N1PwJyL6meF5PL5I617FoK4YwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOrQ2FfCrSRR0BnbihJnJqTrQ930MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNnREWVY4S3RKRkhRR2R1S0VtY21wT3REM2ZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHWEaNAWwcPqsez1cLsD
r4qYI7ConmZe1IPv+5tiTij2/2DKVfnuV2xMaFdiEnkAz9n+WtkARiu8fbkNM/bc
T6BCLtzmt3drjcsxvpYZORqIRFAHJiD1tIr8wsr7wggRZS2OOPmR3ZX1XCJZxdnd
9N1R4YsK0HKQOyL9bXGQaCZU85vmYN6wONCvQi87omKaqeawOKcpo2/YcIyNRbyQ
yh3h+KkdUD4lg0QImIhIXwwJScFwx7VNBATJREUkqi+HkAOO/9fuQfrCNQFE1YQR
tW/rR0rn1p7LJjP0+nJswsZpQdwKcFLct5dg3BY98ZCB5scAh8KXfg8JcecXT95h
6lk=
-----END CERTIFICATE-----
Generated at Tue Jun 10 22:02:33 2025 by rpki-client