Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C6OjUvHISg1ZOQeDirHR1SlxD9w.roa
File: C6OjUvHISg1ZOQeDirHR1SlxD9w.roa (raw, json)
Hash identifier: 65d2u0BF0fHMCtVgawFQT1rK2EufKrhwZW62Tan5LkY=
Subject key identifier: 0B:A3:A3:52:F1:C8:4A:0D:59:39:07:83:8A:B1:D1:D5:29:71:0F:DC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D3D0AC02C1111FA7A56328410980AE5F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C6OjUvHISg1ZOQeDirHR1SlxD9w.roa
Signing time: Sun 12 Mar 2023 03:15:13 +0000
ROA not before: Sun 12 Mar 2023 03:15:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d3:d0:ac:02:c1:11:1f:a7:a5:63:28:41:09:80:ae:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 12 03:15:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ba3a352f1c84a0d593907838ab1d1d529710fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:aa:08:34:ad:2a:66:ae:35:83:e7:8b:57:3a:
af:15:e7:4a:48:bc:72:35:b0:b1:1f:47:e6:01:aa:
63:89:a1:ae:16:93:88:a2:89:ac:4f:55:3a:dd:1c:
e0:ef:71:83:03:09:74:9f:7b:85:5d:c9:33:6d:42:
69:f6:35:c6:11:24:b5:3c:c8:a0:4a:f9:a2:62:92:
5f:6a:ea:ee:74:93:f5:19:e2:c3:17:03:70:11:4f:
0a:e8:22:a1:d2:2e:fd:42:1f:ba:0a:3d:79:02:65:
24:15:f4:20:5e:32:5a:0e:af:c6:f5:0f:b4:cf:b8:
87:9f:e2:02:03:88:59:59:f8:4c:8e:d8:e5:4d:72:
fd:94:ac:4c:cf:19:23:4a:c3:6a:d0:e2:c5:6b:95:
5f:26:89:2d:01:34:19:7e:0b:f5:0b:12:3b:00:5c:
f6:e5:8e:d3:4a:26:44:df:22:98:c9:5c:c6:7e:08:
4d:00:dd:43:11:17:7b:70:9b:30:3e:c8:0d:0a:42:
dd:f0:cf:82:50:15:bd:71:ab:b5:17:d4:d5:89:94:
93:c5:50:29:36:4b:b9:00:22:4a:53:09:70:3d:36:
35:60:40:7c:80:78:d6:ad:65:75:22:b6:db:23:81:
dc:28:6e:44:c1:79:5b:3b:f2:22:8b:7f:6c:95:02:
d2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A3:A3:52:F1:C8:4A:0D:59:39:07:83:8A:B1:D1:D5:29:71:0F:DC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C6OjUvHISg1ZOQeDirHR1SlxD9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:41:b8:51:8d:ec:9b:f7:fb:e7:10:ee:57:a0:0b:9c:75:39:
77:a0:4b:39:dd:35:e7:23:a1:c2:c5:5d:dd:fc:c5:bf:8c:05:
e2:07:7d:f1:b8:87:43:82:ab:e3:b9:92:a2:ca:14:fc:89:2d:
b9:64:2a:32:b0:07:3e:70:62:dd:90:28:7e:ff:b7:6e:e7:49:
48:e3:7d:3f:8a:98:18:2b:45:97:89:3c:ec:96:3a:5d:08:d0:
ce:42:97:0c:60:76:92:08:4d:6a:81:28:9d:ba:6d:56:16:96:
78:dd:d1:b4:83:ed:46:88:87:20:4f:5d:d9:e4:3e:93:f5:30:
ba:b1:dd:71:5f:7c:9f:4b:19:e4:07:7e:54:39:f6:f1:8c:51:
bb:af:99:b7:a4:e6:9f:7c:67:a9:31:d7:a6:b1:d5:16:12:04:
ed:b8:d2:ac:13:a3:6d:f5:9a:7d:a0:84:18:df:c2:72:f7:b4:
e4:7f:2e:1b:19:f2:13:b2:9d:1d:3f:b0:db:75:e5:bf:7d:db:
14:dd:95:b9:ee:14:cf:de:c9:de:68:fb:ef:8f:a6:4d:2a:bb:
c0:e8:fd:34:f4:85:94:ae:e7:1e:ed:07:26:29:c3:67:3f:df:
09:2f:04:6d:7b:dd:2d:9f:6d:a1:27:f1:00:b2:90:41:e1:f4:
5c:c3:a8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:33:21 2025 by rpki-client