Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/akZeoVpB5EscNQ5k78FSER0DPm4.roa
File: akZeoVpB5EscNQ5k78FSER0DPm4.roa (raw, json)
Hash identifier: 6UvqNJFYalXzML47WclUhlVlOtdLM6G8qdidW6m5l4c=
Subject key identifier: 6A:46:5E:A1:5A:41:E4:4B:1C:35:0E:64:EF:C1:52:11:1D:03:3E:6E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01886990EB81CB75375F246CC19E91697AF1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/akZeoVpB5EscNQ5k78FSER0DPm4.roa
Signing time: Mon 29 May 2023 22:11:25 +0000
ROA not before: Mon 29 May 2023 22:11:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:69:90:eb:81:cb:75:37:5f:24:6c:c1:9e:91:69:7a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 29 22:11:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a465ea15a41e44b1c350e64efc152111d033e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:40:d9:11:42:fc:5e:e7:46:46:2b:60:e3:e0:
84:14:16:f8:5a:bf:1b:67:51:bd:a1:45:ff:f3:f6:
d0:ec:d5:d8:3e:38:81:80:98:7f:83:4b:60:ff:db:
02:77:5f:ca:f4:ac:fb:21:24:60:29:f4:26:da:e4:
da:0f:03:75:0c:f4:33:f0:20:e4:f4:aa:ef:0c:2b:
a3:40:dc:75:6e:6b:54:6f:1d:7d:8f:6a:04:f3:b7:
5b:c8:54:80:72:44:ed:ab:37:0d:ad:e2:3d:4c:48:
51:f1:30:98:80:15:33:70:ca:56:d3:74:c9:bb:ef:
06:9a:21:f2:2f:67:59:b8:0c:76:eb:69:6b:67:5d:
e3:3d:7a:9e:f1:7e:de:99:29:75:ff:9b:54:33:5d:
66:38:9c:e3:8d:18:fb:99:58:b0:10:b5:c9:26:ec:
d4:7f:2f:98:a8:b8:5b:a6:4a:e8:52:41:08:35:9d:
06:1b:cb:b5:5b:84:85:d5:de:87:d8:f6:cd:78:b3:
37:d2:f6:d8:74:9a:b4:ea:3b:9c:4d:d1:df:18:5e:
40:a3:81:4c:4a:de:fc:26:7d:5e:78:28:ba:5e:f1:
06:a9:d0:81:38:2d:0e:ec:28:57:78:75:d9:11:4c:
a1:65:58:3a:25:3f:86:24:b3:a0:89:55:8a:f8:22:
6e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:46:5E:A1:5A:41:E4:4B:1C:35:0E:64:EF:C1:52:11:1D:03:3E:6E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/akZeoVpB5EscNQ5k78FSER0DPm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:65:87:9e:b7:a2:70:ad:ab:07:2b:b7:a4:c5:d8:32:76:5b:
c2:2b:f7:e6:44:ab:5c:f7:89:9b:43:4a:7e:47:56:2a:8a:55:
88:21:94:14:df:95:0c:03:da:52:3c:6c:cc:b2:f6:c0:26:58:
88:fa:0e:ae:b7:e6:a4:e5:71:0f:9c:68:b1:d9:57:d6:c5:71:
91:fb:ff:48:a2:8d:1e:15:76:90:e7:9a:ee:cd:43:a0:84:ff:
03:f0:20:77:44:87:38:f0:09:e2:99:46:ee:3f:d4:33:4d:6d:
76:08:2e:db:22:14:32:e6:96:33:ee:22:24:0e:72:f1:22:c4:
d3:b7:f3:d9:81:6c:f6:16:5b:31:bc:f1:cd:6d:01:9d:ac:e4:
60:1d:87:74:f8:85:0d:fc:3e:f4:bd:5e:00:fa:21:d7:fa:c9:
8e:77:fc:96:71:5b:9a:36:61:4f:5f:a5:8f:76:0e:8f:07:82:
cd:a7:7a:96:c5:2b:2a:6b:f4:e8:3c:60:42:3e:8e:2a:38:a4:
59:1c:f7:ac:37:85:b2:2d:20:10:35:d1:70:41:de:d2:64:42:
74:b6:79:19:0e:61:6a:d4:cf:cf:33:b9:d2:f2:01:7a:d5:78:
79:3f:af:75:24:bf:32:b3:60:2f:db:63:2c:4c:8a:b3:3c:83:
45:c3:0b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:28:52 2025 by rpki-client