Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aq6T_uBj10LGOaadA5Ni-gnYMcM.roa
File: aq6T_uBj10LGOaadA5Ni-gnYMcM.roa (raw, json)
Hash identifier: cjOQQImnTKkM3W0u6mLNDHIO+HdTsc9QRSDL/7r4QE8=
Subject key identifier: 6A:AE:93:FE:E0:63:D7:42:C6:39:A6:9D:03:93:62:FA:09:D8:31:C3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F16470A61F5AE4C999CB291B4495E92A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aq6T_uBj10LGOaadA5Ni-gnYMcM.roa
Signing time: Mon 14 Aug 2023 00:13:58 +0000
ROA not before: Mon 14 Aug 2023 00:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f1:64:70:a6:1f:5a:e4:c9:99:cb:29:1b:44:95:e9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 14 00:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6aae93fee063d742c639a69d039362fa09d831c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:70:cb:fb:9a:f0:35:dd:c0:af:8c:00:b2:28:
ab:18:7f:6a:a6:4c:c1:90:48:e3:d6:54:95:eb:b1:
28:a6:15:3c:a4:6c:27:34:9a:52:04:59:0a:68:3b:
22:43:2b:64:b0:6c:4c:4a:96:fb:9b:a4:a8:ce:d9:
99:18:ad:0f:d8:fa:1a:82:82:8f:4b:0d:ab:c3:8a:
bd:0b:5c:52:85:70:89:12:6c:3e:eb:12:ae:50:95:
f7:8b:69:dc:54:4d:3a:6e:45:f3:80:14:13:00:67:
71:14:bf:ea:60:63:de:08:2b:62:da:6e:35:59:e5:
a9:4c:27:30:d6:3c:39:5b:68:cf:f2:66:30:18:92:
58:8b:32:3a:83:fb:c0:46:20:a3:63:80:21:04:59:
23:6a:d7:a0:36:4b:53:8b:07:21:da:c5:45:bb:3f:
7e:9b:a3:21:a5:4b:d2:ad:2a:7c:05:77:16:74:bd:
2f:a2:16:95:d4:ff:b7:15:7c:41:17:85:17:d9:bd:
d4:10:b3:96:bf:68:e6:60:4f:d3:aa:c8:02:3e:88:
52:48:13:ce:85:24:1f:00:73:2a:92:d1:d7:42:37:
c4:54:0c:ba:66:fd:95:e8:02:65:fd:99:c6:dd:b9:
ac:f3:2d:c4:b1:1d:90:40:4d:1e:1d:22:60:b4:dc:
70:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AE:93:FE:E0:63:D7:42:C6:39:A6:9D:03:93:62:FA:09:D8:31:C3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aq6T_uBj10LGOaadA5Ni-gnYMcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:c1:56:d6:d7:40:77:ca:77:a6:68:04:15:a3:f2:fc:4e:03:
45:65:ea:64:e8:9d:20:5d:0a:8f:f1:10:a7:6f:e4:6e:ab:01:
48:15:80:16:08:37:5f:60:e4:69:b2:9e:78:ce:9c:09:a0:81:
31:0c:ca:3f:7c:20:d7:29:4e:ea:68:1c:c2:22:1d:6f:93:2e:
3c:04:06:ad:24:d8:47:e8:89:13:db:85:f5:27:b6:0c:1f:aa:
29:5f:91:c4:f9:ba:73:2b:b5:e3:b8:fb:da:33:27:d6:2a:fe:
2c:4b:6f:fc:eb:34:5a:0e:8f:88:a9:99:e7:29:9a:5d:c9:1b:
84:72:ab:09:bc:2e:c4:e9:83:de:63:60:be:cd:35:40:d9:1f:
19:7c:be:8c:54:cb:a7:2f:11:66:8b:26:ed:48:a7:80:4c:b7:
09:a1:38:a2:23:e2:02:4e:11:4f:67:10:a6:09:52:a3:e8:e2:
a8:a3:2f:5e:1b:e8:04:7e:5e:89:c9:1b:58:de:82:52:f7:7d:
f8:0d:7d:2f:80:75:8e:9c:2c:a5:95:88:da:8c:30:b9:5f:4a:
0d:0c:63:2d:b6:c1:dc:db:1a:c6:54:33:87:c0:97:7e:03:b3:
3d:f5:5f:7e:a2:fe:c0:85:7c:4f:b9:a1:28:fb:38:c0:6e:27:
99:75:df:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:16:02 2025 by rpki-client