Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HEx6-iQnBwAJ-UC_0AIikgxo3UI.roa
File: HEx6-iQnBwAJ-UC_0AIikgxo3UI.roa (raw, json)
Hash identifier: dan1dTj/6uUrL+iCoNqoHEZS217zjwitOgIbXut5HD8=
Subject key identifier: 1C:4C:7A:FA:24:27:07:00:09:F9:40:BF:D0:02:22:92:0C:68:DD:42
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187E7BD8EF19A8128C412C78D8BF66E9E66
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HEx6-iQnBwAJ-UC_0AIikgxo3UI.roa
Signing time: Thu 04 May 2023 17:09:32 +0000
ROA not before: Thu 04 May 2023 17:09:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e7:bd:8e:f1:9a:81:28:c4:12:c7:8d:8b:f6:6e:9e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 4 17:09:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c4c7afa2427070009f940bfd00222920c68dd42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b8:b5:0b:47:86:1e:f2:0b:34:dd:f7:9f:72:
0f:4a:da:52:c5:62:b3:64:b2:c6:73:00:e5:99:9b:
47:61:3a:b6:44:17:dc:df:99:e8:7b:3d:67:3c:73:
54:85:63:84:b5:cf:6c:d2:87:b7:b0:f6:5b:db:e9:
55:c3:d3:6e:81:e2:af:3f:99:43:56:b4:52:9b:c8:
9e:f8:75:ad:20:f9:ac:6a:b1:1e:8f:a3:a0:ea:0c:
c5:2e:44:a4:3c:9a:42:d6:e0:7c:6e:5c:59:89:63:
55:7e:87:c0:d3:ef:d9:2c:cf:ee:71:b9:35:07:d3:
d7:50:1d:0d:91:b5:f2:45:f1:d9:d0:66:cf:f5:04:
97:52:0d:d6:d4:a2:4f:2a:75:63:86:f0:14:e9:ef:
c6:bf:4e:b5:dc:c2:9d:87:5e:67:e9:d8:31:b8:c1:
20:0e:53:49:a8:97:bc:0e:f6:70:d5:bb:23:e0:ad:
11:e1:24:9d:16:80:f0:30:ed:ed:5c:3e:8f:63:7a:
88:2d:02:09:66:62:b0:b6:6f:98:05:27:ed:b8:b5:
01:36:fb:60:25:a6:31:fe:cd:b2:bd:cf:3e:04:46:
af:8a:ef:fa:b9:7b:7a:22:94:d7:96:a4:c7:88:ab:
b3:4a:5e:82:ce:88:5b:4f:e6:ef:b8:78:bc:b1:f4:
ab:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4C:7A:FA:24:27:07:00:09:F9:40:BF:D0:02:22:92:0C:68:DD:42
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HEx6-iQnBwAJ-UC_0AIikgxo3UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:f8:b5:6e:b5:1c:a3:01:32:af:1d:4d:b1:94:c4:02:cd:15:
67:70:a4:01:d3:e3:d7:35:39:fa:43:15:5c:98:38:ec:0b:46:
f4:ea:e2:1a:b3:19:92:ac:ae:a5:1e:05:29:b8:60:2a:70:5b:
9e:42:94:51:a6:9f:c4:70:44:e0:d7:12:52:0a:59:7a:a6:bb:
0c:a9:09:a1:ca:2c:d3:ee:12:01:eb:59:5e:89:21:62:b9:78:
1a:a5:11:88:13:7c:b1:98:68:0e:00:69:af:2a:6a:9f:6d:78:
6d:c0:f7:b6:0a:5c:8e:a1:b9:b4:3e:e9:53:5f:43:7f:a1:a8:
f8:5a:e7:90:0d:60:da:08:64:42:04:d9:f4:b7:05:f1:3d:5e:
1e:e5:48:c7:b7:ec:ba:9c:b2:fb:e2:35:91:f3:0c:30:02:c5:
1a:27:4c:f8:df:7d:c5:71:7f:2b:4e:5a:40:01:75:d5:ff:79:
e0:d8:07:41:3d:7c:9e:e6:25:d2:41:04:05:61:ac:e1:47:7a:
f2:36:5c:e4:95:92:61:a6:bf:70:d6:ca:0e:eb:3f:38:c9:8b:
4b:75:43:33:4d:67:35:43:7c:91:07:0f:3e:58:90:c6:79:cd:
08:4d:1e:14:e2:bd:f2:e7:db:33:e6:45:d1:b8:7c:b0:c8:1d:
b6:6d:28:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:59:09 2025 by rpki-client