Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A_6QJQsoGmOoYpeR_e9m_EzPUtc.roa
File: A_6QJQsoGmOoYpeR_e9m_EzPUtc.roa (raw, json)
Hash identifier: 0trwwwVh+emNmtHPPUwqQx38OexoT0/J1/VtUVbav4c=
Subject key identifier: 03:FE:90:25:0B:28:1A:63:A8:62:97:91:FD:EF:66:FC:4C:CF:52:D7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A420A9728F87294B0A0CD22AF46EBF46C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A_6QJQsoGmOoYpeR_e9m_EzPUtc.roa
Signing time: Tue 29 Aug 2023 16:05:04 +0000
ROA not before: Tue 29 Aug 2023 16:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:420a:46fa/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:42:0a:97:28:f8:72:94:b0:a0:cd:22:af:46:eb:f4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 16:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03fe90250b281a63a8629791fdef66fc4ccf52d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:77:6c:78:79:a7:6e:22:9c:e4:84:fb:d6:fb:
af:47:12:80:d1:d8:34:81:2f:df:64:6e:93:0c:99:
9e:37:d5:02:25:ae:fd:4e:dd:4d:62:ff:22:d0:f2:
80:5a:8f:9e:5a:28:4e:c8:87:81:7d:31:60:32:13:
32:a1:ec:47:a0:09:15:fd:0a:f3:c4:bb:24:44:c8:
ef:a7:37:e9:a0:c7:44:a3:46:97:a9:20:1a:82:ea:
20:b1:c0:c0:60:d8:c9:52:87:89:b8:12:cb:42:bf:
57:dd:24:12:f6:e2:c0:bf:82:82:38:ed:19:65:af:
51:2d:44:d8:00:2b:35:52:04:5a:73:14:73:58:c5:
b0:37:60:45:14:b4:21:f9:31:ab:c3:ea:01:6f:80:
d8:60:56:05:3e:6a:ff:4e:d0:67:1e:b7:b2:8a:27:
c8:68:d1:5e:09:02:1e:18:4e:f6:8d:77:97:b1:f4:
c8:d9:c0:77:56:72:78:7f:97:fc:6a:2b:ad:61:81:
b5:5b:b7:03:d4:d7:d7:b2:d8:24:85:98:f2:11:63:
25:f3:8f:2a:fa:a4:35:ad:27:30:42:62:b4:6d:5c:
51:0d:3e:16:10:91:1c:41:73:ac:83:42:1e:46:3a:
84:dd:67:2b:8b:54:d1:77:81:5b:c3:6a:9f:3c:d8:
c0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FE:90:25:0B:28:1A:63:A8:62:97:91:FD:EF:66:FC:4C:CF:52:D7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A_6QJQsoGmOoYpeR_e9m_EzPUtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:47:4b:11:4a:1d:e5:07:89:cb:ed:10:18:8f:59:55:e9:34:
e0:22:c6:25:4d:e9:5a:d1:71:e6:92:da:d7:08:9d:44:80:23:
f0:85:45:04:49:cd:72:c2:fb:0f:40:46:ad:61:02:e2:f1:80:
e2:63:fa:a4:05:70:af:4d:4e:f1:07:42:f3:5d:ec:f2:6d:85:
e9:b4:53:a1:40:62:b4:c0:14:68:3f:8a:24:11:22:82:40:43:
2b:55:32:63:27:37:62:12:2c:42:a1:09:4b:7a:99:a6:71:fd:
c5:f1:a0:c2:4a:7f:58:d0:54:67:d1:33:e5:97:25:65:23:a0:
73:2c:c3:8a:bf:1c:cc:12:fc:aa:34:ac:11:9a:9d:3c:f8:9c:
80:43:b9:45:96:3a:93:4c:a1:cd:7f:b8:a1:15:67:a3:98:bb:
bc:e8:9e:a0:15:e6:6b:cc:37:b7:10:2e:f0:bd:4f:b2:38:68:
c8:9d:49:f9:04:d4:ad:5c:7d:42:de:c5:88:45:cc:d9:68:d0:
70:20:89:6f:af:f1:66:66:7d:40:6f:b3:c0:ba:2b:9a:12:99:
e0:6e:ff:93:92:ff:fe:e3:9d:1a:05:2d:88:09:ef:46:40:e9:
f5:70:a2:eb:5f:3c:2a:67:4d:64:f8:12:0a:ba:55:c8:16:f9:
46:c8:86:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:35 2025 by rpki-client