Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e_6v9SCvjYlKtU_oQqdjiUM153M.roa
File: e_6v9SCvjYlKtU_oQqdjiUM153M.roa (raw, json)
Hash identifier: cKmNFIKW5P7FN0GIyKGcubxbcd3KtVpV53ul2sOTx9w=
Subject key identifier: 7B:FE:AF:F5:20:AF:8D:89:4A:B5:4F:E8:42:A7:63:89:43:35:E7:73
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018695C9F3245F133C6D88D9208D1B6AE243
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e_6v9SCvjYlKtU_oQqdjiUM153M.roa
Signing time: Tue 28 Feb 2023 02:11:25 +0000
ROA not before: Tue 28 Feb 2023 02:11:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:95:c9:f3:24:5f:13:3c:6d:88:d9:20:8d:1b:6a:e2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 02:11:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bfeaff520af8d894ab54fe842a763894335e773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fd:0b:9f:c1:63:c5:af:1b:70:78:5c:2a:89:
6e:ee:57:f0:0b:93:d9:6a:6a:03:3b:22:4f:b5:9a:
62:51:b5:0d:5c:89:29:f0:ba:1d:1b:52:99:a2:a9:
87:9a:d9:06:13:32:d6:c3:df:e5:3b:8d:dd:54:04:
c0:f3:2f:9e:d5:27:98:b3:73:19:03:c2:61:9b:ef:
60:62:05:e0:54:89:3b:72:2f:8d:56:ca:42:88:1f:
c5:a9:73:6a:ee:f8:f0:c4:e4:69:de:dc:e3:b1:32:
f6:6b:2a:ed:74:e5:c4:22:04:0a:09:fb:8f:0f:32:
34:a8:fa:43:cc:fa:4c:16:25:ba:23:1f:74:ad:9f:
33:77:5d:4c:97:6d:dd:15:0b:24:3e:b9:86:d5:2d:
22:81:fb:fa:69:9d:69:dd:31:4b:32:b7:2d:6f:e3:
88:e0:bf:b1:ff:4a:93:4c:c0:78:da:50:e1:db:e1:
ff:57:9d:28:d0:29:d7:94:f2:02:a0:6b:e8:5e:03:
79:ba:53:85:0a:64:3b:c9:b0:90:4d:69:b1:6e:c4:
45:91:8f:f2:42:c9:9a:20:46:0a:27:3f:fe:ad:e6:
d8:ef:73:1c:06:c5:61:cc:38:c4:3b:5d:b3:df:f4:
b7:a5:ca:af:54:b0:51:d6:9d:73:f6:a3:fb:88:17:
d9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FE:AF:F5:20:AF:8D:89:4A:B5:4F:E8:42:A7:63:89:43:35:E7:73
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e_6v9SCvjYlKtU_oQqdjiUM153M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:99:1d:e5:95:3a:02:0b:45:a0:e6:e4:ae:03:bc:68:fa:67:
ba:f2:f3:3b:bf:6d:2a:4e:88:ec:64:9f:b5:a1:34:02:10:b7:
6a:b9:6b:ac:18:7d:c1:d4:f6:8f:9b:1b:ae:07:90:b5:37:6b:
ca:e4:12:55:41:cf:88:9a:25:4f:f3:a9:8d:8a:be:ee:a8:d4:
6f:bb:ae:48:49:f6:a4:43:6c:8f:58:58:13:44:ac:09:a2:82:
5d:d0:dd:36:74:f0:d2:f8:9b:0b:50:72:74:3f:b8:e3:ed:84:
50:5f:1c:dd:ec:58:1e:47:1d:50:d8:6b:c0:d7:53:fe:ab:fc:
ad:5b:6a:1b:42:1e:b5:35:24:e7:36:37:a3:ae:81:03:00:d8:
5f:97:6e:32:95:8f:ec:5c:e0:a3:e4:f6:20:13:9f:9c:7a:7c:
3e:3d:84:f9:40:c2:ea:59:19:bb:ca:c4:b4:89:22:4c:81:7a:
51:22:6b:b7:13:78:b2:7b:27:a4:d6:e3:73:9f:d4:f2:ab:8a:
7b:3b:e4:ea:5a:03:bf:7a:1e:8f:01:dc:05:7f:7e:a6:1e:5a:
7a:55:90:db:47:c6:e5:e2:f8:8d:0f:bf:c4:13:45:06:8e:7b:
ab:0d:7c:81:1b:48:c4:bf:c6:a7:9c:72:6c:0f:f0:d9:4a:b1:
48:8b:cb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 04:07:37 2025 by rpki-client