Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Izo1PduWxB_l9SAgyKGZYHjWpo.roa
File: 6Izo1PduWxB_l9SAgyKGZYHjWpo.roa (raw, json)
Hash identifier: sU0hb4zItsJtungApe1ReVg1L87lYJquYh3lTDE0AzU=
Subject key identifier: E8:8C:E8:D4:F7:6E:5B:10:7F:97:D4:80:83:22:86:65:81:E3:5A:9A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185C4FE229F7F44748BB87C844E90DE50D9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Izo1PduWxB_l9SAgyKGZYHjWpo.roa
Signing time: Wed 18 Jan 2023 13:07:47 +0000
ROA not before: Wed 18 Jan 2023 13:07:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:c4fa:e221/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c4:fe:22:9f:7f:44:74:8b:b8:7c:84:4e:90:de:50:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 18 13:07:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e88ce8d4f76e5b107f97d4808322866581e35a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:41:f0:2b:03:e4:d9:e8:c0:8d:a9:64:bb:58:
bf:0f:f1:82:be:48:e2:e6:19:70:93:2b:60:42:4c:
61:d1:2f:ae:36:8e:2a:47:f3:e4:ca:0e:f0:cc:3b:
e4:58:ac:02:77:15:92:42:31:12:44:f5:a5:5e:c2:
7e:71:df:b2:8d:16:7e:5e:4c:2c:db:91:3b:70:77:
6b:c3:26:12:84:8c:18:b9:e6:f1:7e:fb:f2:14:35:
f7:65:d6:da:cb:aa:7d:a3:77:a6:f9:e1:8b:99:08:
63:0b:b8:4e:ba:e1:56:e9:6f:36:8c:06:03:5e:88:
42:9f:79:89:43:e1:77:ff:fc:ec:5e:73:10:56:dc:
06:4e:1f:20:6e:07:a1:50:fb:7f:61:ff:e4:87:ac:
c2:4f:2c:c1:29:f4:58:f9:a6:36:fc:c7:15:e9:4b:
55:a0:bf:31:7a:83:f8:68:74:a4:44:c7:8c:73:66:
84:b2:fc:aa:32:49:71:f8:f5:c5:fc:3e:5b:ec:15:
eb:c2:cb:94:53:7a:a5:db:1e:93:36:d3:a8:89:f4:
b6:26:a8:b0:8d:97:30:ce:10:97:45:af:d0:0e:55:
97:5b:dc:2f:d6:91:cb:3a:0f:df:35:ef:11:7e:f5:
b3:08:27:1e:e1:9b:2f:a5:eb:52:3f:2f:02:bf:20:
d8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8C:E8:D4:F7:6E:5B:10:7F:97:D4:80:83:22:86:65:81:E3:5A:9A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Izo1PduWxB_l9SAgyKGZYHjWpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:14:ee:58:de:9e:8d:b4:0a:7c:9a:5c:05:78:12:94:c6:9e:
4b:03:d7:68:97:ee:fa:de:cd:f7:d5:69:49:16:62:3b:11:4b:
bc:e5:05:d1:35:35:44:8b:34:69:66:e3:1e:e3:1a:05:c9:93:
eb:11:a5:f6:65:85:b5:ee:d4:95:f1:14:cf:02:0a:53:03:14:
97:41:fa:b9:31:ad:25:4d:72:4d:05:f6:77:2b:87:81:0b:4a:
1b:2a:19:f4:0c:bc:3f:5d:33:d3:60:a4:00:9a:cb:61:ba:03:
a6:7b:8f:c1:68:52:5a:6f:18:73:97:82:18:30:d2:35:10:a7:
e0:03:6e:70:34:71:05:52:e4:d2:e2:48:88:54:ba:56:49:fa:
a6:a9:48:b6:31:ce:bb:a9:08:4b:24:5d:a7:3d:b3:c6:18:72:
02:30:7b:6d:94:80:20:ff:39:a8:89:ae:70:91:58:0e:04:71:
52:51:a7:9d:02:a2:e0:10:48:9d:ee:58:c8:f3:b5:18:db:de:
1d:98:ad:07:2c:71:91:0b:d0:16:78:94:ef:ec:c9:77:6a:17:
5c:9b:57:03:62:60:48:97:58:71:65:a0:35:6f:78:65:41:e3:
4e:f9:72:5f:82:9e:8f:41:62:2c:3c:90:36:27:7e:96:c3:dd:
0e:b6:04:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:06:06 2025 by rpki-client