Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6EdUPCF7nfelk4NKxvYpxsuAJLA.roa
File: 6EdUPCF7nfelk4NKxvYpxsuAJLA.roa (raw, json)
Hash identifier: Yb3j7XidIfj2h14/0gXY6zTADM3vN+Np5uRDfCWL+G4=
Subject key identifier: E8:47:54:3C:21:7B:9D:F7:A5:93:83:4A:C6:F6:29:C6:CB:80:24:B0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018279821079C6C058C180D7226CE057BF03
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6EdUPCF7nfelk4NKxvYpxsuAJLA.roa
Signing time: Sun 07 Aug 2022 18:12:23 +0000
ROA not before: Sun 07 Aug 2022 18:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:79:82:10:79:c6:c0:58:c1:80:d7:22:6c:e0:57:bf:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 7 18:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e847543c217b9df7a593834ac6f629c6cb8024b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0c:9b:fa:e0:cd:92:aa:d2:08:3c:50:07:56:
21:31:10:1e:36:87:40:6b:23:31:c3:bb:83:17:98:
d5:70:c0:4a:a1:64:9b:91:6d:77:91:7f:0a:d2:67:
82:b3:b5:bd:f2:0d:21:2b:28:ad:60:41:6c:3d:89:
e8:48:be:95:b7:d7:26:7a:66:5a:90:d7:27:83:ed:
dc:68:aa:d9:ad:3c:a7:1a:ae:9d:c2:db:fa:4b:a4:
80:67:fc:60:85:55:bb:49:3b:d9:29:da:a6:e3:f7:
16:aa:1a:db:f3:57:ee:20:e3:ea:10:7e:2c:9c:2c:
4a:4c:97:0a:95:cc:03:19:4b:96:92:82:f3:11:3e:
04:9b:27:8d:27:5d:98:4f:65:c0:c4:8f:24:e1:92:
99:10:d6:e2:db:fb:b1:a1:d5:5a:9a:c8:3a:87:b8:
83:0c:85:94:dc:b3:74:a3:45:4f:9a:76:0a:98:86:
28:22:15:a6:29:36:e3:b9:bf:48:32:89:4e:95:62:
c1:c6:e2:8c:1e:49:7c:81:2a:59:ee:26:c3:0d:bc:
71:ca:1c:5a:bc:bd:c5:96:19:ae:d0:89:4d:7a:98:
87:c1:d8:68:f0:2b:0a:52:34:1c:ad:5c:c0:62:e0:
e8:70:c9:f7:df:ab:17:6c:a2:30:ea:0e:04:f9:36:
46:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:47:54:3C:21:7B:9D:F7:A5:93:83:4A:C6:F6:29:C6:CB:80:24:B0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6EdUPCF7nfelk4NKxvYpxsuAJLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:d1:31:5c:6f:12:c5:8a:ac:fe:53:b7:f0:c2:f3:71:02:75:
7c:d2:08:56:0e:2f:d0:3f:45:30:9a:92:82:e3:d9:d5:50:45:
70:7f:99:7e:a9:5c:ae:f1:f8:0f:eb:4c:0d:89:ff:ec:f1:03:
5b:cc:0c:fc:72:d4:56:a3:9c:59:71:08:8d:1a:be:43:03:97:
ce:b8:fd:70:53:38:b3:bb:1f:d3:12:b6:84:04:8b:10:0c:a6:
ca:f6:51:61:4a:a9:ce:a9:4c:56:39:12:93:da:9b:77:06:36:
65:af:58:90:02:64:9e:3b:22:86:59:6d:ee:44:b3:69:af:e4:
57:da:cf:28:2c:23:7b:66:46:a7:a6:1e:51:2e:45:2b:f3:16:
a4:24:14:04:b8:c8:10:34:5b:ab:51:48:3b:f8:51:f1:15:6a:
fe:47:c7:8b:d0:31:b8:bc:b5:09:ab:89:9b:cb:7d:1f:e4:c8:
2c:52:fd:54:f7:b5:41:03:37:a6:3a:ab:d1:13:d4:d0:a7:bb:
e1:b3:f9:12:50:87:59:9d:6e:6a:2b:32:32:cf:fc:43:b1:97:
84:50:06:e4:f9:9b:b7:3f:bb:2a:29:fc:4f:82:59:e1:5e:03:
f5:79:57:24:61:75:ea:cf:03:db:d1:59:fa:37:a7:eb:1a:29:
30:02:df:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:11:35 2025 by rpki-client