Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C6ZDMD6CFC6jRG5Ux6rmG0rU6uo.roa
File: C6ZDMD6CFC6jRG5Ux6rmG0rU6uo.roa (raw, json)
Hash identifier: sOHN+ooObOF71mdQ01JAhzjKnz7A5Xd6OlESzGw/0jc=
Subject key identifier: 0B:A6:43:30:3E:82:14:2E:A3:44:6E:54:C7:AA:E6:1B:4A:D4:EA:EA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01884B4F92415EC3ECEE44A53FED912C245E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C6ZDMD6CFC6jRG5Ux6rmG0rU6uo.roa
Signing time: Wed 24 May 2023 01:11:25 +0000
ROA not before: Wed 24 May 2023 01:11:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4b:4f:92:41:5e:c3:ec:ee:44:a5:3f:ed:91:2c:24:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 24 01:11:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ba643303e82142ea3446e54c7aae61b4ad4eaea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:42:75:de:dc:07:49:3b:69:6e:c9:a6:ca:6e:
0e:3b:29:ce:48:66:f3:b6:86:62:94:e8:49:e3:b6:
82:e2:d6:fb:83:8f:05:27:73:fa:e4:04:5b:97:ad:
e1:ff:17:35:ac:e8:95:da:8d:fb:a7:06:89:e6:db:
e8:56:65:49:cf:9e:a7:27:3a:6b:e3:6d:02:35:35:
e2:34:2d:52:9c:66:fb:47:bc:9d:1f:ad:b9:c6:b8:
e4:d6:48:3c:c9:cc:88:77:9a:2c:ea:89:fd:ce:9f:
cd:c1:5e:ac:cc:0b:f7:0d:76:90:28:09:17:da:43:
40:57:5a:88:bc:ca:b5:1b:8b:be:0d:0a:76:30:65:
f3:ed:97:33:1c:f8:f4:0b:e8:98:0f:aa:5b:da:e3:
43:b7:3e:67:1b:24:26:7c:79:10:a9:7d:0e:12:6e:
71:7d:75:12:d7:48:ac:4f:f2:d4:27:5f:c5:c2:ad:
b5:d1:5e:b3:73:f1:a8:4f:73:13:67:e1:42:fa:ff:
af:fa:4e:e9:e5:fd:92:b7:18:35:21:61:88:65:56:
47:79:75:2c:86:db:8f:6f:22:2c:6f:35:27:13:56:
14:b9:8b:c4:26:d7:c1:52:f1:12:07:f9:c8:89:49:
70:80:39:5b:dc:cb:db:19:45:18:f9:c2:2e:d9:5d:
1e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A6:43:30:3E:82:14:2E:A3:44:6E:54:C7:AA:E6:1B:4A:D4:EA:EA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C6ZDMD6CFC6jRG5Ux6rmG0rU6uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:1c:3d:f1:54:7b:60:4c:31:b0:7f:56:07:98:f5:86:a9:7f:
e2:ed:79:24:1e:37:d3:b8:f6:26:62:c1:d4:e6:c3:f5:6e:92:
c5:2b:a0:2c:0a:76:66:c2:a7:39:14:4a:f3:c1:e3:c0:e0:17:
24:54:ed:89:01:1e:ee:76:3d:af:3d:34:84:b8:fc:60:bc:4b:
6e:ef:e7:b7:15:d8:ce:c9:3f:92:54:a6:01:4e:19:1c:b0:c9:
08:59:ce:e6:e9:33:6f:0a:64:5a:b3:59:65:d1:a3:04:e0:19:
b0:88:7b:cb:70:06:ec:dd:b3:3b:6f:88:8b:f8:05:cf:70:f5:
8f:fe:eb:eb:b9:ff:de:6b:3d:1f:49:48:38:80:80:76:3c:3a:
2a:14:29:62:1e:84:46:02:84:bf:37:69:2a:22:93:25:b5:69:
b9:92:44:a7:b9:88:6b:69:92:33:49:7e:61:ee:d8:ea:0e:be:
21:3b:05:0d:5e:38:ff:3e:80:7f:82:6a:b5:b6:19:1b:1c:93:
b7:fe:79:98:20:33:6b:23:a4:38:86:d3:61:49:7e:08:59:ea:
60:93:1a:fa:75:9f:1f:12:5a:bc:08:04:30:75:08:24:20:31:
6f:41:05:b7:6e:c7:3b:73:84:b2:82:8b:57:f3:5a:71:2a:e6:
9e:6f:e6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:00:55 2025 by rpki-client