Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R6Iew6i1p3WbRIu1il0_6QIA5SY.roa
File: R6Iew6i1p3WbRIu1il0_6QIA5SY.roa (raw, json)
Hash identifier: Q9fH+bIJubqF2Isz10dJfur6jaqlomBg5ho4Ife5uAc=
Subject key identifier: 47:A2:1E:C3:A8:B5:A7:75:9B:44:8B:B5:8A:5D:3F:E9:02:00:E5:26
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186FF1EFFD1809841C2912D290EA6469BDC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R6Iew6i1p3WbRIu1il0_6QIA5SY.roa
Signing time: Mon 20 Mar 2023 13:04:27 +0000
ROA not before: Mon 20 Mar 2023 13:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:ff1e:f353/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ff:1e:ff:d1:80:98:41:c2:91:2d:29:0e:a6:46:9b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 20 13:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47a21ec3a8b5a7759b448bb58a5d3fe90200e526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:52:d1:3e:81:7e:b5:36:37:d8:2e:95:71:9d:
cc:2c:98:d0:23:f2:fd:4d:d0:b8:e2:a8:00:0a:4a:
7d:0c:59:88:05:4c:2d:c1:ba:7a:34:a1:be:f5:15:
1b:90:f1:b6:39:a7:fa:cf:73:74:59:03:4d:b0:0b:
93:d2:51:fe:b2:38:25:bb:a9:8b:e9:9b:02:a3:65:
43:54:f4:7a:02:81:1a:db:cb:68:d9:3c:07:70:2f:
c5:66:7d:49:40:86:7d:d2:c5:e3:53:2e:d5:a9:03:
72:2d:ea:6e:ff:1f:df:b0:8c:be:a3:88:e8:58:e4:
15:b9:ad:45:5a:3d:ed:67:a2:6d:f7:73:8f:39:49:
ce:8a:38:85:24:72:2d:55:39:f9:8d:1d:c4:81:b9:
67:c9:86:81:46:d0:cd:04:a7:01:e3:91:87:eb:f6:
c2:b2:fc:d5:8e:b9:da:51:bb:e5:d7:76:8c:b3:3c:
23:e7:06:5e:ad:23:46:63:3c:a0:d2:6d:fd:09:2f:
b8:04:2d:2e:79:94:65:48:0a:6a:60:f7:82:fd:cf:
d1:62:11:72:4a:9a:5a:c6:49:31:4c:03:73:0c:17:
30:bb:b9:dc:33:db:07:b2:0a:f7:7d:2f:be:1c:f3:
22:a3:d2:43:32:b4:2c:91:7c:43:b6:36:60:ec:fb:
47:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A2:1E:C3:A8:B5:A7:75:9B:44:8B:B5:8A:5D:3F:E9:02:00:E5:26
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R6Iew6i1p3WbRIu1il0_6QIA5SY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:8b:7d:15:68:8a:8f:dd:fe:95:05:a3:ec:53:d6:60:a0:27:
38:19:bb:de:c7:b0:93:35:65:5a:63:ff:22:1c:eb:71:66:14:
d6:c9:17:12:86:91:77:9b:10:83:6f:8c:4e:f9:77:55:52:c4:
89:7c:7f:b8:38:aa:cd:64:6d:d9:8a:23:73:aa:17:4a:3b:f6:
84:d6:3c:2d:5a:3f:ca:61:9f:c4:f1:81:f2:ed:fe:f1:b2:7f:
c4:6b:5d:1d:78:c7:fb:9d:45:af:b8:1a:20:92:a6:23:14:f9:
79:34:d5:b9:6f:89:a7:f4:2c:3d:95:21:96:46:5b:c9:87:c1:
b8:e9:b9:b6:44:96:af:54:87:70:c1:0b:cc:e7:ed:29:6b:66:
68:c5:84:ab:2f:bc:56:13:98:17:08:7e:69:ac:25:d3:55:ad:
f8:9c:44:29:62:4c:8d:cd:4e:41:d8:cc:a4:af:cb:ed:3b:3f:
b6:dc:ab:c2:d5:fa:d1:fd:cf:6c:28:7a:d9:89:a6:b3:72:08:
22:29:88:94:1d:49:62:ec:13:b9:0f:bf:28:79:99:b4:22:0a:
85:9c:03:9d:4f:b1:9d:6d:89:e5:ab:65:5b:c2:c6:41:e8:d6:
d7:a8:23:66:0f:3d:f9:04:df:1a:52:56:2b:7e:d8:83:0c:d4:
f1:28:a6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:27:11 2025 by rpki-client