Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6wNVswzpzLb4wD9V6K9FMRoh-Ls.roa
File: 6wNVswzpzLb4wD9V6K9FMRoh-Ls.roa (raw, json)
Hash identifier: zY2kpnPbJTKLeDUc/NpFEzdopLOsfLDjzgpYTec0VnM=
Subject key identifier: EB:03:55:B3:0C:E9:CC:B6:F8:C0:3F:55:E8:AF:45:31:1A:21:F8:BB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C7F99C0D2D0B1CA6A6CB5EE7958943A2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6wNVswzpzLb4wD9V6K9FMRoh-Ls.roa
Signing time: Sat 17 Jun 2023 06:10:04 +0000
ROA not before: Sat 17 Jun 2023 06:10:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c7:f9:9c:0d:2d:0b:1c:a6:a6:cb:5e:e7:95:89:43:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 17 06:10:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb0355b30ce9ccb6f8c03f55e8af45311a21f8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e4:27:33:0a:78:11:a4:9b:a7:1b:ea:6a:c1:
13:63:0a:6d:e8:c4:c4:f1:7e:81:24:9d:2c:28:d1:
6c:9c:2d:27:01:7f:fc:17:c1:43:a0:55:f3:dd:40:
0c:87:9d:4d:09:58:7d:f5:83:a8:27:4a:01:20:cc:
1b:55:d7:ba:f2:68:80:1c:09:02:58:72:49:50:9d:
28:e4:1a:e1:cc:6c:ee:28:ac:59:fc:c5:a0:aa:cc:
e6:4e:1e:c8:78:3a:bd:6b:59:6e:5c:d5:12:93:14:
7e:2d:92:9d:38:83:23:43:d4:55:34:da:f0:9f:b2:
69:65:6a:de:25:6d:32:ed:14:11:cf:b6:e5:d3:c1:
ed:81:35:17:6a:3e:46:fe:45:93:3b:50:db:06:5d:
41:91:6c:25:96:7c:7d:fc:e0:a0:8e:69:1f:18:25:
ca:24:8e:91:99:3e:05:d9:15:f8:0d:ea:98:15:24:
a3:68:a2:58:44:1b:a2:e2:df:45:20:57:5c:ab:4f:
9a:f9:44:63:cf:61:b1:58:88:a9:ad:fa:7b:aa:a7:
da:5b:79:c2:db:b7:98:20:e7:0a:b3:35:12:77:a1:
89:62:44:b7:2a:b0:02:b5:15:03:65:ee:10:84:4c:
50:4e:25:95:87:39:3e:15:43:c5:a2:cf:f9:18:b2:
d2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:03:55:B3:0C:E9:CC:B6:F8:C0:3F:55:E8:AF:45:31:1A:21:F8:BB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6wNVswzpzLb4wD9V6K9FMRoh-Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:9b:d2:6b:ed:1a:80:5a:16:49:e7:e3:b2:f5:88:55:3d:ef:
3b:b7:8c:90:d1:4d:ba:92:99:95:c6:de:24:95:01:4e:89:a2:
c0:3e:55:91:fc:eb:8d:03:40:4c:37:e4:aa:d7:47:c2:e7:f8:
48:da:5c:6a:1d:07:ee:84:ba:3a:41:5a:24:af:7c:2e:41:91:
68:d6:07:50:7e:37:b6:55:2c:5e:26:a9:62:c5:a8:4b:f3:0a:
19:d0:54:d7:96:bf:55:a2:24:1b:3e:92:4f:c0:14:52:a8:5d:
5e:91:c6:5f:19:7c:d7:17:01:58:a6:75:93:6a:cd:c0:22:44:
c0:e1:e0:6a:c7:82:af:b1:2b:ea:2d:d0:3b:6e:d0:0d:f0:aa:
75:f6:69:05:5f:b6:25:fa:9d:19:2d:78:24:8b:c2:c9:af:33:
d9:aa:24:6d:ee:e3:aa:64:92:ef:41:2f:bb:d2:c5:ff:0e:2a:
f6:ea:a1:8f:c4:17:c0:c8:11:12:4f:e1:b2:10:cf:9f:aa:bc:
80:2a:36:8f:9e:fb:28:c2:85:e1:17:ca:0e:24:fb:1f:d2:4c:
3e:02:23:32:30:70:38:e9:6c:48:80:9a:b3:b3:8d:6f:01:b8:
21:00:b2:d8:0a:ff:61:ad:16:44:7e:f6:94:fc:1a:5f:73:3a:
77:72:b3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:22:50 2025 by rpki-client