Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6xjgW-OTUL_9Ic9G8lzH9uAw1T8.roa
File: 6xjgW-OTUL_9Ic9G8lzH9uAw1T8.roa (raw, json)
Hash identifier: 5LDxk3HzqxhB2G3YsUArCG4HY4FSOCQfDtf1p10lCmE=
Subject key identifier: EB:18:E0:5B:E3:93:50:BF:FD:21:CF:46:F2:5C:C7:F6:E0:30:D5:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189318CAE5CABBEB3D41EA8CA8A80850980
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6xjgW-OTUL_9Ic9G8lzH9uAw1T8.roa
Signing time: Fri 07 Jul 2023 18:10:50 +0000
ROA not before: Fri 07 Jul 2023 18:10:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:31:8c:ae:5c:ab:be:b3:d4:1e:a8:ca:8a:80:85:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 7 18:10:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb18e05be39350bffd21cf46f25cc7f6e030d53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:81:92:2f:4e:85:20:48:a4:44:d2:5a:80:70:
02:5e:4e:c5:34:1d:c7:60:5c:65:1c:c2:47:26:4c:
56:54:e4:f9:84:b8:cc:65:39:4a:be:0e:99:08:f7:
a4:b0:fd:79:99:f8:6c:49:57:c8:65:65:3c:49:50:
00:45:0c:38:4d:ed:d0:ac:17:3e:95:61:dc:21:06:
f0:1b:9d:4b:38:8b:0a:f2:c7:45:b7:6a:65:03:2a:
72:8e:57:ab:0b:1c:21:c5:6e:6c:f5:d4:7e:73:25:
59:cc:0c:be:a1:32:ac:6e:0d:30:26:99:88:a4:e5:
ed:e5:31:d4:df:07:2d:0b:6e:e0:51:24:81:5a:64:
0c:86:ab:91:44:84:6e:23:13:57:18:ca:2f:d3:a1:
ba:ce:79:e9:9f:f8:ac:40:8d:eb:31:db:4b:d3:de:
12:72:d3:c4:be:28:e3:2f:69:3a:14:6b:c9:a2:c3:
26:10:c9:10:42:fc:2c:51:79:d0:cd:1c:22:e6:89:
2d:13:56:a4:47:29:aa:f4:51:f6:e9:67:93:ae:4c:
36:46:34:30:7e:92:69:a4:b4:cc:13:9b:46:dc:9f:
bc:76:8e:17:83:bd:da:c5:b0:f8:f7:9f:05:8c:02:
df:ca:a4:1e:5d:0e:89:46:2e:3d:53:45:b6:15:40:
66:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:18:E0:5B:E3:93:50:BF:FD:21:CF:46:F2:5C:C7:F6:E0:30:D5:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6xjgW-OTUL_9Ic9G8lzH9uAw1T8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:64:36:f9:d3:f2:31:86:46:b5:27:79:c1:81:ae:21:34:e3:
a3:0c:16:a3:8b:b4:ce:d5:74:f2:e9:f6:a5:e8:93:74:83:aa:
f5:70:7c:b7:d1:2b:03:52:d9:ad:f3:87:e0:6a:0d:6b:b4:64:
d2:e4:3b:bc:b0:5a:47:cd:fe:cb:ad:d2:af:15:cb:9e:e7:79:
60:9d:53:94:c5:7a:cd:18:3a:6c:3b:48:6b:46:7b:1a:ab:56:
14:6e:a1:36:d4:cf:47:4d:87:d7:00:b0:bb:af:2b:2a:a8:ae:
c0:40:aa:62:ce:aa:c9:01:07:a3:ce:c0:f1:23:a6:c4:6d:4a:
53:8e:82:c3:1e:07:ec:be:9b:25:58:35:ae:8e:c5:03:e9:ea:
a7:d8:15:4e:d2:2c:1f:f7:dc:c4:93:80:7c:cb:73:bf:47:bf:
bc:62:26:bd:81:ab:f7:4f:53:a2:7a:25:e5:dd:c0:db:97:77:
7f:61:c6:d7:21:20:f9:49:5e:ee:4d:1d:ac:0b:fd:96:8b:cb:
fc:ef:de:c6:db:b4:50:99:dd:31:aa:3a:62:9d:b2:29:9e:f1:
7e:e0:7d:4b:d6:69:5e:f9:be:15:86:fa:bc:c0:6e:fa:d8:ec:
13:7e:34:4b:d9:43:15:35:36:51:03:01:37:36:d6:7a:1e:01:
21:2a:f5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:27:59 2025 by rpki-client