Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A6U4nN6N6GnJ-40NJAp113KGZTg.roa
File: A6U4nN6N6GnJ-40NJAp113KGZTg.roa (raw, json)
Hash identifier: wmSnU0krpimdmq4KWb2RRptUcawrPO2mWwtb4tVgsJU=
Subject key identifier: 03:A5:38:9C:DE:8D:E8:69:C9:FB:8D:0D:24:0A:75:D7:72:86:65:38
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B101B91E78F08A2C9EBC4A415CFDE421
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A6U4nN6N6GnJ-40NJAp113KGZTg.roa
Signing time: Tue 01 Aug 2023 12:10:27 +0000
ROA not before: Tue 01 Aug 2023 12:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b1:01:b9:1e:78:f0:8a:2c:9e:bc:4a:41:5c:fd:e4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 12:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03a5389cde8de869c9fb8d0d240a75d772866538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f7:da:37:57:6b:2d:f8:59:11:88:b1:7f:4d:
15:2c:cb:25:a4:ba:20:d4:d0:d9:04:fc:4a:97:ad:
9b:44:d0:d3:79:2e:bc:a5:5f:c0:43:7a:ae:b7:91:
4f:21:28:8b:71:90:eb:0e:3d:82:bc:4e:73:a6:a1:
fc:77:44:f2:47:e6:e0:3c:fc:6a:8e:ef:6e:eb:ee:
0b:77:25:3c:fa:da:50:c4:fc:c4:39:bf:a3:68:bf:
ca:40:f3:72:da:64:73:a5:fc:4a:77:f3:47:5c:dd:
cb:14:80:30:1c:4a:08:bf:17:1e:18:92:7e:b9:e2:
0e:0b:f1:ca:1f:7c:17:5d:f1:81:63:89:db:77:6b:
ad:5b:28:a3:10:fd:60:ac:5f:c7:35:76:fc:06:c3:
30:db:4b:11:06:5a:07:6d:00:5b:5b:51:3e:a4:d8:
5c:ee:66:91:10:3a:41:02:0f:5e:41:9e:4d:47:90:
18:8a:d4:fb:7b:89:1f:83:5e:7a:4c:0f:71:82:84:
3d:e9:1f:8e:e1:42:c7:f3:d8:47:61:6d:3a:c9:a9:
4d:ae:fd:ae:f4:41:1a:a5:4a:53:83:d1:a8:ae:d6:
db:52:92:e9:ad:2f:21:33:f1:89:ee:a0:f0:86:5d:
fe:b2:b0:e0:fd:b3:72:79:52:94:c6:5e:67:f7:ad:
a7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A5:38:9C:DE:8D:E8:69:C9:FB:8D:0D:24:0A:75:D7:72:86:65:38
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A6U4nN6N6GnJ-40NJAp113KGZTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:92:a2:43:4c:f5:33:b5:7f:83:41:69:a6:00:c1:b8:0a:cb:
b1:44:c0:dc:b1:b7:73:b1:59:d1:93:22:1d:70:c4:fe:5f:5e:
47:d6:78:d3:39:17:78:be:e8:20:53:42:1d:8c:ed:5e:e0:59:
81:17:88:cd:33:55:8a:a4:f6:8f:7d:ba:02:10:d4:9b:09:24:
71:75:c2:07:97:3a:49:92:72:62:91:b6:36:90:b7:6c:e9:53:
a3:a0:0b:68:c2:45:b0:ea:a2:84:b4:93:09:73:21:65:6f:20:
2c:51:1e:02:bb:f4:ac:83:be:b0:36:e7:b0:d6:74:13:70:58:
2e:c3:5c:d9:dd:bf:03:8c:9e:16:82:53:14:75:19:9b:75:f4:
f4:eb:21:4f:80:40:72:a9:25:d1:db:76:69:2c:87:8e:e3:d5:
66:49:c7:2e:7e:5f:0a:f1:54:89:20:a8:da:12:4e:ef:64:60:
48:21:66:54:1b:9e:36:83:29:f2:51:f5:5c:54:05:d4:a2:6c:
68:ab:7b:0a:f9:ca:bb:30:51:dd:23:ee:c2:c0:3d:81:83:f8:
ff:ed:29:57:51:f1:a6:cd:7e:6b:87:3f:14:6e:f4:30:e8:89:
ab:e3:12:b9:f8:c9:96:92:dc:1a:ce:34:61:03:58:b1:9e:89:
e7:cd:f7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:02:09 2025 by rpki-client