Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6iJR_D_4BWqcuwMkS_rocHUHqj0.roa
File: 6iJR_D_4BWqcuwMkS_rocHUHqj0.roa (raw, json)
Hash identifier: uZH6ltcWTpXYMTl9tCEDLL6D0m00LQ0zJu126GtO728=
Subject key identifier: EA:22:51:FC:3F:F8:05:6A:9C:BB:03:24:4B:FA:E8:70:75:07:AA:3D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01881D630974D7AE09401D1F79B270CA35A5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6iJR_D_4BWqcuwMkS_rocHUHqj0.roa
Signing time: Mon 15 May 2023 03:10:09 +0000
ROA not before: Mon 15 May 2023 03:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1d:63:09:74:d7:ae:09:40:1d:1f:79:b2:70:ca:35:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 15 03:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea2251fc3ff8056a9cbb03244bfae8707507aa3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:70:e2:fe:1f:04:b2:69:6c:0b:28:63:d0:e6:
5d:7f:ab:f9:1b:6b:92:e1:b7:06:f3:5b:e2:fb:dd:
43:cd:e3:32:2f:8b:a0:05:c9:fb:63:dd:ac:76:ee:
b8:4f:c9:33:17:97:a6:ba:75:71:a0:03:67:12:d4:
50:4a:5c:aa:cf:de:72:96:85:0c:d0:25:c5:df:e4:
e8:98:54:62:29:1f:01:4d:49:97:fa:98:14:f0:59:
54:c1:27:b4:82:10:15:b5:87:08:d2:85:74:1c:fe:
e0:d6:db:9e:d5:4a:5d:5a:f9:c8:d0:cd:8a:9f:b4:
fd:11:7c:92:75:c0:2e:ec:15:31:6f:ca:58:3f:9a:
46:52:ec:01:9c:4f:7b:ac:4c:1f:ca:a8:89:b8:fe:
16:c1:94:c5:93:df:73:50:51:c4:d1:41:a6:27:82:
f4:b4:3d:81:56:a6:f0:28:82:6b:9e:61:63:a0:2f:
16:15:35:90:28:ed:9d:e5:45:d5:5f:1f:6b:ec:db:
ea:f1:92:e4:23:24:2e:64:da:a2:72:73:17:f5:ef:
79:42:22:0c:b7:bc:bf:a8:92:c0:d3:5c:25:c9:70:
97:a5:d5:a6:03:d4:ee:5b:ac:15:a1:16:d3:a5:c6:
57:a3:c5:06:a9:44:a4:72:27:18:ca:11:63:80:31:
71:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:22:51:FC:3F:F8:05:6A:9C:BB:03:24:4B:FA:E8:70:75:07:AA:3D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6iJR_D_4BWqcuwMkS_rocHUHqj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:20:ba:31:79:8b:42:de:e5:26:ff:f2:9c:cb:89:1e:3e:ce:
cc:76:d1:17:d0:df:05:22:ff:e5:0a:c4:53:9d:e2:39:81:c1:
08:55:65:51:8d:2e:a4:1b:3a:40:b4:c6:ad:1e:ae:44:a7:d2:
ac:98:d4:c5:d2:b0:81:22:3b:3f:c7:70:57:d2:a8:b1:56:2d:
64:08:17:49:3d:46:f6:d6:58:b9:29:d7:4c:81:16:2a:cb:71:
b5:9f:7d:fc:70:7f:fb:01:e2:07:78:92:d9:08:b8:20:39:34:
27:6b:05:70:92:37:6e:33:58:e2:a0:fa:f3:94:f6:6c:06:9b:
13:24:de:e9:bd:65:4b:47:2c:f7:24:9d:fb:f1:35:8f:39:f0:
16:2d:bf:33:35:73:da:8e:9a:55:bc:fb:6a:09:62:0f:ac:35:
b3:9d:cb:98:74:f6:90:6a:6d:9b:61:d0:65:d9:ee:af:91:dc:
37:88:a5:2e:c7:0e:74:15:ab:74:49:96:f0:78:a9:56:bd:b5:
07:2c:77:dd:95:90:fd:d5:27:0d:4a:7a:4f:38:df:6b:30:6a:
91:1c:07:c7:ca:40:e6:99:7e:13:6d:12:53:8b:8e:13:9b:6e:
76:e4:82:f4:b1:4f:c8:02:74:bc:00:87:5b:33:7a:30:f2:e8:
55:57:d0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:50:26 2025 by rpki-client