Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6RmIHmjsxotGnxcG6Op4KrDainE.roa
File: 6RmIHmjsxotGnxcG6Op4KrDainE.roa (raw, json)
Hash identifier: KoLRKypDbQMugJxvaci4Q6hWWn/E764ytsNPA4g1d60=
Subject key identifier: E9:19:88:1E:68:EC:C6:8B:46:9F:17:06:E8:EA:78:2A:B0:DA:8A:71
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018590DB81A3296BA3CA69F367A800F727B0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6RmIHmjsxotGnxcG6Op4KrDainE.roa
Signing time: Sun 08 Jan 2023 10:09:42 +0000
ROA not before: Sun 08 Jan 2023 10:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:90:db:81:a3:29:6b:a3:ca:69:f3:67:a8:00:f7:27:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 8 10:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e919881e68ecc68b469f1706e8ea782ab0da8a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:17:02:35:f1:a6:b5:d8:6e:1f:a8:55:a1:62:
d0:2b:ba:c6:72:31:e5:22:83:10:15:d0:8d:70:9c:
d9:18:6b:dc:38:48:b4:52:83:03:43:0f:f0:3d:81:
05:d4:d4:fb:10:ee:3a:11:09:9a:89:54:f0:a5:c6:
19:de:6c:e5:61:a7:8d:0e:10:cb:fe:eb:8e:6a:1c:
3f:96:29:51:8e:4d:cf:b2:8b:12:a0:72:29:0f:fe:
09:bd:55:29:ed:0e:c6:53:82:2c:65:7e:19:26:ae:
83:8e:ad:a6:d8:14:20:c1:c3:bc:32:52:2a:ea:dd:
8d:11:23:7b:2d:e4:3e:f9:63:9e:05:2c:ce:87:4f:
f9:9a:19:bf:f4:67:0a:26:db:9e:38:97:af:62:f1:
b3:8f:94:84:21:57:ba:1d:4e:18:02:aa:99:ac:52:
c7:11:d2:56:3f:bf:c1:0f:e8:84:d5:8c:c3:ff:a4:
27:01:bc:0c:e3:a7:a4:b5:2e:cc:36:4e:ae:d2:96:
e2:63:55:c0:21:1a:84:e9:02:22:a8:14:cf:b0:2d:
7e:67:d7:7f:da:aa:c4:d6:ea:f1:32:bc:f7:aa:98:
dc:a2:c8:72:16:46:95:5b:ec:7c:f5:ff:60:07:92:
dd:b1:5f:90:11:56:e4:0b:08:48:fb:ae:60:20:05:
24:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:19:88:1E:68:EC:C6:8B:46:9F:17:06:E8:EA:78:2A:B0:DA:8A:71
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6RmIHmjsxotGnxcG6Op4KrDainE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:ff:70:76:87:00:0b:1b:92:a1:65:3a:79:02:86:63:00:ce:
7f:5d:b1:ed:9e:0e:35:dc:ea:fc:5a:6d:22:73:00:08:a2:54:
a9:b4:90:63:9b:e9:f8:a5:b8:0d:06:05:e9:a9:c8:1d:8f:8b:
b7:80:3a:03:2c:39:8b:b3:48:ef:a1:74:9a:36:ba:6c:53:f2:
1b:c5:f8:e5:b6:54:0f:7c:32:be:99:39:70:3b:3b:be:05:03:
19:14:eb:a1:c3:db:16:a6:f8:63:8e:fe:c4:87:00:57:c3:c8:
03:d5:94:87:72:d5:b8:3e:e0:ab:bb:be:b7:a0:31:6d:8b:d3:
9c:ef:1c:39:ba:c3:3a:a9:71:b5:e0:f0:25:30:59:c4:a2:a7:
cd:27:51:fe:c0:81:0f:4d:15:2f:b1:13:8e:6c:8f:ac:86:f7:
e2:53:b0:8e:ae:e1:67:fc:4a:e9:99:0c:57:96:55:54:63:3b:
76:d4:4c:7c:1d:d0:b2:ac:34:57:a3:72:08:d6:27:e3:4d:ee:
31:44:b9:3b:c9:35:88:86:43:29:1f:00:e0:45:8f:78:b6:f8:
b0:d1:d5:78:a3:4a:96:ad:2f:50:8a:c5:e8:2b:a5:be:23:30:
db:bb:f2:31:eb:5d:55:58:95:ef:4d:da:8b:b1:54:7b:55:0e:
d9:19:ad:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:36:13 2025 by rpki-client