Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P6IQxBBm9o3jc3FQCC6o2KI4r_s.roa
File: P6IQxBBm9o3jc3FQCC6o2KI4r_s.roa (raw, json)
Hash identifier: xCbiCnWTFrWlrG+eprxWUcxLtyCwPe2t7bxgbRMFBzA=
Subject key identifier: 3F:A2:10:C4:10:66:F6:8D:E3:73:71:50:08:2E:A8:D8:A2:38:AF:FB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D8883FCDB421E3DBAC9B84BB5A9DE2CD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P6IQxBBm9o3jc3FQCC6o2KI4r_s.roa
Signing time: Mon 13 Mar 2023 01:14:13 +0000
ROA not before: Mon 13 Mar 2023 01:14:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d8:88:3f:cd:b4:21:e3:db:ac:9b:84:bb:5a:9d:e2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 13 01:14:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fa210c41066f68de3737150082ea8d8a238affb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:72:30:fe:44:e4:60:26:3d:44:c9:67:17:2f:
c8:f9:32:d3:3c:94:10:2f:2f:b6:73:df:20:bf:f0:
fb:c0:e4:94:00:ba:2c:40:26:10:a7:de:5c:de:26:
a6:6f:f9:7a:2d:c3:17:40:86:e3:5a:d3:fe:ed:52:
ea:9a:d8:88:32:17:62:31:97:aa:96:b2:b3:77:fc:
65:e3:c0:56:4c:b1:3e:6b:30:5f:31:dc:d8:ad:48:
16:f7:05:3d:40:16:37:f6:9a:11:43:74:6e:92:13:
ad:60:af:a9:9b:62:28:d8:8b:6f:c9:cb:08:3c:52:
bf:b0:cd:ae:24:de:a6:cb:6a:e5:0f:1c:f3:4e:38:
14:f5:25:c1:91:a3:64:62:17:90:97:3d:89:cd:03:
51:7b:b2:84:e7:c5:e5:41:ea:29:2a:26:4e:bd:1b:
5c:92:21:ed:39:70:9c:81:45:c2:3a:d4:fd:78:c6:
79:81:31:35:ad:1d:99:41:1a:1b:2c:a5:fe:47:f5:
9b:18:11:b5:81:ee:f8:00:96:9a:4e:6a:f3:bd:0a:
23:f5:16:04:c2:b4:5b:3d:ac:3c:11:53:87:7b:0b:
72:de:56:98:b2:c9:42:5c:1f:cd:ae:8b:a7:c8:6f:
4d:86:ba:86:c7:4b:2f:be:a2:ec:01:5d:4b:fd:fe:
bc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A2:10:C4:10:66:F6:8D:E3:73:71:50:08:2E:A8:D8:A2:38:AF:FB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P6IQxBBm9o3jc3FQCC6o2KI4r_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:fb:15:f3:9b:19:d6:38:5f:41:47:63:c3:e9:aa:e9:58:1e:
75:ee:b0:a3:c8:e5:0b:01:79:2d:a6:21:40:7d:19:9a:bb:21:
3c:a5:42:ef:ee:36:6e:a5:a7:e1:a1:99:43:45:90:4c:52:31:
c4:21:50:55:30:75:c9:dc:41:d5:b6:cb:54:e7:ca:a6:07:fb:
86:92:ab:a3:71:dc:54:ab:e2:12:c8:c7:89:f2:09:f4:2f:f9:
68:34:d3:25:2b:81:1c:ed:63:f0:92:ce:cf:83:22:3b:23:ff:
98:8d:08:1e:11:9f:dc:a7:ba:ed:14:44:be:0e:0e:58:4d:01:
94:f8:47:1a:25:c1:44:35:77:34:b5:02:cf:98:78:e0:3f:bf:
1a:55:11:fb:6b:12:90:c5:49:a1:15:cd:9e:3d:27:93:c7:5e:
8b:3d:0f:8a:82:53:9d:8d:e1:7c:b6:25:b8:5f:4e:68:c8:3f:
c9:a8:c5:f6:97:3c:1e:a5:36:dc:34:47:65:01:79:69:0f:e4:
4c:ea:7d:88:7c:4b:63:42:58:d6:54:92:f3:b2:df:9f:ea:4e:
d6:8e:c0:3c:43:7e:01:7f:d2:e7:18:60:11:d1:64:79:3a:cf:
e4:0d:ed:bb:ab:cb:f7:cd:50:18:0e:8b:95:52:e1:2b:f9:10:
f0:84:98:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:11:09 2025 by rpki-client