Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u6s_sJBQyjcizy-nb7qPZHa4W44.roa
File: u6s_sJBQyjcizy-nb7qPZHa4W44.roa (raw, json)
Hash identifier: VE2iTiXc1KoPOwxEYYGGmKSuGMfspo2ZzDxk/vEWUeg=
Subject key identifier: BB:AB:3F:B0:90:50:CA:37:22:CF:2F:A7:6F:BA:8F:64:76:B8:5B:8E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187DE16689FF5755743A514BF8483B21898
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u6s_sJBQyjcizy-nb7qPZHa4W44.roa
Signing time: Tue 02 May 2023 20:10:23 +0000
ROA not before: Tue 02 May 2023 20:10:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:de:16:68:9f:f5:75:57:43:a5:14:bf:84:83:b2:18:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 2 20:10:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbab3fb09050ca3722cf2fa76fba8f6476b85b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9b:f0:9e:9b:93:a2:43:03:6c:38:28:73:bf:
76:90:c1:7c:d6:c6:67:f6:b9:f6:24:f1:32:3a:5c:
44:f0:b1:0e:90:25:8b:a7:75:46:6a:dd:6f:f2:66:
51:58:b9:e7:96:c7:00:1e:18:e1:61:e0:af:21:49:
b9:b2:53:73:9e:4c:3d:40:07:56:19:16:24:c8:2e:
09:f6:b6:7f:21:68:5b:0f:7d:82:d6:37:6e:72:4e:
03:d5:60:ea:0b:fa:29:e1:ef:c6:e8:3a:b6:48:19:
eb:c9:95:58:98:a0:ab:6a:6e:d7:ab:f5:a4:e2:e7:
c3:31:d3:69:a0:3b:8b:95:91:cc:1f:0f:68:eb:63:
27:79:27:cd:56:46:f1:f3:53:b0:a0:4b:a0:3d:83:
77:b1:30:57:53:7f:86:8a:62:ef:87:81:96:76:de:
fe:62:30:9f:71:8c:4b:a3:22:a4:c1:bd:bf:91:6c:
2c:2b:bb:ae:cf:df:15:bd:f8:08:08:3b:12:9d:ef:
a4:da:a4:3d:ac:9d:0a:5f:08:4a:96:8e:e8:a3:56:
73:e7:a4:f7:c0:4e:74:7f:86:af:df:3c:22:c0:2f:
6b:6d:7f:0a:0f:d1:49:25:2c:00:41:4f:68:36:68:
c0:4e:a1:bf:35:41:48:0a:3a:41:34:1e:eb:70:c4:
a3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AB:3F:B0:90:50:CA:37:22:CF:2F:A7:6F:BA:8F:64:76:B8:5B:8E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u6s_sJBQyjcizy-nb7qPZHa4W44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:ab:ef:dd:4e:fa:6c:84:c4:df:de:66:33:40:95:c8:50:04:
05:46:44:fd:44:a3:86:e3:5d:e6:b1:5d:cd:ef:c7:ed:a2:a9:
48:af:f6:97:66:e9:ee:97:62:26:ea:4f:08:ec:2c:1b:50:1c:
b3:fb:fd:d6:12:54:a0:b6:28:d9:0e:5a:55:f2:dd:d8:e9:3c:
5b:7f:7c:6d:8e:4c:2c:5e:52:b5:da:5b:44:be:89:c1:d5:e6:
47:bb:d3:a9:77:e3:43:28:68:76:91:17:bb:bc:29:ba:1f:2a:
cd:aa:38:c9:24:ba:e2:d8:51:65:cb:2a:cf:dd:e1:5b:74:31:
31:6b:dd:12:82:9e:73:46:33:8f:65:fb:e1:65:b9:5c:ef:ff:
f8:8e:41:6d:81:d1:97:71:22:4f:59:4f:78:af:ab:9f:9e:be:
ce:47:85:04:3b:98:27:21:31:99:16:31:11:31:52:77:9b:13:
e7:7f:86:b4:eb:3a:f4:5a:80:7c:0e:b5:71:d0:22:f0:a7:67:
21:31:f9:52:bc:00:8f:2e:f1:8e:62:f0:17:2a:ef:ae:54:e4:
82:a0:b9:da:a8:32:2c:d3:da:60:44:cf:41:e5:8e:a6:56:f9:
26:70:af:8c:4b:cb:ed:b3:21:57:dd:d1:53:96:96:44:94:6d:
b3:aa:de:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:14:31 2025 by rpki-client