Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6AwjVs_F3j6beykAR3xd-ocwprM.roa
File: 6AwjVs_F3j6beykAR3xd-ocwprM.roa (raw, json)
Hash identifier: v3YGBGESbavxhJsH9toECXTVe7LVfeSurRuzmYGLtrI=
Subject key identifier: E8:0C:23:56:CF:C5:DE:3E:9B:7B:29:00:47:7C:5D:FA:87:30:A6:B3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186BBBEFAD69437891BAFC8DC265F08C66F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6AwjVs_F3j6beykAR3xd-ocwprM.roa
Signing time: Tue 07 Mar 2023 11:05:00 +0000
ROA not before: Tue 07 Mar 2023 11:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:bbbe:305b/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bb:be:fa:d6:94:37:89:1b:af:c8:dc:26:5f:08:c6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 7 11:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e80c2356cfc5de3e9b7b2900477c5dfa8730a6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:eb:73:c4:6e:25:fb:26:b3:cf:c3:26:a0:cd:
26:e6:78:d4:9d:ed:86:df:ee:f3:ff:9f:ce:96:e5:
e3:19:a2:eb:4b:1e:ce:6c:f2:fb:80:ff:7e:66:8c:
bf:e9:17:5e:b6:d7:db:97:47:66:cf:cd:d5:98:67:
47:45:ac:04:31:91:d1:bd:e3:30:9f:56:3f:e0:8c:
de:39:2f:99:d5:46:48:25:d1:5c:13:d7:45:16:e1:
89:57:85:3e:c7:2e:b2:fe:ad:2b:4b:3b:18:69:c7:
27:b4:8c:a2:e4:2c:b6:8f:ba:4d:1d:a8:e5:82:9b:
14:f0:67:31:51:76:0e:76:9e:aa:73:5d:3a:15:1d:
d5:35:f6:c7:c5:b8:57:13:4a:2f:6e:1c:53:f1:c1:
83:94:68:e2:ca:cd:c3:13:2d:b9:93:e6:b0:b4:cd:
c6:02:06:9b:7e:2a:28:c0:c8:65:8d:ae:0c:dd:6d:
2f:6c:b1:53:68:b8:b3:98:3b:dc:01:23:5e:3a:47:
e9:f5:e9:7f:b5:f7:a1:0f:d4:dc:76:86:37:f1:a6:
ae:f5:9e:4b:69:c9:5a:dd:48:57:1e:3c:55:a5:8f:
37:55:40:5e:61:61:fb:96:6e:2b:36:1c:69:eb:40:
94:23:b3:f3:2c:5f:fc:1a:cd:d7:5f:41:b8:30:b9:
08:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0C:23:56:CF:C5:DE:3E:9B:7B:29:00:47:7C:5D:FA:87:30:A6:B3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6AwjVs_F3j6beykAR3xd-ocwprM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:03:15:f4:e4:0e:5a:7f:41:a7:cb:1a:2d:e6:40:ad:37:b5:
77:2e:f2:3e:ff:39:72:f9:16:1e:4b:09:18:53:91:8c:bc:e0:
03:b2:93:5d:62:76:8b:2a:55:2c:fa:7f:f1:28:6e:dd:52:dc:
83:45:f3:85:a3:b5:9a:47:27:ad:0b:87:ac:1c:b0:14:88:37:
58:2c:10:37:74:be:e7:87:d8:9b:ff:af:71:fd:98:f1:1d:b4:
be:0f:eb:a1:91:7a:0e:9b:cc:8b:5f:be:5e:8d:30:74:4f:0f:
ba:fb:73:b7:2f:88:d2:6c:a0:58:2f:eb:50:91:0b:ff:f3:0a:
7c:4e:1b:d8:25:46:a4:bb:1e:d5:87:eb:ee:fc:f2:86:27:bc:
7e:58:90:78:f7:db:a9:5f:05:4e:b9:5e:09:3d:43:79:c2:ef:
29:4e:c8:61:d5:10:f8:0a:b4:95:12:98:9c:5f:37:d2:27:2f:
be:34:5e:19:fd:09:0b:aa:47:bf:c1:f2:df:7f:25:8f:28:97:
2b:69:64:5f:af:bb:a3:0a:57:47:f5:b0:e4:58:d4:8d:a1:dd:
b3:e5:8d:10:9a:c9:34:0e:7c:a9:12:e3:af:a3:2c:f2:b9:bf:
49:ff:2e:d1:fa:fc:4f:5b:b5:ba:d3:90:8e:b1:19:ef:07:b5:
3e:af:51:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:38:35 2025 by rpki-client