Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n6tK08U5XikQdDi-xek3eRuOuJ0.roa
File: n6tK08U5XikQdDi-xek3eRuOuJ0.roa (raw, json)
Hash identifier: 5CZ/ieQgE6MKgHPhipGfCq+PZ35EW7vxxZeXCNKvpeo=
Subject key identifier: 9F:AB:4A:D3:C5:39:5E:29:10:74:38:BE:C5:E9:37:79:1B:8E:B8:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01872E5B51EC6150B2C74489C3A9149769E9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n6tK08U5XikQdDi-xek3eRuOuJ0.roa
Signing time: Wed 29 Mar 2023 17:12:29 +0000
ROA not before: Wed 29 Mar 2023 17:12:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2e:5b:51:ec:61:50:b2:c7:44:89:c3:a9:14:97:69:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 29 17:12:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fab4ad3c5395e29107438bec5e937791b8eb89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5c:d4:46:ea:9d:97:7e:d9:11:42:97:16:d0:
f7:97:66:69:18:d0:99:5f:b9:d0:41:a9:62:77:3b:
b2:54:72:63:f8:87:5c:0f:70:8d:c5:ca:81:e6:30:
c1:e6:5f:94:39:d1:05:cf:76:0a:fc:f4:a3:d1:88:
cf:1d:a8:fe:be:70:cb:08:07:42:d5:13:af:b6:1a:
8b:58:c7:a4:f9:ce:70:a0:30:8d:9c:5b:a4:64:5f:
3b:eb:9b:db:38:eb:35:18:c4:0b:32:17:52:fb:07:
e5:35:f9:e4:65:3e:22:39:e7:11:c6:76:1c:19:2a:
bd:07:ee:3f:50:bb:43:fe:55:1f:49:a6:1e:df:89:
1a:41:9f:d2:af:dd:24:2a:a6:00:45:78:42:d4:51:
1b:b0:1d:4d:a8:be:00:bd:dd:00:13:41:71:4f:88:
8e:6e:5c:1e:4a:92:34:76:df:8f:0e:db:30:e7:6c:
dd:16:03:3e:76:19:8a:c5:e4:87:93:74:6f:19:4b:
15:ec:d3:fe:31:ca:54:de:7d:3c:c4:45:d3:7f:cd:
d2:0b:20:64:35:e8:dc:3a:e7:ee:56:4d:3c:be:20:
c9:6f:4f:25:fc:bc:e1:22:4a:fd:9e:da:2a:cb:8d:
7b:6d:c2:89:98:a6:b6:9a:ed:d5:c8:fd:07:09:a7:
84:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AB:4A:D3:C5:39:5E:29:10:74:38:BE:C5:E9:37:79:1B:8E:B8:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n6tK08U5XikQdDi-xek3eRuOuJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:6b:6f:d4:1b:6a:10:20:04:6a:81:53:95:43:d0:2a:8d:82:
27:6e:79:10:2e:4c:a5:d4:a3:72:3e:00:11:6c:9c:a2:e8:78:
91:64:1f:5f:c2:ae:49:77:0a:19:d2:14:a1:71:69:fb:28:65:
77:8d:c5:49:9f:e5:27:85:a3:ca:1f:39:6c:0c:7d:8b:ee:64:
9b:5b:84:ec:a5:c7:f2:1f:8e:d8:33:57:e1:77:96:d0:61:82:
62:ac:05:e6:f0:7c:e5:ce:2c:1f:1e:c1:56:7f:cd:a1:95:80:
65:cb:be:3c:48:aa:52:30:8f:3c:3c:54:8b:36:fa:7e:39:47:
3c:8d:a7:98:88:26:aa:4b:5b:4a:bf:32:c2:6e:c4:5c:4f:d4:
cb:09:5e:cb:19:8a:11:28:bf:9f:06:dd:f7:30:3c:7a:d8:f2:
d1:9e:cd:5d:ad:c8:94:2e:36:0b:dd:65:6e:9c:67:63:6d:dc:
54:ed:18:e3:8a:1c:f3:5b:80:c9:6a:d1:d3:45:c4:74:03:75:
aa:d7:67:46:4d:7b:27:25:71:7c:26:db:30:1d:28:eb:08:43:
a5:fc:67:dd:3f:51:e5:a6:9c:34:c7:9e:68:8b:9a:b3:af:39:
bb:af:e4:1a:21:55:a7:c1:a3:39:a2:52:59:f2:9e:2d:00:9b:
f9:a9:48:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:11:12 2025 by rpki-client