Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x6jPwjgsACcLPWnq00zGOsmGj_A.roa
File: x6jPwjgsACcLPWnq00zGOsmGj_A.roa (raw, json)
Hash identifier: 073zyRCy3TNcMxLI65d5uLSr0JXc5X501xBXdmsKYkU=
Subject key identifier: C7:A8:CF:C2:38:2C:00:27:0B:3D:69:EA:D3:4C:C6:3A:C9:86:8F:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01867565E58EB2C0D80A37F1279736F4BC42
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x6jPwjgsACcLPWnq00zGOsmGj_A.roa
Signing time: Tue 21 Feb 2023 19:14:17 +0000
ROA not before: Tue 21 Feb 2023 19:14:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:75:65:e5:8e:b2:c0:d8:0a:37:f1:27:97:36:f4:bc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 19:14:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7a8cfc2382c00270b3d69ead34cc63ac9868ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7a:3b:1e:54:99:25:33:dc:8a:0f:33:74:f6:
69:3b:74:43:21:77:9b:83:1e:32:03:2e:65:69:5d:
a5:56:e4:61:cb:af:19:f2:8a:a1:7a:22:3d:a0:f9:
c9:89:bd:7c:18:b3:35:1e:e8:64:3b:2e:b2:32:f7:
9b:b1:2e:12:af:5d:10:b7:3f:0f:a9:62:41:0c:3f:
38:1f:57:66:67:f5:10:07:80:59:e5:d5:a5:5b:56:
ec:88:17:e5:af:19:cf:bb:c4:29:f8:36:3f:92:52:
1f:a9:52:98:42:b1:6a:f7:06:1a:35:5d:9e:95:0a:
4f:bc:f7:d1:8a:04:3a:b6:f1:f5:ca:8c:fa:21:75:
67:9e:0d:68:24:b0:44:04:c3:8a:b8:1e:ee:79:d4:
62:e0:90:de:d4:dc:a1:80:81:78:90:6c:19:3e:43:
85:b2:b6:2d:0a:35:b0:bd:cc:be:f2:da:fd:b1:65:
79:c2:fc:77:17:15:69:46:fa:6c:49:6e:59:52:df:
f4:14:38:2c:27:e1:bb:41:cc:78:f0:aa:a2:25:a2:
4f:e3:5d:1a:ae:fe:cd:11:9c:70:3c:1b:f8:36:07:
4a:36:eb:c5:cf:81:08:f4:09:bd:7d:48:d2:47:7d:
9b:50:a5:a0:67:9c:c7:97:94:86:27:38:93:d6:d7:
9e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A8:CF:C2:38:2C:00:27:0B:3D:69:EA:D3:4C:C6:3A:C9:86:8F:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x6jPwjgsACcLPWnq00zGOsmGj_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:4f:d1:b4:2f:fb:10:13:69:09:54:b4:d0:3f:1f:e5:da:9f:
b5:0c:f8:c8:6b:04:52:bf:d7:89:8d:54:b2:2f:55:02:68:9c:
b2:88:79:4d:64:8f:60:df:17:92:b3:b3:5f:9d:49:69:b9:6e:
2a:4f:60:c1:10:34:ae:b2:80:a0:8a:7c:be:d9:2b:98:3d:06:
ec:ad:ab:0f:3c:5e:fe:2a:0d:cb:87:50:db:77:a1:59:f7:8d:
5e:47:ba:73:81:d4:18:0f:0a:f0:40:fd:ac:8e:32:1c:d7:7b:
76:19:7f:84:20:cd:af:50:0d:d4:e2:5a:0e:32:b1:bb:2b:13:
05:7a:6d:c5:30:fe:34:52:62:a8:3e:4e:57:fa:d7:94:4b:62:
f1:42:f3:3f:3b:f0:56:b9:cf:2e:1e:13:a5:e0:e2:03:e0:d9:
79:89:8e:8d:f0:a2:50:4f:b0:a7:4f:02:c1:cd:80:a0:33:d8:
fe:6f:cb:fa:64:e5:95:89:22:27:76:d8:fe:51:49:55:b7:fe:
d1:45:91:74:76:47:ab:84:59:3f:1a:70:ea:58:20:d6:94:ba:
b3:1b:c7:35:6c:9f:c5:3b:e2:ba:ac:0c:86:c0:b9:57:5f:f3:
13:06:37:c4:c6:e3:fc:58:db:67:c7:67:4a:35:37:56:61:64:
a9:2d:b4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:18:56 2025 by rpki-client