Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/60CK2lQNPUyXvSslFrpR2crseV4.roa
File: 60CK2lQNPUyXvSslFrpR2crseV4.roa (raw, json)
Hash identifier: BjbamfYagqMVIJYKHRF3xLwiqF6Ap3EswNzKPFMYGkI=
Subject key identifier: EB:40:8A:DA:54:0D:3D:4C:97:BD:2B:25:16:BA:51:D9:CA:EC:79:5E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187DBF118D1E65F602940DC7D71CB9847C6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/60CK2lQNPUyXvSslFrpR2crseV4.roa
Signing time: Tue 02 May 2023 10:10:23 +0000
ROA not before: Tue 02 May 2023 10:10:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:db:f1:18:d1:e6:5f:60:29:40:dc:7d:71:cb:98:47:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 2 10:10:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb408ada540d3d4c97bd2b2516ba51d9caec795e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:23:28:74:e1:04:1f:ee:77:18:b0:75:b9:b5:
ad:8d:6b:48:e3:b0:84:66:b5:38:b8:8c:f7:a3:02:
10:73:a4:59:fd:21:ca:a2:c4:80:3b:b4:af:32:ea:
54:68:1c:09:9d:ad:b8:89:ff:f4:e0:3e:74:45:bf:
57:35:79:23:8b:5e:bc:39:42:80:89:72:16:ef:e6:
80:47:45:52:13:6c:1b:4c:64:54:9e:61:cc:3f:21:
a1:3b:13:19:1f:c2:a0:65:45:67:c4:5b:89:3b:f9:
24:60:ea:a1:bc:7c:10:63:9c:f1:72:fd:8b:34:49:
50:fe:2e:eb:9f:db:9d:03:f5:8e:6a:72:59:70:89:
dd:45:be:2f:8a:56:07:6e:74:12:43:66:dc:95:3d:
a9:25:36:ea:c8:55:18:0e:aa:6c:d3:b6:76:bf:c7:
2b:b4:75:f0:21:b7:7f:b9:8b:a9:c0:e6:13:eb:a2:
09:91:96:b5:9b:65:a9:df:e3:5f:62:01:19:09:76:
0c:e4:83:94:9d:d2:0f:89:90:9b:a2:97:13:76:b2:
80:a1:66:17:aa:d0:d5:61:f1:85:cc:7f:46:5a:ee:
da:b3:58:cd:d0:d5:a2:bf:4d:1a:a0:63:1b:fb:60:
34:c6:f0:68:40:ae:04:87:c1:bb:23:b9:7e:11:9d:
89:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:40:8A:DA:54:0D:3D:4C:97:BD:2B:25:16:BA:51:D9:CA:EC:79:5E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/60CK2lQNPUyXvSslFrpR2crseV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:37:fb:fd:32:31:3f:b6:21:47:4a:2b:c1:bf:2c:0f:dc:40:
f8:c8:3e:25:6b:76:ae:5c:75:1d:79:ba:cf:85:60:fd:7b:19:
02:e2:17:d4:3b:88:02:c7:99:e4:74:80:42:0f:3e:a6:a2:9c:
21:89:97:22:45:8b:b2:90:96:de:e9:28:fc:4a:04:f9:e6:ef:
c3:f6:15:57:5e:d2:f2:43:ee:ad:2a:f1:9a:19:51:aa:39:0d:
42:a8:60:31:5c:6a:5e:fc:52:fd:fc:f2:33:ed:66:d1:5c:90:
09:21:27:60:cf:b1:a8:ce:db:41:0e:7f:fa:7d:29:98:f4:70:
93:91:4a:8a:7a:bd:78:de:66:db:ea:c5:56:9f:1e:6e:51:e6:
30:ec:62:a9:62:a0:62:8f:f4:9b:a3:69:64:f9:05:4d:ff:4f:
61:5b:e4:b3:a4:92:6b:8e:cd:0f:07:cb:c1:52:94:48:69:97:
e8:df:47:fb:f5:d7:f6:f0:af:9f:ab:86:1c:b3:29:a1:21:00:
bd:a8:1e:2b:4b:bc:5f:9c:e7:44:bb:a0:36:f4:ca:5f:ae:a0:
cf:25:d1:39:0a:9c:67:f5:02:e6:c3:38:68:0c:40:f2:3c:ef:
d1:48:be:e9:49:25:c5:bc:3a:3e:6d:56:c3:27:a0:c8:22:28:
f9:58:ae:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:07:13 2025 by rpki-client