Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w6TgvEIz3jDK6JESddXTYMJnSuA.roa
File: w6TgvEIz3jDK6JESddXTYMJnSuA.roa (raw, json)
Hash identifier: Iu0qnvrNA+jYJ8/WyizfEz37Rg+M4fDHucJFA0D4qlU=
Subject key identifier: C3:A4:E0:BC:42:33:DE:30:CA:E8:91:12:75:D5:D3:60:C2:67:4A:E0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01880D4695E59F257FBABB2894FA0A31BF27
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w6TgvEIz3jDK6JESddXTYMJnSuA.roa
Signing time: Fri 12 May 2023 00:05:09 +0000
ROA not before: Fri 12 May 2023 00:05:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:188:d45:e445/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0d:46:95:e5:9f:25:7f:ba:bb:28:94:fa:0a:31:bf:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 12 00:05:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3a4e0bc4233de30cae8911275d5d360c2674ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:41:e3:ff:c4:eb:c8:d7:dc:59:30:49:aa:f1:
d1:42:ed:d5:1d:3e:53:41:e6:e1:ce:8f:1c:06:3f:
c9:e8:43:80:8a:a1:88:ab:a3:f9:91:4d:24:20:70:
a3:06:0a:10:cc:2b:92:87:b1:15:2f:ee:87:e0:64:
81:7a:15:e6:ac:ac:08:1e:07:1d:af:24:6c:2c:6c:
91:50:8e:22:6e:06:6e:fa:43:fe:59:d2:98:97:d9:
99:8d:09:ce:3b:47:a0:20:ae:e7:f8:77:01:f6:81:
41:4e:05:17:17:d6:b5:0a:5d:ce:c6:18:b1:0b:30:
b6:73:b1:ae:39:af:83:6d:94:61:8f:79:ef:46:43:
5b:89:ac:eb:d5:1d:57:a0:1d:61:d8:d1:ff:96:b8:
88:16:bc:28:fb:7a:00:e5:37:17:9a:45:24:12:04:
8e:9b:96:40:eb:b6:4c:94:b0:da:ab:c0:81:be:4e:
9a:0a:b6:21:5b:1c:31:ac:11:ed:10:ff:d6:66:3e:
d9:92:21:32:36:f9:c4:c0:e9:b6:52:b6:26:64:8a:
d6:24:3f:c1:db:b1:d4:24:10:52:5e:36:a4:61:6b:
40:2a:10:b2:1e:40:ed:98:4c:b0:31:10:5d:e3:ae:
9a:f7:a9:af:d5:68:de:1b:77:76:fa:c8:5d:9d:fc:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A4:E0:BC:42:33:DE:30:CA:E8:91:12:75:D5:D3:60:C2:67:4A:E0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w6TgvEIz3jDK6JESddXTYMJnSuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:fd:5b:50:7a:a3:d0:a9:b1:31:dd:ad:53:cc:98:d4:0b:ed:
d2:3a:23:bc:50:c5:98:08:e6:0c:ac:58:e1:c2:03:71:e8:11:
94:35:17:1e:34:cb:55:27:72:b5:85:40:5f:d6:fb:29:27:98:
1e:1d:bf:b7:70:50:c2:e9:30:93:d3:80:ca:5a:5f:01:4b:b0:
99:bd:05:c9:03:3b:b8:04:28:a1:1f:60:23:5e:c9:1e:7e:cc:
48:5e:88:60:0f:31:ad:92:3a:f2:84:fb:d3:42:3f:e9:9f:5e:
86:4b:1c:85:e4:dc:d5:c9:ca:00:7c:a7:e9:32:ce:3f:dc:e1:
ad:06:36:3e:61:c1:e4:1b:91:56:ae:6f:c8:d8:08:99:c2:ac:
99:9f:e7:c3:a3:c0:20:47:2a:3a:5c:4b:6e:3d:2a:be:1e:ba:
9c:6e:84:ce:51:fb:9b:ee:77:96:73:6a:31:08:2f:48:68:da:
a7:07:33:78:0b:68:32:fa:e1:c5:c4:18:8b:a7:4f:52:b1:53:
98:f0:f2:57:40:a1:ae:ac:07:d5:08:8f:a2:11:d0:37:49:93:
21:02:2d:8d:97:d4:19:e8:90:bf:86:76:2a:95:e8:f0:cc:f9:
98:a2:c6:a9:48:a7:df:fc:a6:03:89:e2:21:18:eb:9e:39:a9:
c6:b1:e7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:16:30 2025 by rpki-client