Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A6ICEikNMH4HhOU-AwAxl5sFfCQ.roa
File: A6ICEikNMH4HhOU-AwAxl5sFfCQ.roa (raw, json)
Hash identifier: deo+d1Go0Oy+p5Kr660guU/i+OCwYaRVmM/xKSiJuKs=
Subject key identifier: 03:A2:02:12:29:0D:30:7E:07:84:E5:3E:03:00:31:97:9B:05:7C:24
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01889442490A82696485390CFBCE7ED84BFE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A6ICEikNMH4HhOU-AwAxl5sFfCQ.roa
Signing time: Wed 07 Jun 2023 05:09:11 +0000
ROA not before: Wed 07 Jun 2023 05:09:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:94:42:49:0a:82:69:64:85:39:0c:fb:ce:7e:d8:4b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 7 05:09:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03a20212290d307e0784e53e030031979b057c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:05:43:00:e4:16:93:4d:1a:b3:56:07:4a:78:
1a:93:22:23:8b:66:34:22:ef:b3:f5:ce:94:15:71:
39:90:1d:88:cc:e1:6a:72:4d:1f:f2:58:2a:13:cf:
c5:a5:b3:d2:fa:b6:6f:2a:23:a6:16:d2:fc:0a:ff:
73:3b:03:c8:aa:06:5b:25:b7:c5:be:c4:bb:91:6d:
9e:71:4c:ad:41:57:97:e5:a0:62:b8:1d:ae:e1:71:
c9:44:f5:eb:3c:b3:de:cd:b3:9e:dd:82:4b:3c:5f:
12:c2:bb:76:f7:07:a0:d7:e6:12:af:87:db:5d:e2:
3d:8e:82:54:16:6d:01:6e:2f:67:b6:25:bd:44:ff:
e5:5e:2a:b7:cf:f1:bb:37:3e:cf:ea:c8:18:13:8f:
4f:d1:3b:fd:71:56:5e:47:74:8a:ab:73:41:24:ac:
f2:83:4e:d9:28:17:14:01:c8:1a:c8:45:3f:3e:8f:
c8:20:5c:e4:8a:7a:c4:f9:a0:36:06:09:73:ed:94:
a3:cf:1e:1b:ac:72:32:33:11:00:ce:43:d0:40:bf:
7e:83:ae:b8:02:99:73:58:01:7d:df:48:14:37:ee:
04:6c:fd:6e:9a:69:bf:ea:99:45:9a:53:57:7b:f0:
e4:77:1b:05:84:e7:f5:5e:6e:4d:89:ad:6d:29:68:
d6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A2:02:12:29:0D:30:7E:07:84:E5:3E:03:00:31:97:9B:05:7C:24
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A6ICEikNMH4HhOU-AwAxl5sFfCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:f8:0a:42:c6:f2:80:b8:9a:af:6f:a5:f5:47:22:a7:4c:b6:
e2:06:c3:13:36:19:95:9a:4b:fa:8c:d7:c2:f1:b0:7c:17:88:
46:e0:13:be:2d:77:fe:ea:8e:8f:c3:15:e2:ee:d1:5b:ee:1b:
11:96:56:1e:f2:c9:55:1b:d6:f6:a3:1d:4b:3a:8d:41:3f:6b:
d8:9e:d5:d1:fa:d2:40:34:59:3a:16:69:61:13:bc:75:78:31:
69:af:85:97:e5:44:55:4f:22:5c:eb:6b:41:65:5a:ab:71:f2:
57:75:eb:44:74:c1:18:c4:7a:5b:63:ab:d0:10:05:ec:48:d4:
c3:cc:b8:37:8b:ba:20:ef:a8:0b:66:94:68:95:a8:33:66:e5:
bd:29:30:5e:25:93:fb:c7:ee:61:a0:bc:0d:87:ba:6f:8c:1c:
30:83:7a:dc:0a:00:99:aa:6a:50:a0:72:0d:ea:67:2c:33:24:
a1:44:65:e6:1e:93:69:93:0c:75:9f:ac:ef:31:2e:16:78:99:
bc:91:46:df:1d:ae:c5:d2:cd:44:11:40:95:7a:39:ab:7c:7d:
f6:6a:61:5e:3e:20:eb:85:74:fe:37:1e:1e:f4:29:9f:ee:cf:
10:9a:9b:50:31:fa:11:0c:99:42:91:c8:00:89:ab:48:ad:ce:
da:a0:20:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:13:45 2025 by rpki-client