Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A6i8E8GLwL19U1QHBOCLNnWJHVU.roa
File: A6i8E8GLwL19U1QHBOCLNnWJHVU.roa (raw, json)
Hash identifier: MG4YOYWSrERk24f9sYRWrBEms+kip3WtJcm81avzQ2A=
Subject key identifier: 03:A8:BC:13:C1:8B:C0:BD:7D:53:54:07:04:E0:8B:36:75:89:1D:55
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018697B2D7143D662CE9D7849F7FE31C84A7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A6i8E8GLwL19U1QHBOCLNnWJHVU.roa
Signing time: Tue 28 Feb 2023 11:05:25 +0000
ROA not before: Tue 28 Feb 2023 11:05:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:97b2:3bbf/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:b2:d7:14:3d:66:2c:e9:d7:84:9f:7f:e3:1c:84:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 11:05:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03a8bc13c18bc0bd7d53540704e08b3675891d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b8:90:15:01:ce:e7:ab:13:3d:f7:d1:89:42:
14:18:6f:e6:6b:f0:9d:89:32:0f:cf:08:31:2d:a4:
37:57:62:c0:72:52:be:81:bf:33:3f:11:07:04:a2:
50:d3:16:51:fb:a7:bf:96:a2:16:b1:55:13:2f:5d:
f6:c1:61:05:16:ea:ab:00:dc:1a:6c:2f:26:e2:55:
6b:34:17:27:5a:83:79:a7:3b:94:fe:f8:13:34:59:
9a:f3:bb:7c:a5:79:6f:74:a3:d5:a1:b9:66:98:20:
10:1d:fc:b1:87:79:9c:8e:94:65:52:41:be:f9:04:
59:3c:42:25:85:b5:37:41:6e:92:85:85:e8:95:1b:
69:5f:ce:99:d2:28:52:2d:c4:8a:3e:4f:a3:9b:0d:
af:f5:94:94:6b:f2:9a:4c:cd:e3:8c:95:94:da:86:
6b:eb:09:2b:4c:f9:35:05:e2:d1:29:92:10:3a:b6:
0b:dc:bd:bc:65:e0:d5:24:17:da:7c:e9:5b:b9:0e:
b1:11:86:4e:aa:06:cf:c4:03:bc:3d:05:f4:eb:50:
6b:bc:b1:ec:54:af:cd:09:de:4c:3c:da:fb:d2:5d:
18:11:5c:f8:84:09:f3:00:29:79:1a:e7:a9:f3:47:
b7:07:b1:f0:f7:9b:f8:49:d3:f6:5a:18:f6:b4:9c:
26:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A8:BC:13:C1:8B:C0:BD:7D:53:54:07:04:E0:8B:36:75:89:1D:55
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A6i8E8GLwL19U1QHBOCLNnWJHVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:da:bc:be:af:f4:24:0d:0e:5b:7d:b1:b5:8f:44:21:85:e7:
0d:8f:63:9b:9e:2e:01:cb:d1:e2:b6:61:25:1b:28:8c:37:5d:
13:18:c2:dd:e3:df:4b:ba:a8:b8:84:c3:f8:12:9f:16:85:e4:
78:d0:4c:0a:cd:3c:2b:2b:b3:f2:2b:82:1a:5e:21:74:2b:c7:
9d:82:7f:68:b8:a8:a1:be:aa:9b:2e:32:14:0f:c2:e3:78:c4:
a3:f6:2d:1c:44:2a:5a:c3:2a:e7:ef:16:8e:b2:c5:f8:ef:38:
1a:ce:ab:2d:b3:83:2d:50:ac:9b:a5:17:df:b9:10:e0:eb:bd:
af:a0:c3:22:2e:90:64:ca:4e:fb:96:ad:2e:bd:ca:f2:26:15:
3a:dc:35:3f:6c:fd:bf:34:83:96:d5:9f:23:a8:83:23:cc:64:
76:fb:9b:46:4c:ed:82:42:00:d4:d8:48:fa:8c:e8:24:97:eb:
69:4b:1e:35:a5:31:3e:a7:06:09:f7:9d:2e:97:0f:fc:e4:80:
47:9f:ca:60:de:d3:fe:c7:2c:10:f6:7d:fc:4e:09:fa:e0:20:
fb:58:81:00:56:dd:f2:75:30:c9:31:61:d3:2d:48:29:74:b1:
b5:58:fe:50:b3:80:41:51:53:9c:02:5c:9f:20:24:d8:bb:9b:
51:05:da:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 11:32:31 2025 by rpki-client