Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h_6wslnBfwPZaGfCcTOF2NKfQqI.roa
File: h_6wslnBfwPZaGfCcTOF2NKfQqI.roa (raw, json)
Hash identifier: pPn2LQQKwRYj7YuETZBHXts6f70QwoC2Lh1zqzSMXX0=
Subject key identifier: 87:FE:B0:B2:59:C1:7F:03:D9:68:67:C2:71:33:85:D8:D2:9F:42:A2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018707F3BF77F4F6927D197392D35ED236DE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h_6wslnBfwPZaGfCcTOF2NKfQqI.roa
Signing time: Wed 22 Mar 2023 06:13:47 +0000
ROA not before: Wed 22 Mar 2023 06:13:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:07:f3:bf:77:f4:f6:92:7d:19:73:92:d3:5e:d2:36:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 22 06:13:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87feb0b259c17f03d96867c2713385d8d29f42a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:1b:1a:ec:6b:f8:2f:e9:59:ee:92:e7:9c:
a2:8a:63:b9:d2:cf:b1:7d:b9:c7:61:22:5b:5a:0d:
24:6a:25:ed:57:64:0d:e3:b9:78:bb:d7:f9:b7:ee:
26:20:73:95:13:a1:11:73:ab:e7:35:35:63:49:56:
78:00:cb:70:78:84:f1:a4:19:66:97:2d:a3:6e:f2:
dc:7d:95:27:23:8f:4a:20:80:b2:b6:68:ac:70:5c:
0b:02:ae:b5:32:84:3a:09:07:cd:f5:27:47:f6:82:
7e:55:9e:a4:8c:2c:42:b5:62:7c:88:12:a1:6e:56:
8e:3d:57:1b:61:b0:43:33:2b:8d:77:a5:50:d7:6f:
2e:51:7e:e4:15:94:13:74:4f:08:56:7a:05:b0:85:
aa:03:5c:2a:5d:ae:ce:7a:bb:84:9e:39:d9:cc:94:
d7:a7:d0:ea:fa:b8:9b:e4:36:d4:d6:05:3e:52:b1:
02:1d:5c:50:da:41:c1:19:7a:c2:86:6f:50:d1:f1:
67:8c:d1:6f:be:f2:ed:a0:0e:31:5e:8b:1c:24:64:
a3:2a:01:40:ea:11:df:ec:91:61:c7:f4:32:3f:7b:
48:58:e6:78:67:ed:51:3a:14:f8:fa:75:b1:4e:78:
77:0a:51:0e:d5:a5:41:aa:17:2d:c4:85:af:8b:ce:
86:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FE:B0:B2:59:C1:7F:03:D9:68:67:C2:71:33:85:D8:D2:9F:42:A2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h_6wslnBfwPZaGfCcTOF2NKfQqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:fb:06:8d:e8:a6:eb:bb:97:8f:56:4e:3a:2f:5f:8c:ec:18:
7f:40:7e:ff:77:04:0d:1c:ce:e1:59:56:21:5b:65:f8:8c:d2:
75:cb:a6:42:38:db:16:4c:3f:e6:86:d5:34:18:dc:7a:72:b3:
aa:00:c8:6d:9f:8e:da:59:80:91:2c:68:f2:4b:83:63:9c:fb:
04:54:9b:e0:c6:a8:f7:0b:c5:b9:19:59:77:cc:9e:3d:5b:e1:
e2:5f:3e:26:2c:74:67:32:ae:63:43:13:5f:41:7f:ab:6b:ec:
d8:e4:4f:e0:e5:06:5d:db:89:f0:47:16:7e:e5:f3:cc:b1:26:
b9:ac:80:02:db:4c:6c:53:80:bd:33:d6:9d:2d:a1:13:88:75:
67:70:80:72:20:a8:c6:7a:bd:99:0d:bc:bf:1c:56:51:8c:d2:
83:9c:7a:30:a8:42:d7:76:41:27:88:33:de:c1:0c:30:af:e7:
f4:74:7b:92:21:44:0d:62:75:c7:a9:65:56:ee:9e:92:d4:19:
d3:5c:63:fa:43:18:5f:bc:22:ec:70:a8:c3:3a:1a:48:23:ee:
03:83:65:96:26:d6:a3:c4:ad:53:85:b4:9f:f4:d9:6f:87:71:
9a:ca:2b:12:87:ae:4b:b4:f6:1f:65:2c:86:06:cc:a8:23:cb:
f3:64:2c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:52 2025 by rpki-client