Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6G4_fpNFpTon7ZMQD-SUeboesjI.roa
File: 6G4_fpNFpTon7ZMQD-SUeboesjI.roa (raw, json)
Hash identifier: s1C70lxvsmTVVeMbkYNVuuwtbl4VbKTMza2sxC+LKR0=
Subject key identifier: E8:6E:3F:7E:93:45:A5:3A:27:ED:93:10:0F:E4:94:79:BA:1E:B2:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899D3E8236DE3A3D65F37FCE15BB17E80A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6G4_fpNFpTon7ZMQD-SUeboesjI.roa
Signing time: Fri 28 Jul 2023 16:04:26 +0000
ROA not before: Fri 28 Jul 2023 16:04:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:9d3e:6ad4/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9d:3e:82:36:de:3a:3d:65:f3:7f:ce:15:bb:17:e8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 16:04:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e86e3f7e9345a53a27ed93100fe49479ba1eb232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6b:26:ca:83:c5:f2:7e:33:fd:1a:0e:27:93:
c6:86:d3:b4:d3:7a:94:81:e2:e2:21:13:7c:25:95:
ce:b4:2a:d1:ac:39:ab:4e:b9:70:6b:d7:9c:19:84:
c1:d9:84:40:ef:10:c4:b6:f7:54:16:46:eb:0e:14:
52:9e:0a:66:79:89:bf:82:a2:0e:f1:a3:07:c9:b6:
db:96:89:0c:63:31:a3:28:4d:0c:cc:40:48:f2:62:
f9:7f:05:7f:7a:d0:9b:43:66:56:fe:1b:04:96:e0:
47:63:92:16:9d:44:b3:30:59:a1:63:a8:28:f6:02:
13:f9:67:22:96:0d:4d:cb:c4:12:24:38:a8:f2:0d:
b4:39:99:bf:55:31:e0:35:70:e0:eb:9d:dd:53:8b:
84:8e:34:b8:5e:b5:6a:f1:d6:e9:65:54:0b:22:bf:
d8:81:30:b5:18:90:35:4c:b0:eb:33:83:9e:71:0e:
cb:b5:e2:7d:9a:df:21:86:5e:27:19:14:43:5e:b6:
79:f2:a4:60:98:1b:be:d6:8e:20:6b:13:f6:5a:56:
48:bf:57:4e:ed:aa:47:5b:86:8e:59:61:d4:af:65:
0e:9a:07:34:48:bd:73:1d:65:46:c4:ae:1f:4c:50:
9b:51:d0:ee:9f:24:78:c6:52:11:dd:44:ac:bc:a2:
e0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6E:3F:7E:93:45:A5:3A:27:ED:93:10:0F:E4:94:79:BA:1E:B2:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6G4_fpNFpTon7ZMQD-SUeboesjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:47:35:6e:ad:6e:f9:0e:37:98:b6:fd:1e:ec:40:dd:74:e2:
d6:f2:8b:2c:cc:f1:2f:eb:48:12:00:08:eb:e9:5a:28:37:5c:
36:1d:54:9c:dd:c0:02:17:d0:07:cc:50:a0:85:a5:c5:67:cd:
6a:00:ae:8e:ab:37:7b:89:31:89:66:1b:92:de:1c:a1:73:b1:
54:6b:30:cc:e7:d7:b2:0d:63:f6:87:a2:b7:6f:fc:87:86:45:
65:ba:f3:23:62:6c:9b:dd:88:1e:ff:71:fb:c9:d0:32:60:fa:
29:2b:1f:29:7b:2f:23:b3:d7:35:76:cb:d6:bd:e5:05:12:ec:
de:26:32:78:37:7a:5a:b5:17:a4:1c:5c:cb:28:3c:9a:49:31:
da:de:f6:f6:34:f0:2a:40:ca:a7:f0:79:5b:d2:5f:6b:92:96:
68:61:b5:60:bb:45:c9:23:68:08:f3:e6:ca:39:cc:f4:84:18:
ef:45:5c:9e:a2:0e:18:e0:20:01:b4:d6:15:22:6f:c9:dd:07:
98:73:fc:b1:5d:57:76:52:61:06:a7:c9:f9:c1:d1:58:7a:39:
65:df:1d:5d:0c:bb:71:59:b8:12:26:38:67:5b:3c:a2:87:58:
5f:cd:ef:9c:c2:f7:ca:8b:9d:18:6f:f2:5a:a8:6f:f0:01:2e:
8c:a8:d2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:09:12 2025 by rpki-client