Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6ENH0_OXHInWV0FBOxC1GiSGuug.roa
File: 6ENH0_OXHInWV0FBOxC1GiSGuug.roa (raw, json)
Hash identifier: BgSxzQICZHIMaAoSCLYSw/wOFvDyaTk+ZaRxlnS42Lo=
Subject key identifier: E8:43:47:D3:F3:97:1C:89:D6:57:41:41:3B:10:B5:1A:24:86:BA:E8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01880A1244651B0F528790EA6F873E4C2E11
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6ENH0_OXHInWV0FBOxC1GiSGuug.roa
Signing time: Thu 11 May 2023 09:09:09 +0000
ROA not before: Thu 11 May 2023 09:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0a:12:44:65:1b:0f:52:87:90:ea:6f:87:3e:4c:2e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 09:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e84347d3f3971c89d65741413b10b51a2486bae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8e:22:d7:c5:49:cd:ee:9b:9d:4f:36:b3:6a:
53:36:71:46:10:3c:c4:bd:e0:21:e6:b6:05:ce:86:
5d:bc:36:ef:e7:92:16:78:94:bd:28:bd:a2:aa:5f:
42:70:e0:66:7e:9f:3b:f2:75:20:05:d4:6d:4f:65:
3d:d1:96:0b:4d:25:1f:99:0e:06:45:06:6e:e4:03:
44:c2:d8:c4:43:e2:62:0a:13:66:b9:ac:7f:a7:4a:
40:7f:74:dc:01:86:b7:fe:93:39:8c:66:64:a7:cd:
3f:49:d3:57:39:7a:2a:18:1f:a4:1a:bb:a4:c5:47:
ff:c1:3e:74:b6:18:c0:42:d3:a0:0b:33:10:13:88:
01:0d:d3:33:0f:fa:80:31:f4:07:20:95:cb:58:86:
16:a6:23:e7:9a:a0:da:f4:f1:16:21:88:2a:6c:ed:
03:7b:ee:3f:05:8f:de:6e:7a:e8:27:8e:62:e9:19:
13:a0:e5:28:3f:e2:c9:16:5a:33:66:c8:23:fe:26:
a7:82:65:0f:0e:e5:0d:d7:4d:62:cf:38:67:f1:95:
66:3a:c6:14:e5:3a:66:e9:ca:68:0d:0e:69:25:21:
b7:a1:0a:b7:05:9f:4d:8b:73:95:ef:ae:eb:e5:e7:
3d:30:90:84:17:20:5a:64:9a:d5:3b:fa:06:19:85:
5c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:43:47:D3:F3:97:1C:89:D6:57:41:41:3B:10:B5:1A:24:86:BA:E8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6ENH0_OXHInWV0FBOxC1GiSGuug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:40:f3:e5:c0:f9:ed:46:b4:c7:fe:91:3f:ea:48:95:6f:94:
60:39:ca:fb:c2:75:af:47:4b:2d:cf:ba:31:4c:a4:66:dd:4e:
77:65:db:96:fb:09:27:0f:54:b8:f8:ab:09:f2:87:4c:62:b4:
dd:45:ea:54:2e:24:e0:43:5b:58:de:07:f8:96:f6:80:a8:7b:
cf:fa:02:7c:27:0a:3a:ad:79:7b:97:a7:3b:67:c2:e4:1b:86:
77:5e:b0:35:79:4b:55:b8:e1:f3:95:eb:8e:cc:8e:52:5f:9c:
e6:37:e9:06:02:a7:35:10:bb:b7:f7:0d:cf:1a:51:82:2e:21:
06:44:84:73:42:0b:2f:21:90:04:24:5d:c7:27:41:16:ff:cb:
79:02:c1:7b:c2:dd:9e:8d:b9:4c:d9:c9:f3:7c:ce:c0:d2:b8:
cd:25:ee:11:0d:42:3b:41:9b:c7:a3:53:9e:c1:73:14:f8:bd:
8b:13:32:b0:50:f5:53:84:9d:3a:f5:ac:8d:35:44:7a:ac:03:
49:9f:74:0b:5a:de:8c:b1:ae:ff:f5:5b:d3:a0:c3:93:59:73:
53:be:f7:35:ca:c9:b2:31:9f:56:11:e5:71:26:20:86:81:3c:
55:66:fa:82:58:af:aa:7c:f5:3c:15:8e:4d:98:44:e5:52:83:
e2:fa:f3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:03:33 2025 by rpki-client