Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Enju_jkfD7gGhQ3DaGzjAemjlo.roa
File: 6Enju_jkfD7gGhQ3DaGzjAemjlo.roa (raw, json)
Hash identifier: 8bYxE08tMe2g04Jlj7Xus8ndd9HBuyWHlixAJbBc0jA=
Subject key identifier: E8:49:E3:BB:F8:E4:7C:3E:E0:1A:14:37:0D:A1:B3:8C:07:A6:8E:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186492999A23AD515DB104B79A635C2D7D8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Enju_jkfD7gGhQ3DaGzjAemjlo.roa
Signing time: Mon 13 Feb 2023 05:05:08 +0000
ROA not before: Mon 13 Feb 2023 05:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:4928:c2bc/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:49:29:99:a2:3a:d5:15:db:10:4b:79:a6:35:c2:d7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 05:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e849e3bbf8e47c3ee01a14370da1b38c07a68e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:fb:37:02:18:2f:03:f2:c9:51:35:42:9e:
1f:6f:5b:21:c2:8c:5c:1a:61:13:f1:77:7d:a7:cd:
e7:52:47:bc:30:9a:55:a1:98:ba:ef:b2:fa:01:14:
51:54:14:cc:d9:6d:4d:7a:b5:ac:05:90:de:fd:50:
40:67:c0:5f:6b:e1:5b:e3:93:a2:4c:d2:12:fd:67:
80:43:e4:98:2a:8d:bd:d1:01:b1:b9:0a:c4:69:cd:
28:80:23:fa:46:eb:31:1c:89:e8:5d:c0:59:dd:d6:
b2:f5:c5:5c:43:a2:2f:4e:7f:36:e8:59:ca:f8:55:
c5:7f:8a:00:98:eb:6c:6e:7b:6d:8d:0e:b6:52:a6:
f0:7f:93:c1:f5:ff:a8:89:b5:e5:d3:fb:bc:90:45:
7d:e7:4c:fb:fb:c4:1d:81:19:1b:14:8d:c3:74:0f:
68:89:d7:d4:a8:0a:d5:cf:c5:e9:02:cc:4f:2e:61:
c7:fb:c5:ab:9a:ce:29:9c:27:85:d0:eb:01:5c:32:
62:24:c4:19:44:9d:68:78:55:d7:34:b0:63:7f:23:
e3:5f:d6:ed:3a:86:b2:71:ab:50:50:2e:37:33:a1:
24:6b:37:ee:32:8c:4c:34:db:32:da:70:33:13:1c:
c4:6b:e5:1f:f9:f8:5c:74:27:58:a2:88:ee:91:19:
d4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:49:E3:BB:F8:E4:7C:3E:E0:1A:14:37:0D:A1:B3:8C:07:A6:8E:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Enju_jkfD7gGhQ3DaGzjAemjlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:94:96:8a:4f:e3:22:ff:b8:8b:b0:9f:b5:dd:43:a1:98:4a:
86:30:c5:27:a6:de:3e:c3:15:ae:7d:e2:15:3b:fc:4f:b0:36:
05:b3:0c:2d:a4:88:aa:5e:92:0e:29:84:23:f7:67:b6:d6:8c:
98:0b:41:80:2d:ea:55:be:41:5a:9e:92:21:0a:1d:c2:2d:21:
20:6f:2d:b7:fa:0a:01:53:26:98:6e:ff:7a:dd:18:60:c0:7f:
1d:0f:2f:d0:de:eb:7e:65:10:a6:dc:f7:c8:87:ee:b8:3b:93:
18:ae:b3:b1:78:18:9b:20:b6:b4:fb:f2:ef:6e:a6:b0:5b:c0:
bb:2a:11:0a:ca:8a:a0:f1:b1:0c:34:23:2d:77:2b:7d:c3:ea:
e4:4a:91:54:87:29:48:b8:7b:dd:51:9e:5b:1c:40:4f:f0:67:
17:d9:1e:86:b8:02:94:45:06:0f:50:23:8d:3a:2e:df:c7:33:
29:14:b8:36:d0:cd:30:57:3b:af:53:57:40:55:fe:ea:ad:de:
fe:fa:f4:50:de:99:71:33:e5:a4:e0:16:6d:f3:5e:c7:4b:40:
ac:19:c4:34:4c:c8:b9:29:eb:e7:9d:62:34:ff:2d:bf:c2:d5:
d1:c2:1f:c6:8b:ad:d2:c2:37:f1:50:c0:85:02:ad:24:32:78:
ee:02:07:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:10:29 2025 by rpki-client