Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6m7K65MKV0moWjeIPHzEOJRlJtc.roa
File: 6m7K65MKV0moWjeIPHzEOJRlJtc.roa (raw, json)
Hash identifier: oY7rtH9ovpkLtNbOdhWelA23r2/6gIvER80/+Sh7qqs=
Subject key identifier: EA:6E:CA:EB:93:0A:57:49:A8:5A:37:88:3C:7C:C4:38:94:65:26:D7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187C1FAAABAE12CA3429CFF4338473FC2D5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6m7K65MKV0moWjeIPHzEOJRlJtc.roa
Signing time: Thu 27 Apr 2023 09:10:42 +0000
ROA not before: Thu 27 Apr 2023 09:10:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c1:fa:aa:ba:e1:2c:a3:42:9c:ff:43:38:47:3f:c2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 27 09:10:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea6ecaeb930a5749a85a37883c7cc438946526d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:f2:c1:d9:44:a7:4f:fc:e1:c9:12:5e:3f:
fa:96:f6:82:58:87:96:7d:77:39:14:4b:eb:5b:d0:
6a:1b:61:e9:02:8d:ba:76:07:95:8a:43:c2:da:60:
52:61:d4:e3:9f:10:21:ac:fc:7f:b3:6e:10:49:a9:
45:12:8d:2c:77:8a:88:7c:02:eb:fb:a3:00:cd:1b:
05:d8:b9:69:e7:b9:a0:39:25:42:c9:f8:d3:e8:60:
e3:99:44:8b:74:62:46:82:dd:c7:cd:87:d7:9c:d0:
a0:96:75:39:12:99:00:d4:ee:bd:f6:01:bc:b0:ba:
4a:f7:5e:78:5a:e3:a6:8b:8b:c8:d5:7b:a6:bf:6a:
8e:ae:46:65:a1:14:2c:c0:21:64:75:52:91:52:ce:
0e:1a:34:a8:ab:51:55:2f:45:cc:0f:b9:7e:8a:f2:
b5:6d:32:54:d5:3e:5d:00:37:a6:22:50:d7:e6:95:
f1:d8:9a:82:02:4f:c1:dd:89:54:8f:69:55:68:e3:
25:7a:85:22:fa:ad:4a:8b:85:b3:b6:08:06:38:fe:
49:a9:b0:c0:e9:39:a4:85:89:50:6d:e1:51:f7:21:
19:b9:a1:aa:ae:f3:35:a8:b1:a9:f5:d5:0e:b1:3b:
04:dd:e0:a8:dc:9c:1f:0e:a7:1f:ce:6f:c1:ce:65:
88:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6E:CA:EB:93:0A:57:49:A8:5A:37:88:3C:7C:C4:38:94:65:26:D7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6m7K65MKV0moWjeIPHzEOJRlJtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:da:16:8c:1b:9e:a4:81:d1:3d:cb:91:69:c3:98:56:67:e9:
01:52:cc:fe:62:d4:e1:c8:46:52:40:1c:11:a7:ea:6d:f9:12:
82:a5:c5:7a:93:81:f8:48:ae:a8:93:24:55:55:47:2b:9d:22:
36:f8:6c:50:f4:f2:b4:65:13:91:41:d8:5e:d0:21:aa:c7:27:
06:3d:11:f6:13:1b:8a:d9:a3:ce:d2:ca:7e:23:af:cc:77:57:
2f:d0:3f:cc:7a:cc:a0:40:8c:14:da:7d:43:6b:6b:02:85:90:
7a:c3:3a:42:ad:fd:ad:1a:89:fb:e7:d9:f4:3c:09:05:74:c7:
54:bb:65:20:4f:f8:25:51:0f:9d:2b:df:d4:9d:b8:5e:fe:07:
e3:09:4c:c3:f5:22:08:30:33:2a:43:33:6f:a7:ee:29:1a:02:
62:6b:fc:f7:1b:81:17:b4:cc:6c:9f:59:77:70:20:9a:8d:f7:
a7:c7:48:1f:06:4e:76:30:c0:55:bc:04:bd:6e:c7:e2:12:12:
be:33:68:ba:de:a1:e0:e4:e5:1c:91:74:ca:19:84:69:6c:c4:
e1:c1:cb:8f:47:c6:6f:72:1a:9d:99:6d:be:bd:81:65:76:80:
e8:df:d7:0b:ed:29:55:08:92:54:6d:99:a8:e0:66:75:ec:1c:
e7:b9:fa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:22 2025 by rpki-client