Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/06jOlewAviYtdpLRpMbwbUYMpfI.roa
File: 06jOlewAviYtdpLRpMbwbUYMpfI.roa (raw, json)
Hash identifier: L1GfXMzIfJal6A9HfGCG50EXKz0zlpYpWS5XzhbOmTE=
Subject key identifier: D3:A8:CE:95:EC:00:BE:26:2D:76:92:D1:A4:C6:F0:6D:46:0C:A5:F2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01881504B347E54C8979E668A50574B03B88
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/06jOlewAviYtdpLRpMbwbUYMpfI.roa
Signing time: Sat 13 May 2023 12:10:09 +0000
ROA not before: Sat 13 May 2023 12:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:15:04:b3:47:e5:4c:89:79:e6:68:a5:05:74:b0:3b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 13 12:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3a8ce95ec00be262d7692d1a4c6f06d460ca5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:62:ef:fb:2e:d4:99:89:44:3a:5d:e8:a9:9a:
62:d7:f1:78:8a:61:6c:ae:b2:3f:58:fb:68:12:b1:
67:33:3a:82:58:dd:d8:ba:11:15:30:db:a5:4c:8e:
d9:8c:34:90:22:b5:14:55:0f:14:7c:b7:01:2f:f0:
d6:9d:57:cc:06:dc:15:e8:52:be:e3:a1:d0:48:6c:
74:ae:c7:9d:9d:c6:38:73:e5:9a:cd:ba:b5:bb:8f:
e6:b7:f5:8c:92:49:ba:84:51:94:b8:b4:fb:cb:07:
11:39:6f:b5:12:ff:f5:fe:23:a6:05:0e:85:2f:9e:
a3:ca:e2:c0:ac:a6:40:f6:84:2d:82:bd:ec:8f:ba:
b1:87:ad:f2:68:72:d2:1a:83:e9:1e:8e:e5:1e:6a:
81:62:c4:ea:a0:2c:5b:0a:fb:1d:7b:f5:54:11:ed:
58:31:70:79:29:4d:35:b1:6e:1f:73:fb:16:02:a4:
3f:dd:41:27:9b:58:c6:e3:7a:76:a1:c6:2b:a9:ab:
83:04:12:38:a3:bd:c6:45:52:2c:7d:16:b7:ff:b6:
ba:e4:55:ac:8e:36:df:16:4f:4f:60:3d:51:b7:3f:
af:3c:de:c1:9d:ba:ec:d2:b7:40:4b:50:5e:b9:bb:
38:5d:46:fa:06:78:dc:ac:72:96:26:95:aa:68:ed:
44:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A8:CE:95:EC:00:BE:26:2D:76:92:D1:A4:C6:F0:6D:46:0C:A5:F2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/06jOlewAviYtdpLRpMbwbUYMpfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:fc:c5:4b:42:74:01:a1:04:7a:66:01:5b:fd:1a:8b:72:1b:
8a:97:b4:18:d1:38:03:0d:ef:e3:13:20:be:2c:c9:06:54:e0:
c9:f2:76:a5:18:7a:65:0d:57:52:89:16:ae:95:18:1f:64:29:
eb:26:27:af:45:2b:15:13:e6:55:f0:90:5a:d9:d3:f2:56:f9:
dd:18:3c:0b:8e:1d:30:3f:c5:1f:51:3c:c5:5d:89:8e:18:6c:
28:02:3c:42:c0:5b:5a:77:5e:3b:43:db:b7:2d:63:7a:9d:af:
e5:d3:13:92:9d:93:f7:ef:76:33:7c:46:d8:12:c9:89:25:6e:
bc:5b:32:5a:da:f5:43:b5:61:9a:ab:01:b3:ba:4e:a5:c7:ce:
3d:9c:be:a3:08:f2:ed:70:92:40:3d:d1:f5:fd:06:97:5f:9a:
e7:86:c9:40:5a:ee:3b:4b:c8:f6:ce:7f:13:06:78:f0:e5:2c:
1f:9b:07:12:5a:04:cf:3f:e4:d5:f5:71:e7:d6:25:d4:99:74:
5a:53:52:5e:44:96:5f:13:b9:10:26:cd:f7:39:74:0d:38:d6:
74:25:48:34:39:41:85:61:b2:a3:0b:c8:26:c3:1f:55:3a:d4:
c6:56:e7:dc:3b:c8:88:89:87:9a:0f:33:cb:b0:e4:c4:1c:33:
e7:e4:4b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:17 2025 by rpki-client