Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/60HRtCFC5Ai8MsXNXRh-TBTeRtM.roa
File: 60HRtCFC5Ai8MsXNXRh-TBTeRtM.roa (raw, json)
Hash identifier: NI4H+nuSoJ5CBIM9faKwGYZeKHK0mgxZMR3wAyBxB9c=
Subject key identifier: EB:41:D1:B4:21:42:E4:08:BC:32:C5:CD:5D:18:7E:4C:14:DE:46:D3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186717FFBE9AE6355F4B9ADD207D60E2FB1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/60HRtCFC5Ai8MsXNXRh-TBTeRtM.roa
Signing time: Tue 21 Feb 2023 01:04:18 +0000
ROA not before: Tue 21 Feb 2023 01:04:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:717f:e21d/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:71:7f:fb:e9:ae:63:55:f4:b9:ad:d2:07:d6:0e:2f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 01:04:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb41d1b42142e408bc32c5cd5d187e4c14de46d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:34:a7:48:d2:d7:ff:0f:3e:eb:7c:12:0d:0a:
7c:e0:a1:09:53:5f:18:83:7d:7f:39:7e:5b:f3:46:
43:9d:d7:4c:93:ab:57:47:d2:5e:e3:9b:ad:ca:20:
c8:0e:f1:54:22:38:8d:a3:12:1d:b7:45:0d:12:5e:
92:c2:a5:c1:89:2c:c2:c0:a6:b1:c2:8c:19:ec:ab:
01:8a:13:c6:5c:da:4f:e2:83:ef:95:3b:1f:bb:3a:
4f:8e:3f:86:04:34:9c:9d:90:60:fd:a0:b9:e2:f2:
5b:ad:4e:1d:23:12:c1:99:c1:85:52:ca:fc:f4:e4:
4c:53:2e:90:7c:7a:e6:3a:cd:12:4a:b5:b0:e8:ae:
6c:db:dd:e1:bd:13:58:1a:61:b3:8d:b7:a1:59:3c:
4c:d4:a3:3c:fa:85:8b:f2:cc:9a:91:f0:85:44:5c:
d9:da:a6:f9:ac:e9:9f:f6:f9:4d:68:54:51:36:5d:
0d:e7:e9:c0:bb:6d:7b:78:f2:19:0d:37:ef:c9:ca:
af:a3:e2:28:af:ab:60:e2:78:2d:dc:b0:9a:a6:f5:
e0:75:42:41:bc:c9:7d:d3:18:0c:7a:bf:ed:de:6d:
e4:14:d9:37:35:e0:60:4f:af:80:82:0d:52:84:0c:
8d:9f:e1:a1:db:73:30:7e:3a:0a:a9:03:c2:dd:98:
b3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:41:D1:B4:21:42:E4:08:BC:32:C5:CD:5D:18:7E:4C:14:DE:46:D3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/60HRtCFC5Ai8MsXNXRh-TBTeRtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:8f:af:ec:60:b9:98:9e:8b:2e:93:26:28:3d:5f:75:40:6f:
e8:1a:f0:3f:ad:91:10:80:8e:11:18:90:52:34:ec:9a:9e:ab:
29:47:e3:b4:2b:e3:47:47:a1:f2:c1:94:da:34:77:2c:ad:da:
d7:45:a0:90:69:ab:7f:85:21:4a:1e:12:7c:d9:58:8b:e6:0d:
52:59:0f:af:56:ad:f4:19:09:ae:69:59:c1:3e:c7:71:5f:26:
e6:8f:ad:83:bd:e5:b7:c5:7f:16:10:f1:b9:73:e9:b6:f1:5a:
78:93:57:96:0c:1a:d6:68:49:64:31:b7:7b:1b:08:ab:99:e7:
c4:a6:8e:94:3d:fe:b4:36:e0:6f:b5:05:a2:bf:7c:8a:b0:15:
e8:95:33:c7:0a:57:a5:31:9c:46:96:9d:28:89:41:6a:25:34:
64:90:d5:d7:b5:7e:19:38:36:bf:06:08:14:08:68:b6:61:6f:
e0:3c:c4:48:61:6f:b8:73:75:8a:06:d7:73:18:02:a9:13:75:
22:cb:6d:bd:79:87:91:17:21:2a:b3:89:0d:30:eb:d8:b2:90:
ca:d1:6d:28:b9:77:14:16:8c:74:50:8e:e7:1f:11:93:d9:14:
d5:4f:ed:42:7e:32:22:82:25:63:86:44:c1:39:64:60:ad:78:
c0:06:6c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:32:29 2025 by rpki-client