Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6pTH5qumGUj9fRhOboYbujabetY.roa
File: 6pTH5qumGUj9fRhOboYbujabetY.roa (raw, json)
Hash identifier: rxLcKOgCWxjkCkdv/7qCikKioVsSPzpiBvnO5eKe3v8=
Subject key identifier: EA:94:C7:E6:AB:A6:19:48:FD:7D:18:4E:6E:86:1B:BA:36:9B:7A:D6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188DEB840B3F57700B008057FD4536E5CEE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6pTH5qumGUj9fRhOboYbujabetY.roa
Signing time: Wed 21 Jun 2023 16:09:57 +0000
ROA not before: Wed 21 Jun 2023 16:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:de:b8:40:b3:f5:77:00:b0:08:05:7f:d4:53:6e:5c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 21 16:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea94c7e6aba61948fd7d184e6e861bba369b7ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:31:47:21:0e:2b:cd:f0:5c:7d:7d:4b:49:b1:
ed:fc:69:21:fb:41:5c:54:83:a0:89:61:d9:ab:59:
0a:a1:de:78:8c:a0:f1:64:b6:5c:3d:5f:64:1b:81:
c8:36:96:e0:22:87:0b:24:06:69:f5:fd:49:a1:96:
dd:ba:d9:c2:ed:15:54:01:fb:b3:81:3f:dd:31:89:
84:3b:10:b0:45:7d:aa:1c:99:1c:3d:cd:67:00:4f:
09:4e:f7:49:f5:e5:a2:19:c2:8b:1f:5d:9b:c9:82:
d0:bf:0a:e6:93:01:dd:a4:9f:73:4e:78:7b:24:27:
96:ac:61:2e:34:fe:c3:43:a7:09:64:69:b7:a2:30:
4f:c8:56:ee:7f:7d:6d:23:ed:d1:c1:bc:d6:41:a1:
3d:77:e5:c1:d6:32:f2:f2:a9:ff:f7:af:9a:f4:48:
da:53:62:db:09:ac:04:45:57:77:11:7b:2f:89:46:
2c:ff:c4:de:a9:6c:aa:52:3b:32:03:60:dc:51:fc:
9d:d0:4b:d9:f8:a8:e6:f6:d9:33:90:d8:7d:76:23:
f4:4c:bf:6c:96:97:84:f1:70:4b:2c:59:a7:99:34:
47:3c:1f:df:7e:f8:bb:d1:74:38:2a:cc:7d:41:e5:
ce:8f:3e:39:4d:c6:98:13:a4:11:e3:7c:6b:df:d5:
7d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:94:C7:E6:AB:A6:19:48:FD:7D:18:4E:6E:86:1B:BA:36:9B:7A:D6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6pTH5qumGUj9fRhOboYbujabetY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:d8:55:d8:4f:85:f6:bc:23:14:b0:b6:04:9c:16:6b:43:24:
35:23:ea:3b:36:48:6f:0b:48:79:77:c8:57:3d:65:c7:47:c6:
30:55:50:8e:00:f0:b4:48:62:de:d0:20:09:cd:7c:6d:e7:a0:
52:13:09:15:e5:c3:3b:71:fd:c3:86:a3:b8:59:75:5d:f3:be:
a4:54:40:3b:38:f5:2c:73:96:a2:90:bc:88:7b:77:e0:af:32:
e9:73:ac:b9:f1:6e:6d:6d:0b:b8:0f:0c:70:bd:91:5b:9d:13:
40:ea:cd:3e:8a:9b:1d:4e:7a:9d:4b:45:76:41:09:51:1e:64:
2a:8f:c0:52:5e:30:d1:6c:d6:8a:c4:d1:de:cd:59:81:3c:3e:
7e:40:ab:c9:5e:b9:f1:49:be:d5:e4:53:dd:58:75:fd:45:35:
78:a8:33:76:98:42:81:e5:79:fa:8e:6d:72:70:8d:3a:b5:4c:
67:69:42:71:87:0f:a4:d1:70:b2:91:59:6c:07:6d:24:9e:1b:
01:46:d6:7a:01:f0:13:d5:03:aa:a9:d7:2b:c2:a1:00:ef:0a:
5e:a5:62:83:d4:1e:e8:e1:00:0b:72:30:74:c0:1d:17:c7:bd:
0f:1c:a9:5e:db:e9:2a:db:ef:42:f7:76:1a:e2:09:81:51:cc:
f2:8a:8e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 06:22:13 2025 by rpki-client