Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6YSaivnQSNagm5vwqoG7k-kh38I.roa
File: 6YSaivnQSNagm5vwqoG7k-kh38I.roa (raw, json)
Hash identifier: u0wNLqcoXZMQBWIEE/QK3VwKMyf5MZontFh+f+BNoXk=
Subject key identifier: E9:84:9A:8A:F9:D0:48:D6:A0:9B:9B:F0:AA:81:BB:93:E9:21:DF:C2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A15706FA30E12334537181B1F5D67A7E4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6YSaivnQSNagm5vwqoG7k-kh38I.roa
Signing time: Mon 21 Aug 2023 00:13:24 +0000
ROA not before: Mon 21 Aug 2023 00:13:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:15:70:6f:a3:0e:12:33:45:37:18:1b:1f:5d:67:a7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 21 00:13:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9849a8af9d048d6a09b9bf0aa81bb93e921dfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5c:ae:c8:76:18:7d:ca:3a:fd:57:6e:30:a8:
90:52:4d:4b:08:28:95:d9:83:49:e1:2a:f2:26:aa:
52:5a:81:c6:c6:2e:9b:8b:08:93:d9:bb:bf:6e:3d:
59:6c:88:a0:68:be:70:e5:aa:75:47:fc:71:ac:ba:
35:ff:36:6e:14:fe:b0:41:60:48:af:4e:9e:ea:cf:
8e:33:7b:00:22:41:6c:2d:2d:6a:94:f7:fd:e5:7c:
31:66:0b:df:c5:ab:d4:18:b0:50:7a:82:80:49:1c:
fc:29:2f:6c:8a:d1:c8:d6:f6:39:9e:7f:93:19:78:
8e:1c:2a:97:ad:42:08:49:58:a4:33:0a:5c:d5:7c:
e4:7d:d3:9e:60:66:36:89:31:9a:54:f9:28:94:a3:
14:42:93:14:75:37:a3:5c:8b:3d:e8:6d:31:15:81:
1f:33:a8:b2:46:33:4c:ac:2d:7e:ac:0f:a2:af:85:
c1:be:1a:a0:98:54:5a:8f:6d:0c:cb:24:69:1f:58:
ee:ee:41:1f:5d:71:29:2c:26:94:86:d1:dd:78:ca:
af:20:bc:e8:c6:7c:ce:43:70:67:5a:fc:bd:e7:0d:
85:27:c8:70:2a:9d:db:f5:8c:35:bc:64:50:e2:7a:
53:ce:75:33:1e:73:02:7f:17:85:67:54:7e:9f:8b:
0d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:84:9A:8A:F9:D0:48:D6:A0:9B:9B:F0:AA:81:BB:93:E9:21:DF:C2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6YSaivnQSNagm5vwqoG7k-kh38I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:38:65:61:a8:2e:98:dc:51:5b:c3:bf:77:f0:6d:6c:8a:d6:
e1:1b:46:c3:f6:6f:f9:11:54:95:77:ae:38:3a:8a:bc:d6:14:
5c:38:4b:fa:5e:a0:19:0b:cc:c0:50:29:85:bf:3b:43:d3:cf:
fa:9e:99:e4:cc:3b:1e:b2:40:70:c7:7f:fc:c2:45:76:48:d6:
2f:0a:8c:9a:4a:5d:99:dc:49:4c:26:b9:e6:f4:46:32:fc:cc:
25:64:ef:51:3c:7e:ea:45:c9:72:ca:aa:92:93:fb:28:ad:02:
cc:7a:68:57:4e:d4:23:e0:60:54:c8:b8:7e:09:8b:ff:7d:e7:
2b:58:6a:25:d6:49:70:1a:28:e9:84:8e:b2:58:15:d5:c5:0a:
42:34:3b:4c:10:10:c5:86:90:61:d7:e0:76:e9:dc:2c:f4:37:
9c:8b:ef:a8:4c:d6:b2:2e:88:c4:c4:60:e0:a0:e4:43:da:17:
93:46:a0:3c:eb:df:5f:ad:3f:e7:55:43:40:a6:be:37:68:9d:
32:99:bd:f8:54:f7:6f:19:b4:61:b9:cf:3e:2d:44:a5:6c:49:
25:d6:b2:30:66:46:bd:dd:91:22:5b:f0:25:35:00:a7:3e:67:
df:55:cf:b5:31:a9:de:95:da:88:a2:9f:17:da:f0:df:88:60:
1e:a7:5f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:48:50 2025 by rpki-client