Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6j8zlQMmckk6Pu5m0gjaDRBp3j4.roa
File: 6j8zlQMmckk6Pu5m0gjaDRBp3j4.roa (raw, json)
Hash identifier: MM+zffI3JNYr7h4vN3Xs9y3zYIDZDTd2KSR7Ll3gNgE=
Subject key identifier: EA:3F:33:95:03:26:72:49:3A:3E:EE:66:D2:08:DA:0D:10:69:DE:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183218898A628526D16C94BCF395AF3BA26
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6j8zlQMmckk6Pu5m0gjaDRBp3j4.roa
Signing time: Fri 09 Sep 2022 09:15:43 +0000
ROA not before: Fri 09 Sep 2022 09:15:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:21:88:98:a6:28:52:6d:16:c9:4b:cf:39:5a:f3:ba:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 9 09:15:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea3f3395032672493a3eee66d208da0d1069de3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:82:5c:0b:24:fe:82:d5:ff:37:5a:af:90:17:
8c:14:2a:09:55:e5:37:62:48:0a:db:e7:20:f3:0c:
5d:f9:0a:5d:17:19:f4:97:86:d2:3b:2a:bc:db:82:
f9:25:22:82:5b:80:9d:d8:70:52:b1:4c:cb:84:d7:
4a:0e:c6:85:d5:a9:c4:f5:97:02:f9:71:6f:24:17:
ea:4d:cf:fd:67:06:cf:09:3d:2f:c5:ae:81:67:0e:
d7:22:e6:02:00:26:bf:98:f4:32:41:b0:d2:aa:07:
d6:2a:89:ec:9c:f4:1c:46:b5:44:a6:87:d8:c4:5c:
d4:3f:e8:0e:9c:fe:fc:36:fc:43:ea:10:8a:56:be:
bd:ec:10:c7:64:b1:e9:e6:cb:3a:52:11:87:96:23:
ad:8c:eb:c5:fd:86:22:71:53:dd:19:25:ae:4d:db:
50:bc:2d:1d:e6:13:42:bf:1a:35:d7:f6:0f:f9:d3:
06:26:ec:3c:76:a2:88:e6:4a:fe:31:e2:78:32:ff:
4b:78:d8:39:22:b0:75:dc:9b:42:36:aa:a1:9e:1d:
68:b1:2b:83:22:45:ad:bf:62:7b:cc:79:04:79:b5:
61:60:ce:4b:0a:7d:be:b5:49:d1:64:70:9e:04:c7:
c2:52:53:fd:2b:79:82:ae:a0:a4:8f:5d:0a:68:a7:
06:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3F:33:95:03:26:72:49:3A:3E:EE:66:D2:08:DA:0D:10:69:DE:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6j8zlQMmckk6Pu5m0gjaDRBp3j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:27:c3:5d:ea:31:20:31:62:ee:2a:ed:f9:44:0e:c5:46:22:
8f:b2:fc:29:21:57:76:ed:3a:3e:ba:59:7f:1e:ce:b4:65:bd:
a0:b7:26:e4:1a:f8:f1:64:57:2b:c4:62:c8:3e:86:c5:89:c3:
91:e3:21:e0:21:ec:9e:a5:b8:a9:90:1e:f6:30:62:a1:2a:fd:
91:af:34:0f:82:f9:cf:a1:20:86:1f:2b:02:93:4a:7f:2c:2a:
91:e4:c5:35:92:02:99:46:14:b7:dc:bb:6c:8e:0a:97:d1:7a:
0d:bc:9d:bf:c3:af:da:52:ad:dc:56:05:f6:e6:94:8d:af:3f:
5e:4e:e1:91:11:fc:14:f8:49:4d:71:17:d6:ed:74:00:95:2a:
b1:cb:b0:65:05:e0:72:b1:53:f1:19:59:b5:cc:54:7a:76:94:
96:85:c3:d6:bf:b7:c8:74:bf:3b:81:c8:b7:9b:aa:df:8a:6f:
c7:45:21:72:02:dc:5a:da:ec:83:f3:20:57:b1:82:20:98:42:
0a:41:c0:0c:1c:29:03:59:9c:9c:f8:62:6e:f5:66:f5:bc:0c:
45:70:4f:92:cc:f0:55:b1:d7:2c:9d:0d:92:4c:4a:56:1c:a3:
e5:6d:80:2a:4d:89:4e:15:1e:a2:b8:49:e4:94:bc:37:03:15:
f8:d3:bd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:53:20 2025 by rpki-client