Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-6K0xj9X-b7jE8Gqc08Xd_SGRqQ.roa
File: 1-6K0xj9X-b7jE8Gqc08Xd_SGRqQ.roa (raw, json)
Hash identifier: dLgzAP0QoPmhPSbQ3iRnLFGWnW+J81txL7Pzg3/IXFI=
Subject key identifier: FB:A2:B4:C6:3F:57:F9:BE:E3:13:C1:AA:73:4F:17:77:F4:86:46:A4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187236900792996ED9F2D5A80FCBC21D352
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-6K0xj9X-b7jE8Gqc08Xd_SGRqQ.roa
Signing time: Mon 27 Mar 2023 14:11:36 +0000
ROA not before: Mon 27 Mar 2023 14:11:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:23:69:00:79:29:96:ed:9f:2d:5a:80:fc:bc:21:d3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 27 14:11:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fba2b4c63f57f9bee313c1aa734f1777f48646a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5a:ed:71:d8:5f:8c:2f:2d:90:f2:8c:92:c3:
d8:68:2a:43:ed:9a:c1:8f:1d:05:1e:41:95:1e:49:
4e:a0:23:af:48:54:d7:ca:a8:83:80:36:90:52:94:
83:a0:58:05:5d:ae:cf:83:a8:e5:e8:97:92:c6:01:
d6:84:f5:51:77:c6:e3:69:57:51:71:ac:18:a9:53:
2a:fd:dc:1c:c9:98:03:f8:17:4a:b3:bd:a3:d2:db:
fe:ae:9b:f9:80:17:bf:f4:fb:22:e9:a9:77:39:f6:
d9:ca:15:f5:7c:0a:ba:f3:c7:12:a0:4f:39:e1:dc:
98:c8:68:61:4c:4c:f0:5d:59:32:e6:f8:0c:9a:a0:
a0:97:8c:9b:c3:c6:fe:25:c5:df:a1:48:ad:32:01:
3a:73:60:f5:2f:00:dd:20:5f:08:08:be:e7:93:c0:
f9:b4:db:54:20:21:d9:8e:4c:e3:b2:4e:bc:5a:cf:
e9:a4:34:8b:51:e1:4f:77:68:9c:34:31:7b:7c:e1:
9f:d5:52:4a:1c:55:03:fc:21:67:34:44:56:18:0f:
35:f0:8a:df:be:8c:89:b8:7b:e2:a5:e0:b7:61:84:
a6:5a:4a:b1:dd:4e:ce:c2:be:56:99:f5:94:c4:e4:
da:7e:a4:0c:ee:25:bb:d6:0f:34:ad:d7:d8:db:af:
ff:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A2:B4:C6:3F:57:F9:BE:E3:13:C1:AA:73:4F:17:77:F4:86:46:A4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-6K0xj9X-b7jE8Gqc08Xd_SGRqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:12:b4:e8:99:60:db:3b:b0:7a:d6:47:fe:d3:2e:be:f2:d3:
03:c1:86:b9:30:69:00:56:27:83:8c:95:80:73:0d:aa:eb:bf:
8e:18:b7:60:05:66:bb:85:86:38:77:d5:83:cd:e8:72:e6:5b:
bf:c5:e9:f4:64:8f:7f:1e:3c:c9:a5:5e:70:72:d0:5e:91:d1:
64:38:46:6a:af:6f:0e:16:1a:d6:72:bb:71:8b:f8:1d:a5:2d:
ce:9d:46:a3:fd:49:d2:24:6d:ef:a0:5d:94:92:fc:f8:1c:a1:
dd:ee:ac:79:7c:cf:3c:e5:38:e7:39:df:57:21:3e:7a:e0:73:
6f:5a:ea:64:29:7b:87:37:4b:2d:b1:7f:31:8f:d2:15:9c:42:
b4:62:57:8a:7a:6e:ca:f1:97:71:f5:21:75:48:f7:c2:4a:f0:
35:87:25:6b:fb:41:19:27:0a:bf:13:0a:1f:08:b3:4d:47:3d:
fa:d2:ae:e1:46:b6:3d:6e:66:97:49:27:c2:ed:d7:c1:dc:08:
d9:ee:c7:27:d3:fb:be:77:db:80:cf:9f:00:27:52:a2:93:28:
d4:24:c5:d1:49:bb:37:bc:ad:f4:f9:a0:a8:a7:be:bf:b2:a0:
20:a0:81:f4:02:5f:da:fa:80:a2:ca:b9:57:8e:0d:19:60:c3:
05:24:73:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:13:52 2025 by rpki-client