Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6hfwrRWLKHOVPpzFmLlQlNIccKY.roa
File: 6hfwrRWLKHOVPpzFmLlQlNIccKY.roa (raw, json)
Hash identifier: F5AvWcOrhwKHwk+c8ykBG47ZYkCSccsvx26utz2sb5o=
Subject key identifier: EA:17:F0:AD:15:8B:28:73:95:3E:9C:C5:98:B9:50:94:D2:1C:70:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2B1520989225FA9BFE8A8BF8863495BD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6hfwrRWLKHOVPpzFmLlQlNIccKY.roa
Signing time: Fri 25 Aug 2023 05:05:19 +0000
ROA not before: Fri 25 Aug 2023 05:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:2b14:37f0/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2b:15:20:98:92:25:fa:9b:fe:8a:8b:f8:86:34:95:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 05:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea17f0ad158b2873953e9cc598b95094d21c70a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ec:9a:4c:df:84:c9:38:56:32:89:07:de:21:
d8:f1:38:7f:40:5f:e3:a4:1c:4a:1c:91:91:8a:ef:
44:7f:02:a4:d2:ad:01:cc:b7:d5:2c:b5:1b:76:69:
69:5f:ad:92:9b:f7:f6:25:52:70:a9:d3:1c:de:c6:
8c:44:92:30:c3:76:0e:82:0d:be:f2:91:4c:45:6e:
9f:48:d4:69:89:3b:c8:23:1d:94:b3:21:ed:0a:0f:
a0:fc:f1:79:62:d6:b4:1b:57:43:88:fe:85:d2:bd:
e0:e8:79:6c:d0:20:c7:2a:45:24:72:61:ee:fc:84:
73:67:0a:48:a0:a1:db:49:83:5b:4c:0b:6e:d4:a0:
5c:d0:ae:01:b8:58:1b:2f:66:07:96:75:d2:96:44:
e8:f9:9e:5a:19:e0:8a:02:60:d9:22:d6:98:5f:29:
c0:4b:72:c2:fb:db:1c:a6:cd:03:bf:da:ea:51:ae:
72:ca:0b:8e:3a:65:6a:90:70:88:87:64:15:77:c0:
e4:b1:99:b6:96:93:af:ca:83:30:89:11:55:5f:72:
ad:94:63:9a:b2:c0:1c:ac:21:0f:c3:3b:d6:4a:ee:
c4:43:e8:bb:8c:a3:8c:b0:5d:26:a5:77:e1:ee:a2:
c4:31:84:4b:85:e2:78:49:b0:3c:f9:2f:72:bd:f2:
4a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:17:F0:AD:15:8B:28:73:95:3E:9C:C5:98:B9:50:94:D2:1C:70:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6hfwrRWLKHOVPpzFmLlQlNIccKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:10:79:ed:bf:da:9f:dc:bb:7a:d4:c9:91:1f:22:d7:83:ac:
d6:76:7d:f9:d0:51:2f:17:f2:10:ce:ea:be:df:ef:4e:16:34:
a3:58:11:04:bb:a5:5c:9f:c7:f6:85:a9:06:11:cf:c7:c3:66:
28:72:50:90:04:3a:69:91:0f:ec:f8:bc:df:e0:64:78:70:60:
b4:fa:74:5e:5b:36:e3:05:68:12:9f:88:a5:6d:82:0a:b2:de:
31:b5:bb:00:9a:ac:74:01:41:01:86:60:62:27:57:35:b8:f6:
bc:72:a9:26:0b:bc:81:78:35:11:76:50:66:b6:e7:9f:b6:1a:
26:cc:44:30:8d:b1:61:c7:7d:65:bd:eb:80:a3:42:ed:d9:5d:
38:41:f0:de:fc:d6:46:86:6a:78:86:2a:69:a7:df:76:a9:8c:
66:55:28:1a:4e:67:57:75:3c:04:4b:51:05:b1:36:b8:5e:95:
a1:8f:52:96:e5:d6:fb:53:db:e0:68:da:87:e1:90:08:7d:fc:
db:cf:76:11:02:81:c3:03:d7:de:cd:3a:d3:74:e3:89:ce:b7:
ba:bf:ea:51:73:a5:6c:32:3f:f8:39:79:67:92:e3:dd:dc:1e:
76:13:b5:71:82:d7:75:ba:64:bb:31:3c:6b:12:4c:31:ad:fb:
78:3c:eb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:07:06 2025 by rpki-client