Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N6ye03PETsxdl9d4bxrp6UJJL0E.roa
File: N6ye03PETsxdl9d4bxrp6UJJL0E.roa (raw, json)
Hash identifier: +v5r/j8QT1+WvaoG/i5xzWlBsdpI5J9WSYTkzS04+ew=
Subject key identifier: 37:AC:9E:D3:73:C4:4E:CC:5D:97:D7:78:6F:1A:E9:E9:42:49:2F:41
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 693C8085
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N6ye03PETsxdl9d4bxrp6UJJL0E.roa
Signing time: Wed 09 Feb 2022 21:09:39 +0000
ROA not before: Wed 09 Feb 2022 21:09:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
2001:67c:64:ffff:0:17e:d9a6:5e4a/128 maxlen: 128
2001:67c:64:ffff:0:17e:ddba:7b5e/128 maxlen: 128
2001:67c:64:ffff:0:17e:db26:e5c4/128 maxlen: 128
2001:67c:64:ffff:0:17e:dab9:26f6/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:da82:41aa/128 maxlen: 128
2001:67c:64:ffff:0:17e:dd83:3b9e/128 maxlen: 128
2001:67c:64:ffff:0:17e:dcde:5809/128 maxlen: 128
2001:67c:64:ffff:0:17e:d938:ba2e/128 maxlen: 128
2001:67c:64:ffff:0:17e:d85c:d348/128 maxlen: 128
2001:67c:64:ffff:0:17e:daf0:4034/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc02:dc22/128 maxlen: 128
2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7ee:e040/128 maxlen: 128
2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
2001:67c:64:ffff:0:17e:d901:fecb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7b8:3101/128 maxlen: 128
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64:ffff:0:17e:d826:2565/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc39:b603/128 maxlen: 128
2001:67c:64:ffff:0:17e:db5e:7e8/128 maxlen: 128
2001:67c:64:ffff:0:17e:d713:9aeb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
2001:67c:64:ffff:0:17e:d96f:7a13/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1765572741 (0x693c8085)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 9 21:09:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37ac9ed373c44ecc5d97d7786f1ae9e942492f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8f:6b:0a:b2:7e:da:a5:10:4a:74:80:ba:ad:
cb:e4:8e:35:e0:c0:c7:91:1f:4d:c5:fb:9e:78:fd:
10:cd:99:0c:72:29:67:6d:f9:ed:e4:0e:8a:72:2b:
00:66:2b:e6:2f:e8:5f:16:cf:1e:9e:8a:1c:6a:4c:
18:ac:db:96:9f:83:c4:8e:f0:af:e5:d9:99:46:65:
90:ab:5f:32:72:05:8a:4a:1a:c7:7c:1f:72:88:f6:
3d:34:67:49:d9:43:02:18:d1:d3:34:17:57:52:63:
06:31:24:ba:82:bf:34:73:ee:38:7a:4e:72:03:df:
d2:c6:98:80:56:b8:cb:2c:b5:b5:22:f2:a4:6a:67:
83:a4:98:cf:4c:0a:dd:1f:50:06:72:5b:b8:c0:df:
06:98:61:bd:f9:81:73:fd:ff:00:da:2c:9a:ae:03:
7a:89:6b:d3:3d:f0:c9:f5:60:40:c4:54:ac:f5:96:
98:2b:b5:f7:81:b7:0b:1a:7c:d2:c1:c5:b6:90:9e:
1f:31:49:73:43:39:7b:1c:54:64:98:f6:2c:2c:79:
55:e2:0b:82:1a:25:83:f1:8d:5d:51:96:30:f8:73:
2b:53:39:9f:01:15:bd:01:1a:4f:6b:4b:d1:cc:a4:
89:68:cc:d8:45:60:08:e2:7a:f7:a9:00:b8:1d:79:
85:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AC:9E:D3:73:C4:4E:CC:5D:97:D7:78:6F:1A:E9:E9:42:49:2F:41
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N6ye03PETsxdl9d4bxrp6UJJL0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:b0:a0:66:5e:32:e2:b4:58:46:80:ad:5e:fb:a0:9f:af:e9:
75:8a:ea:a3:98:5a:06:95:91:b4:79:19:30:ee:7f:01:dd:73:
f7:9a:c9:1c:a5:04:b8:eb:fd:d4:bd:fb:13:73:e1:ac:9a:99:
9d:b3:b3:66:c8:62:d1:43:5d:d0:da:95:4b:47:c5:e5:75:55:
a7:e4:89:c9:15:e8:82:fc:f0:d6:11:65:7f:18:b6:ed:ba:cc:
e4:00:d5:30:d9:61:54:bd:ec:60:51:28:43:9d:e1:ed:61:45:
a0:be:76:e4:21:16:30:ac:ab:6d:88:77:93:e3:06:d5:43:12:
33:7f:ae:95:57:20:ec:36:df:1a:18:46:36:a4:0f:4c:49:91:
ed:72:19:93:fd:a6:54:3d:ad:00:aa:5e:72:f7:5f:a7:80:96:
dc:34:2f:ca:5a:30:66:f8:b9:02:f0:8e:87:bd:68:08:2c:55:
60:b9:08:4c:ed:ff:9c:f7:83:4e:f9:25:f0:c9:ec:ba:06:f6:
df:ea:69:88:31:91:96:40:a6:76:79:99:f8:38:54:5f:11:cd:
67:c2:38:7e:3b:0c:09:11:e1:29:bc:c9:e0:97:eb:36:a6:1c:
eb:0e:78:25:db:00:51:39:88:42:ec:6e:b2:3c:19:ec:42:c3:
9d:ca:64:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:19:19 2025 by rpki-client