Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a1Z1O7AH92YkBIsJZgQTprspEqc.roa
File: a1Z1O7AH92YkBIsJZgQTprspEqc.roa (raw, json)
Hash identifier: 01BEUr1RwqfPENaMItV3WO66djkniujey7eN0JW/i1o=
Subject key identifier: 6B:56:75:3B:B0:07:F7:66:24:04:8B:09:66:04:13:A6:BB:29:12:A7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186DE821C12A532827856F2F1271478B771
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a1Z1O7AH92YkBIsJZgQTprspEqc.roa
Signing time: Tue 14 Mar 2023 05:05:14 +0000
ROA not before: Tue 14 Mar 2023 05:05:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:de81:6a1e/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:de:82:1c:12:a5:32:82:78:56:f2:f1:27:14:78:b7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 14 05:05:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b56753bb007f76624048b09660413a6bb2912a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:28:aa:c3:90:4c:c0:33:8d:09:6e:2e:cc:12:
41:a4:2c:b8:6a:67:47:0d:82:bf:72:93:a5:19:e3:
f2:05:44:9e:7a:3a:0e:fc:29:9b:66:53:cb:28:da:
0c:1f:24:4c:bb:12:20:91:3f:3e:bb:2e:50:21:5e:
f6:4d:4f:db:d0:87:0f:aa:98:b5:0b:54:2d:f0:1f:
75:12:c7:8c:7f:ac:c4:71:c7:be:20:cb:7b:af:be:
7f:ab:83:96:b4:25:01:95:4f:4c:75:74:01:35:74:
50:b4:1c:b1:95:0b:a2:74:26:6c:04:a7:26:31:bc:
58:aa:c2:11:a0:de:22:ba:96:fe:0e:84:24:ad:d1:
89:ae:17:ef:8a:7f:19:bf:bc:fc:11:00:ef:5d:0d:
6e:6e:25:4d:25:05:76:f9:58:c6:3b:55:75:92:57:
71:a6:de:6a:03:d4:02:a7:78:0d:72:44:be:e4:47:
30:4d:03:96:18:4d:0d:22:3b:54:c7:a2:73:80:71:
0a:68:4a:06:a2:cb:33:80:d7:13:53:80:91:95:f3:
23:de:c1:99:8b:63:cc:b8:23:2c:21:9d:ff:07:38:
fd:7c:d2:5f:47:d0:2b:85:1a:e3:6b:bc:50:d8:e6:
8d:bf:fd:3d:81:67:bc:51:d6:e7:3e:a3:7c:48:db:
84:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:56:75:3B:B0:07:F7:66:24:04:8B:09:66:04:13:A6:BB:29:12:A7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a1Z1O7AH92YkBIsJZgQTprspEqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:a7:d9:bb:70:65:e8:ec:5d:19:d5:12:60:80:33:c0:fb:26:
87:fd:67:ca:44:b3:57:82:fe:c9:75:f2:2c:e5:bc:70:36:28:
27:bb:7f:0e:12:7d:55:b8:c3:43:f3:b8:ac:9d:5b:4f:31:49:
e4:7f:af:d0:ed:1d:9e:b0:9a:cc:29:dc:6c:da:6a:26:46:a8:
b6:2c:5b:a7:d1:d8:40:9d:fd:fc:86:3e:d2:f2:ec:47:77:63:
2f:d2:41:ca:7c:cf:89:26:e8:ab:87:77:61:2c:10:f8:38:ad:
6c:7c:33:70:db:03:fb:7f:ac:ac:67:d0:63:60:fd:4a:2f:2f:
f7:79:8a:dc:a5:d1:71:7b:fb:63:f3:37:c9:16:c6:bd:57:90:
d7:ac:32:d3:bb:46:7c:ad:d6:a1:b4:4a:31:e7:9c:99:48:a2:
69:9a:c5:92:41:e4:ea:6d:ed:78:57:7a:79:af:86:5a:d3:ba:
e8:66:d7:dd:ea:4a:7f:f7:e3:9c:54:53:8f:23:15:79:67:2b:
5a:11:13:f4:81:6f:4c:ba:3a:c4:f8:8b:e4:3f:80:41:37:0a:
02:16:e7:42:0d:98:19:90:1e:a3:84:bb:89:4d:c1:99:e9:78:
ea:f4:f2:74:b3:aa:62:ca:e1:d0:3a:25:ad:96:4e:da:74:3d:
b5:e4:17:4a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbeghwSpTKCeFby8ScUeLdxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzE0MDUwNTE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjU2NzUzYmIwMDdmNzY2MjQwNDhiMDk2NjA0MTNhNmJiMjkxMmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSiqw5BMwDONCW4uzBJBpCy4amdH
DYK/cpOlGePyBUSeejoO/CmbZlPLKNoMHyRMuxIgkT8+uy5QIV72TU/b0IcPqpi1
C1Qt8B91EseMf6zEcce+IMt7r75/q4OWtCUBlU9MdXQBNXRQtByxlQuidCZsBKcm
MbxYqsIRoN4iupb+DoQkrdGJrhfvin8Zv7z8EQDvXQ1ubiVNJQV2+VjGO1V1kldx
pt5qA9QCp3gNckS+5EcwTQOWGE0NIjtUx6JzgHEKaEoGosszgNcTU4CRlfMj3sGZ
i2PMuCMsIZ3/Bzj9fNJfR9ArhRrja7xQ2OaNv/09gWe8UdbnPqN8SNuEawIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGtWdTuwB/dmJASLCWYEE6a7KRKnMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYTFaMU83QUg5MllrQklzSlpnUVRwcnNwRXFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFan2btwZejsXRnVEmCA
M8D7Jof9Z8pEs1eC/sl18izlvHA2KCe7fw4SfVW4w0PzuKydW08xSeR/r9DtHZ6w
mswp3GzaaiZGqLYsW6fR2ECd/fyGPtLy7Ed3Yy/SQcp8z4km6KuHd2EsEPg4rWx8
M3DbA/t/rKxn0GNg/UovL/d5ityl0XF7+2PzN8kWxr1XkNesMtO7Rnyt1qG0SjHn
nJlIommaxZJB5Opt7XhXenmvhlrTuuhm193qSn/345xUU48jFXlnK1oRE/SBb0y6
OsT4i+Q/gEE3CgIW50INmBmQHqOEu4lNwZnpeOr08nSzqmLK4dA6Ja2WTtp0PbXk
F0o=
-----END CERTIFICATE-----
Generated at Tue Jun 10 12:09:07 2025 by rpki-client