Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n6hQArXHouIkJw1iYFTCoUoOr_U.roa
File: n6hQArXHouIkJw1iYFTCoUoOr_U.roa (raw, json)
Hash identifier: a8I4jY8etVDdmQkHLeHBmcosDHZ+L0sE6j+nRkPClew=
Subject key identifier: 9F:A8:50:02:B5:C7:A2:E2:24:27:0D:62:60:54:C2:A1:4A:0E:AF:F5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01847647716E9B25B7F48C9B5D5F834DFE55
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n6hQArXHouIkJw1iYFTCoUoOr_U.roa
Signing time: Mon 14 Nov 2022 13:15:04 +0000
ROA not before: Mon 14 Nov 2022 13:15:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:75cf:c8d9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:47:71:6e:9b:25:b7:f4:8c:9b:5d:5f:83:4d:fe:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 14 13:15:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fa85002b5c7a2e224270d626054c2a14a0eaff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:da:52:f6:71:2f:0a:2e:7d:7a:b4:ee:57:
ae:2b:38:e2:e9:5d:49:7b:34:9f:4f:a0:b6:f1:75:
52:e0:d5:88:6f:dc:37:12:6b:45:8d:d4:84:67:68:
b4:cb:62:4f:dd:c9:98:7c:6e:89:21:78:47:5d:2a:
04:18:da:b6:7a:8e:0b:af:e4:b1:2d:85:c6:89:f0:
28:05:2d:92:a0:18:ad:73:dc:75:a5:86:7f:15:73:
fd:8a:09:22:2d:55:87:cd:73:fa:88:8d:69:ec:34:
4c:9a:c2:ee:8e:49:7d:c7:ee:02:b7:b4:69:ee:a8:
c9:d3:fa:5d:00:fd:da:7a:53:b0:de:65:c9:b6:ad:
1d:20:15:50:eb:a5:2c:b8:13:d8:ad:9b:12:73:ff:
c2:06:ad:a4:d6:0d:5f:25:31:50:a5:40:9c:be:22:
e7:26:a9:6b:7b:c8:32:96:6c:b4:30:4d:09:83:e0:
ab:6e:d5:04:5f:2b:d0:bc:ee:8c:54:e8:65:ba:23:
18:8b:13:c9:99:75:5c:eb:a3:48:4d:a6:be:b7:57:
8b:d4:3e:28:70:ca:ad:bc:fe:f9:2c:c0:1c:e1:ca:
19:64:00:5d:db:cf:e1:6a:d0:6d:33:81:9d:eb:80:
40:a2:5d:30:37:43:b8:2e:3f:6f:2f:33:c1:3a:ef:
c3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A8:50:02:B5:C7:A2:E2:24:27:0D:62:60:54:C2:A1:4A:0E:AF:F5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n6hQArXHouIkJw1iYFTCoUoOr_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:02:0f:2f:03:b2:8c:e0:ea:87:7f:07:c4:3a:2f:e4:75:e1:
91:9c:83:5c:2c:c3:99:cf:54:af:a8:2e:79:fb:26:87:d8:c2:
5d:86:c8:42:ee:e3:9d:99:64:b4:3e:5a:5b:91:3d:72:43:70:
ef:94:c0:7d:d6:8b:ab:fb:55:ad:0b:97:28:dc:ea:34:2f:97:
4c:30:9a:2d:6d:ee:9e:2c:0c:c9:28:36:5e:a9:dd:2c:45:95:
ab:4c:c2:a7:c9:9c:20:68:c0:78:42:04:b0:0d:d5:5e:b7:14:
e5:d9:57:48:9e:29:d1:6a:8e:41:9f:f8:41:77:48:7d:54:b0:
20:98:2a:07:f4:0a:9c:9e:03:a2:92:fd:a0:72:61:2a:5a:56:
f4:9a:7e:81:a3:05:ce:a9:95:56:b2:71:e3:1a:db:d4:ee:95:
d4:e2:bb:58:e7:a2:2d:c9:b6:2e:8b:31:d5:8a:a4:4c:13:06:
85:7b:9e:56:48:4b:75:5c:b2:dd:a0:fc:0d:23:6a:29:04:3c:
57:0a:f2:6c:d0:63:17:2d:3a:a3:0c:21:2a:62:6f:70:cc:34:
f8:e8:70:7e:73:ff:94:ce:c4:a6:e2:f4:86:35:08:1e:e0:00:
a2:22:dd:7f:93:85:ba:24:90:91:5b:d6:64:d6:db:fc:5e:66:
ed:4a:b0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:23:16 2025 by rpki-client