Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1rv6uZrrbTeBJjMGDXWsaxntMGs.roa
File: 1rv6uZrrbTeBJjMGDXWsaxntMGs.roa (raw, json)
Hash identifier: i2V4dzvGd5vyAF0Gvk8ff49SbVEiAr5ty7k/d6AvRtc=
Subject key identifier: D6:BB:FA:B9:9A:EB:6D:37:81:26:33:06:0D:75:AC:6B:19:ED:30:6B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6D93F15D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1rv6uZrrbTeBJjMGDXWsaxntMGs.roa
Signing time: Fri 25 Feb 2022 10:09:27 +0000
ROA not before: Fri 25 Feb 2022 10:09:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1838412125 (0x6d93f15d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 25 10:09:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6bbfab99aeb6d37812633060d75ac6b19ed306b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b4:12:c4:d3:d9:93:2d:e4:ba:04:39:55:f9:
38:19:ab:86:b6:ab:be:4a:0c:c0:10:03:0f:d8:da:
e1:db:dc:5a:52:96:d8:f2:87:13:1d:76:fa:86:08:
15:64:93:77:1c:dd:ee:21:30:fb:4c:88:7e:81:23:
f5:12:25:07:16:21:08:c3:15:75:b6:52:4d:3f:9d:
df:cf:f3:fe:f0:5c:a1:e7:93:c3:3f:37:b0:ec:de:
fc:00:03:ca:8b:d1:20:19:9e:3d:06:4a:74:ff:54:
5b:97:b8:50:7a:4d:ea:82:86:79:a1:36:65:42:2b:
9d:2f:a9:be:f9:01:92:01:0d:cc:e5:8e:e8:f5:b7:
85:34:c1:d4:cd:0e:7f:54:b3:1b:21:e8:25:40:4e:
38:81:51:99:2e:e4:db:33:44:2f:20:de:a2:cd:4f:
6a:d0:75:01:be:6f:ef:17:8f:e5:43:58:7d:11:40:
88:82:54:61:ec:a7:8c:0c:2b:03:61:ae:42:b6:1f:
d7:1f:2a:aa:cd:d3:95:90:eb:02:c3:b5:c7:84:9b:
dd:48:ab:38:9f:57:48:51:cf:c1:90:a1:02:98:d9:
23:c3:1a:5e:1a:56:f4:a5:d1:d5:f2:bb:86:5d:82:
57:61:92:f0:a8:bf:78:f8:23:16:25:12:09:5c:d5:
f3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BB:FA:B9:9A:EB:6D:37:81:26:33:06:0D:75:AC:6B:19:ED:30:6B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1rv6uZrrbTeBJjMGDXWsaxntMGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:a1:4e:49:b5:50:ac:a9:8f:20:da:1a:10:d0:b8:77:28:ab:
4c:db:72:11:af:c0:5f:6d:31:cd:ce:b3:cc:a9:76:a1:29:56:
53:b4:11:02:e4:81:c6:7a:7e:ca:5b:c1:89:f1:dc:96:ed:71:
67:40:d6:b4:7d:7e:89:7c:c5:c9:63:b3:ba:d3:6e:27:52:fb:
34:44:c0:f3:f9:f8:fd:7d:9a:d9:be:1b:41:2d:2c:1c:2a:29:
e4:02:10:65:91:c8:aa:12:07:58:29:e3:2e:54:ca:d9:e3:31:
d2:b4:7c:80:25:17:48:92:5b:09:8e:26:41:3b:82:1b:d5:1f:
c2:21:b4:4b:80:a0:8c:ca:c3:7c:22:0e:e2:89:1f:3f:80:02:
51:a3:ec:01:08:0a:d4:cd:b7:17:fd:c1:b5:b9:66:c7:ef:5d:
5d:d7:e4:84:eb:2a:5c:dc:96:cf:81:28:3f:40:15:6f:70:ec:
21:ea:b9:d1:c6:f2:51:30:46:ac:70:25:7f:c5:7d:ea:e8:32:
e5:0e:15:20:45:00:c5:fd:5c:e7:dc:99:3d:28:b7:c2:3d:d7:
bf:19:14:12:97:31:17:4a:6f:aa:e2:16:29:fd:79:d2:3d:da:
7a:77:e5:e6:f7:c0:72:cb:72:43:a5:35:10:10:e2:9a:f7:41:
84:ab:32:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:54 2025 by rpki-client