Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v6CUQz9J_tJg5ajG7YFFKXWqD2s.roa
File: v6CUQz9J_tJg5ajG7YFFKXWqD2s.roa (raw, json)
Hash identifier: eOLOBIcbgCFwiBablL+O1htZSCvnNWC0bt84BwKSTQ4=
Subject key identifier: BF:A0:94:43:3F:49:FE:D2:60:E5:A8:C6:ED:81:45:29:75:AA:0F:6B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01888EE4FF501779569CB47C59DFB966DF47
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v6CUQz9J_tJg5ajG7YFFKXWqD2s.roa
Signing time: Tue 06 Jun 2023 04:09:12 +0000
ROA not before: Tue 06 Jun 2023 04:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8e:e4:ff:50:17:79:56:9c:b4:7c:59:df:b9:66:df:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 6 04:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfa094433f49fed260e5a8c6ed81452975aa0f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1f:48:2f:49:90:99:14:df:51:a9:d5:1f:f3:
c3:ca:e0:f3:82:ba:c8:37:e0:c6:d6:bd:77:27:24:
8d:a6:19:9b:cc:23:2a:54:11:e9:ca:99:21:12:26:
e2:8a:37:ca:eb:02:bd:5f:73:61:cf:84:60:c4:17:
b6:32:e2:7d:06:a5:00:08:ac:d2:3c:3c:de:8c:ce:
57:d6:83:fc:e1:1d:a0:8f:50:16:46:bb:88:03:a2:
e3:4d:01:2c:17:65:33:97:ee:29:30:e1:7b:6c:95:
df:a6:ef:ee:b3:b3:56:7e:d9:b0:e8:3d:0a:d3:24:
10:a1:81:e6:42:bf:3d:9e:41:7c:8e:34:56:4c:de:
95:39:87:2c:84:37:6e:c5:31:5c:3b:09:ed:63:7f:
7f:d0:9c:dd:59:89:cb:14:32:80:bd:34:f3:c6:47:
43:76:9c:79:5d:81:1d:e9:0b:58:d4:f6:05:53:43:
90:85:0a:56:3d:cd:84:f7:2e:9a:29:98:e6:65:1b:
fc:17:d0:c5:51:e9:ed:de:7a:9f:a2:35:27:13:86:
4a:5f:18:1b:6e:0a:07:b6:7b:59:69:26:d3:39:c8:
e4:84:cf:88:93:97:41:25:ed:6e:76:11:eb:24:42:
0f:61:5d:fa:ad:48:fc:0b:70:b7:c5:b0:4d:43:3a:
96:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A0:94:43:3F:49:FE:D2:60:E5:A8:C6:ED:81:45:29:75:AA:0F:6B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v6CUQz9J_tJg5ajG7YFFKXWqD2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:40:00:16:8b:04:33:14:50:78:38:f7:63:54:bd:bd:18:14:
7b:bd:92:5d:fb:36:d6:a9:bc:44:d0:e6:75:fe:87:13:ab:2d:
72:0f:80:c1:10:4f:33:59:3f:13:29:8d:32:33:5c:2d:c0:d9:
25:79:a9:1a:76:33:c2:99:e7:6e:10:06:06:b4:c2:f3:98:51:
43:6c:cb:fa:0c:f4:eb:cd:31:3d:db:64:d5:a8:bd:68:64:65:
b4:5a:23:68:de:86:7c:ab:04:42:b7:b1:eb:13:d2:10:af:71:
44:3a:7b:c7:d0:aa:1d:9c:a4:4c:ca:32:f5:e4:c8:2d:06:35:
63:26:b4:bb:b9:84:5d:83:ab:51:c0:53:c7:63:50:21:e8:ec:
f9:c7:d6:9d:7e:a4:6d:73:54:49:e0:4e:44:19:97:0a:1f:9b:
e2:03:e9:4e:1c:b1:17:06:30:c2:5c:cd:bf:3f:8b:b6:2b:61:
de:e7:bb:9e:d7:97:c4:79:d5:f6:62:9e:5f:19:d7:30:e8:92:
48:b8:e2:b5:7e:0c:21:8e:4b:88:36:a0:2c:ff:cf:b6:03:27:
38:79:05:72:d7:f2:d1:65:02:d6:25:10:0a:79:a3:17:3c:da:
b9:8a:bd:fe:68:9b:b4:f8:2e:75:2f:10:73:b9:04:8a:cd:50:
64:39:18:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:57:22 2025 by rpki-client