Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A-6-qCzw0LTRuZ5lz2Ly5HPnSOE.roa
File: A-6-qCzw0LTRuZ5lz2Ly5HPnSOE.roa (raw, json)
Hash identifier: XsEvlZFD+Iq5PoV15bzkaCk54tl5Ah88OLe4oKYL7Ew=
Subject key identifier: 03:EE:BE:A8:2C:F0:D0:B4:D1:B9:9E:65:CF:62:F2:E4:73:E7:48:E1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189484E33BF4FD5E93DBB709EA0BF2F950F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A-6-qCzw0LTRuZ5lz2Ly5HPnSOE.roa
Signing time: Wed 12 Jul 2023 04:13:51 +0000
ROA not before: Wed 12 Jul 2023 04:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:48:4e:33:bf:4f:d5:e9:3d:bb:70:9e:a0:bf:2f:95:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 12 04:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03eebea82cf0d0b4d1b99e65cf62f2e473e748e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9a:86:bc:74:c6:e2:3d:f8:09:9c:c5:b9:44:
09:38:b2:fe:b1:36:0b:d4:32:6b:6e:3f:17:1d:0c:
ca:b6:85:ad:e7:69:36:6e:d8:b9:a8:fe:1a:55:f6:
93:c2:b6:f6:fa:ec:0e:1d:65:48:25:7a:6a:6d:29:
a2:35:96:2d:c9:bb:45:65:ec:ca:15:85:35:a4:ec:
58:40:6e:60:8f:ed:1f:74:ac:22:2b:79:16:59:1a:
40:51:a0:e3:bb:6b:22:6d:61:ff:b1:36:cf:da:57:
de:43:d3:72:22:e6:06:b4:ec:36:e6:82:db:08:cb:
6d:a1:18:8a:47:bd:21:78:0a:a4:28:6d:b4:2c:0e:
0c:c9:54:32:37:87:cb:cf:a2:f0:8f:00:43:f2:ad:
01:83:e2:c8:0a:ff:b0:3b:05:1e:d4:27:61:2a:0f:
e8:5b:1a:9b:92:1b:04:64:4f:cc:c6:c2:4e:2b:c4:
d5:70:18:07:3f:71:3f:6b:ef:d2:e9:8b:c3:cd:80:
f8:83:05:48:99:91:09:29:e0:f9:53:89:74:9e:9f:
c6:24:ec:38:80:89:7c:cf:d8:19:cf:84:49:2e:b8:
bd:6a:fb:f2:ed:9c:7b:32:ee:3c:f4:87:7e:ac:59:
79:40:11:68:37:b5:de:e9:9b:6c:af:71:29:b6:02:
31:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EE:BE:A8:2C:F0:D0:B4:D1:B9:9E:65:CF:62:F2:E4:73:E7:48:E1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A-6-qCzw0LTRuZ5lz2Ly5HPnSOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:a9:e8:38:9f:42:0e:de:ce:e9:0e:a1:00:f4:83:2b:c2:8e:
a4:cd:c3:5c:3a:f6:01:84:ef:18:29:bb:60:8d:29:45:a6:71:
fc:ee:a8:32:f5:de:c7:10:59:77:b8:3e:34:ef:75:f9:37:7a:
5e:53:0e:bd:f1:ac:d4:3b:ba:50:27:9c:cb:f7:56:3e:9b:19:
74:6a:f2:ad:54:21:20:81:d1:0e:7e:4e:89:9c:14:79:de:5b:
7d:32:8a:7c:2c:a5:88:89:4f:28:da:39:bb:c6:f1:6e:06:fd:
3b:34:19:9c:bc:8d:8e:85:bb:6e:34:c7:11:35:95:cd:35:ce:
1f:7e:71:61:fd:fd:bb:02:2e:9a:6a:da:67:77:90:f4:74:05:
1d:66:a8:a6:4f:33:fb:50:13:c7:40:8f:e6:ed:1d:0b:24:dd:
84:de:e5:cd:0f:d0:71:85:00:e8:28:0b:15:34:b8:eb:0b:cd:
22:b0:7c:b3:37:43:aa:fd:39:b2:cf:c4:43:cf:4c:92:4b:b5:
5b:06:74:1c:21:a8:c6:86:10:44:16:f1:d2:39:ec:1b:de:5b:
1e:17:c0:81:82:e4:ac:85:69:26:eb:d3:05:b3:2f:9f:42:d8:
2d:a4:a0:3b:d3:44:e5:1d:20:7c:64:ca:39:c3:24:be:bb:9d:
29:f4:c3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:31:50 2025 by rpki-client