Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rkt6u2Zxa5wWYQfy_6goRjrtK0U.roa
File: Rkt6u2Zxa5wWYQfy_6goRjrtK0U.roa (raw, json)
Hash identifier: jsQ19kyaZUX3HGsjymPxSXS9JOUA0yIPVcfofn+o0h8=
Subject key identifier: 46:4B:7A:BB:66:71:6B:9C:16:61:07:F2:FF:A8:28:46:3A:ED:2B:45
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018833E5988F160E7D1F53B732286A6CEECE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rkt6u2Zxa5wWYQfy_6goRjrtK0U.roa
Signing time: Fri 19 May 2023 12:04:24 +0000
ROA not before: Fri 19 May 2023 12:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:188:33e5:6d14/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:33:e5:98:8f:16:0e:7d:1f:53:b7:32:28:6a:6c:ee:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 19 12:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=464b7abb66716b9c166107f2ffa828463aed2b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:59:26:03:69:1a:0c:2a:b4:87:c9:45:66:c9:
cb:5c:fa:2d:06:fa:45:87:72:b5:36:78:c3:67:b3:
f6:fb:50:c2:84:ce:df:31:23:0d:a9:76:5a:29:5d:
f4:1d:26:59:41:76:db:f1:af:d5:29:e0:e8:1f:36:
ff:0f:2d:27:1d:5c:10:8d:36:c1:39:5c:df:6e:25:
78:88:91:a0:3c:db:96:f3:b1:38:1a:40:77:3d:1a:
44:4b:48:61:84:e0:87:d9:c6:71:b7:15:f8:91:15:
d4:e7:03:b6:ba:c9:7d:aa:c9:89:71:46:ae:6a:48:
c7:eb:b1:1e:5d:79:da:3d:a4:3d:ba:da:ca:ba:84:
f5:6c:36:b8:ff:9c:63:97:bd:ce:e2:3d:68:43:d8:
87:3b:13:74:5e:72:ce:3c:bc:5a:27:0b:ee:09:2c:
a8:ba:c2:fe:4d:01:73:1b:33:b8:66:77:dc:27:86:
1d:34:18:c8:3f:66:21:25:24:e6:71:25:36:70:7e:
3c:d6:b3:94:a2:c6:bf:3d:d6:a1:f7:bc:66:45:19:
cc:d8:9e:be:ca:4a:02:6b:7f:81:d5:cd:fb:1d:1a:
c3:d9:2d:b9:53:f0:42:42:e0:8b:b9:fa:fe:fa:a2:
99:30:9e:1a:32:19:cb:7f:93:35:7a:06:32:5a:c1:
35:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4B:7A:BB:66:71:6B:9C:16:61:07:F2:FF:A8:28:46:3A:ED:2B:45
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rkt6u2Zxa5wWYQfy_6goRjrtK0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:0f:c5:5f:52:df:b8:6d:3c:8c:23:df:e4:2c:da:58:d9:dd:
03:3e:d2:f4:c9:ca:68:2b:c1:f0:da:56:2a:b8:bc:06:b0:30:
ff:e5:08:cb:43:8f:86:94:65:f7:b6:a5:8b:32:12:5d:28:97:
cf:1c:46:47:29:ec:23:d2:6c:f0:29:16:73:5e:b9:a9:6a:df:
a1:11:a4:bc:a6:ae:4b:4c:27:f6:81:24:04:c3:f8:9f:8a:00:
69:0a:aa:bc:fb:f8:a8:8e:82:db:42:cb:74:23:b1:e0:61:80:
ed:4e:42:80:4e:3c:43:ba:f3:e6:6c:d6:06:7c:33:7c:a1:07:
ba:fd:b0:09:60:f8:9f:77:82:2a:b9:52:4b:2e:a9:7b:9a:c1:
81:71:43:2a:62:a1:44:9f:54:14:d5:38:0b:4c:7c:b3:a5:d0:
74:83:f9:0c:94:a7:92:b4:65:18:a6:48:fe:dd:3d:29:d8:9f:
b6:81:f2:dc:65:f6:6a:32:c8:72:12:be:20:54:d0:eb:3c:81:
d6:c6:7a:a2:a0:ab:b2:71:3a:6d:f7:23:1f:3d:5c:dc:db:95:
22:d8:9a:8b:21:35:c1:a8:dd:17:ec:67:4a:3c:48:1e:3b:44:
be:57:bc:25:9d:61:48:dd:eb:d3:9a:6f:10:e5:e1:ea:cf:29:
55:5c:b5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 04:44:07 2025 by rpki-client