Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6CO9CZzIw94EmsbA10CQhALsZ5I.roa
File: 6CO9CZzIw94EmsbA10CQhALsZ5I.roa (raw, json)
Hash identifier: ksaLYCw0FQZkHc5J/g6bPQ6oxJU3xAIREokWmPGNzgk=
Subject key identifier: E8:23:BD:09:9C:C8:C3:DE:04:9A:C6:C0:D7:40:90:84:02:EC:67:92
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183550A210A8C0022E8709284C591C97556
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6CO9CZzIw94EmsbA10CQhALsZ5I.roa
Signing time: Mon 19 Sep 2022 09:17:50 +0000
ROA not before: Mon 19 Sep 2022 09:17:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:55:0a:21:0a:8c:00:22:e8:70:92:84:c5:91:c9:75:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 19 09:17:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e823bd099cc8c3de049ac6c0d740908402ec6792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:80:5a:d1:10:ee:89:50:78:dc:f0:b0:d2:
eb:c3:e1:0b:9c:f1:d8:fd:a9:8a:5f:d7:cc:12:3e:
07:db:e4:a7:bd:53:b9:84:7f:ba:63:c4:1e:9d:3c:
6f:44:3a:9b:1c:65:6c:13:97:4d:31:03:0b:0d:e4:
c4:36:0e:88:fc:b3:30:6e:9b:fc:52:60:89:19:ec:
f8:5b:23:38:17:4f:f2:5b:86:1f:f1:19:7f:d0:9b:
32:44:5d:55:6b:55:6a:8b:b8:be:9c:93:2d:22:19:
14:ea:b1:1a:d6:3a:4b:ed:18:bd:7b:ca:f1:79:e7:
26:a4:ac:c4:5e:4c:f3:e5:3b:ae:8d:88:d5:cd:61:
0b:93:32:f8:06:ad:1f:8f:52:c9:d1:be:76:b5:db:
23:27:f5:d3:43:1c:35:62:2b:1e:2f:6b:54:c2:93:
97:8b:15:8c:08:0b:55:e2:2b:2a:dc:3d:28:bd:47:
be:9d:a8:7c:a4:69:17:1c:53:72:6d:ac:a2:1d:82:
2f:27:8e:0c:d0:f2:55:0b:a8:ba:a0:0b:46:e9:c0:
34:d8:35:2a:78:6b:d9:b8:53:ba:fc:42:1b:05:11:
07:50:d4:d2:99:32:05:66:29:86:12:c5:fc:0f:e4:
55:fb:24:aa:c3:f3:a2:c2:84:6f:df:02:5b:de:82:
85:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:23:BD:09:9C:C8:C3:DE:04:9A:C6:C0:D7:40:90:84:02:EC:67:92
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6CO9CZzIw94EmsbA10CQhALsZ5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:8e:18:48:1b:91:65:bb:89:3b:ee:95:91:db:d3:90:ca:3b:
b5:6f:77:78:c3:11:f1:6f:e5:ec:99:12:74:73:70:99:a8:76:
a9:07:47:50:0e:06:b2:3a:1c:a7:8a:5a:e3:e6:79:af:d0:1a:
2d:16:a0:57:ba:19:04:6d:2c:90:8e:4b:ea:7e:86:ef:22:c2:
a2:1a:ba:9e:d8:7f:29:3c:e8:19:95:e5:62:07:46:6e:bf:c2:
c1:02:7f:4d:75:8c:ea:c9:81:80:2b:fe:ea:3e:fd:25:4b:6b:
60:36:84:4c:71:76:7c:32:b6:cb:8b:a2:1d:be:5b:48:4e:17:
46:82:44:4e:cd:be:7a:58:89:2e:e6:67:0f:34:cc:56:ad:f3:
65:40:26:db:e3:b6:e2:24:37:d1:95:f7:a8:6a:ad:31:b4:ee:
36:d9:79:84:f9:0e:0f:21:5f:02:6e:24:d6:72:bf:3b:05:64:
b8:20:6a:4e:44:0b:ea:76:49:5c:59:f1:8a:0a:f7:0d:d3:28:
03:79:a2:7e:a0:53:d5:a0:5c:2f:b8:89:e0:b5:52:fa:50:fe:
56:14:e8:f8:ca:c4:43:9d:6f:12:45:05:94:35:30:ae:bc:fb:
88:aa:7c:d9:4c:1c:16:97:ca:95:62:5b:c3:4a:fe:93:ff:88:
ec:f5:14:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:15:31 2025 by rpki-client