Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a6TC6P69CW9EfkfZDs7kMvMbF-s.roa
File: a6TC6P69CW9EfkfZDs7kMvMbF-s.roa (raw, json)
Hash identifier: EoGmdjrb8CEno7dfQ5AWfMfx7yCOFDuY/vluDERlQyQ=
Subject key identifier: 6B:A4:C2:E8:FE:BD:09:6F:44:7E:47:D9:0E:CE:E4:32:F3:1B:17:EB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 83F6DF80
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a6TC6P69CW9EfkfZDs7kMvMbF-s.roa
Signing time: Sat 14 May 2022 13:10:40 +0000
ROA not before: Sat 14 May 2022 13:10:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2213994368 (0x83f6df80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 14 13:10:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ba4c2e8febd096f447e47d90ecee432f31b17eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:90:e4:78:1d:ad:ac:92:a2:38:38:17:9d:
e5:d6:0a:81:e4:82:84:24:a0:32:83:a3:7b:1a:43:
07:7e:25:61:54:d7:6c:81:72:21:2d:bb:bd:d1:12:
4f:54:48:83:ff:a5:95:06:95:25:e5:a8:f5:81:c1:
ec:22:77:fa:27:e5:14:da:fa:61:d1:e5:66:02:09:
52:67:05:18:c7:76:57:2d:48:a8:8f:f6:66:2f:e3:
cb:0b:c7:ed:17:f8:d2:06:19:68:21:7d:36:9f:db:
2e:38:6e:88:9e:0e:44:ca:0a:1e:b9:d0:a4:7e:80:
97:f2:d3:ef:00:76:0c:36:09:07:46:cc:c2:1c:a5:
03:fe:8d:14:b2:a1:54:ce:54:e4:0d:e9:83:53:3a:
d1:d0:d2:5d:8c:e1:20:0a:19:0e:95:fa:71:02:1f:
85:2e:f1:9e:7d:02:63:5a:4c:af:76:57:6b:c9:83:
47:37:f4:ac:9e:ac:20:0b:bc:ae:11:10:d6:7b:56:
e2:0e:21:7f:72:47:56:1a:c6:ea:7b:63:61:98:62:
67:43:ea:41:f5:27:94:14:35:64:7b:4b:9f:5f:d0:
b2:e7:44:d1:c1:54:72:fb:58:2d:d0:92:90:4f:fb:
2c:b9:1b:4d:5a:50:d2:1b:2d:7b:19:98:c6:b1:7b:
c1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A4:C2:E8:FE:BD:09:6F:44:7E:47:D9:0E:CE:E4:32:F3:1B:17:EB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a6TC6P69CW9EfkfZDs7kMvMbF-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:d8:fc:c9:2b:ae:a9:8a:86:22:7b:65:34:2e:5f:26:fe:40:
b4:1c:04:28:92:fd:f8:ac:fe:57:07:62:65:5a:65:14:68:ba:
64:13:c0:42:d7:19:ed:0b:73:37:b1:98:a4:99:e4:b7:ca:df:
67:90:60:7d:f4:50:9f:af:98:a8:59:89:aa:e4:6e:b2:5d:40:
2b:24:ee:be:63:4f:de:92:33:97:02:2e:7a:f4:9a:5a:cd:66:
2a:bb:7f:b6:de:6c:91:e8:e5:f9:33:05:4e:32:23:ce:97:3a:
a7:09:f3:9a:7b:19:85:ca:9f:08:41:eb:a3:c3:fa:56:df:48:
27:32:20:45:c7:98:03:a7:e1:92:ec:b8:23:9e:d2:3a:c1:cd:
9d:50:aa:4e:df:45:47:fc:db:ca:a6:27:2d:e2:ee:f4:20:ab:
fa:f3:33:3b:a2:ce:aa:07:a9:85:6b:7e:1f:f8:04:5d:79:95:
72:cb:00:c3:65:95:96:79:f5:1c:7d:21:0c:67:f9:40:5f:1a:
8e:65:dc:bd:38:e3:d1:e9:8e:b4:b3:0a:63:a1:d4:dd:54:e2:
fd:ab:16:10:b0:92:78:ec:30:83:b6:da:a5:db:d1:2a:62:e4:
b3:a7:e1:32:90:de:78:c4:2c:22:05:f1:33:c4:e2:59:78:c7:
85:c8:5a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:28 2025 by rpki-client