Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6BgvONRyVbRPIrLIgiCQHPCu_Yc.roa
File: 6BgvONRyVbRPIrLIgiCQHPCu_Yc.roa (raw, json)
Hash identifier: 8Qm8C0FssoCE05X8qc5oZ1bDJOUBULHCVVvQ2NHwlO0=
Subject key identifier: E8:18:2F:38:D4:72:55:B4:4F:22:B2:C8:82:20:90:1C:F0:AE:FD:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018507B97822FC97111761E642D97A1671DD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6BgvONRyVbRPIrLIgiCQHPCu_Yc.roa
Signing time: Mon 12 Dec 2022 19:04:33 +0000
ROA not before: Mon 12 Dec 2022 19:04:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:7b9:1f7e/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:07:b9:78:22:fc:97:11:17:61:e6:42:d9:7a:16:71:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 12 19:04:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8182f38d47255b44f22b2c88220901cf0aefd87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:72:dc:a8:f8:d5:47:a8:c1:6a:1f:7d:7f:62:
46:b6:29:c1:03:eb:68:fe:cd:e7:6d:d1:d8:40:03:
7a:6f:56:51:06:e0:e8:79:0f:ed:e1:35:f8:7b:b5:
7c:be:a9:b8:e9:af:c0:b5:7b:31:6b:52:60:c7:1c:
41:44:8f:56:57:57:c4:20:d8:96:75:53:52:6c:54:
0b:8f:a7:dd:16:05:1c:81:3c:3e:6c:cb:b4:bf:73:
11:ea:0f:eb:bf:04:d6:a2:1b:e9:64:a6:05:b9:e2:
7f:52:f6:0c:e6:e6:6c:82:1d:0d:42:29:32:f3:44:
ad:14:9c:3b:c4:b1:66:90:34:cf:2c:cd:80:20:52:
4e:38:70:bc:14:b0:68:28:34:3f:c9:50:fc:bc:01:
b2:67:bf:cb:be:3f:e5:e9:e7:84:ae:1a:e1:d3:60:
08:1a:e8:b4:1f:54:13:0d:30:9b:bd:92:d2:c4:e8:
1c:f5:0c:65:0a:25:45:ac:fa:95:ad:ca:27:f4:08:
f5:85:e8:df:1d:44:ff:fb:db:e8:cd:fa:5d:4e:a6:
2a:36:e9:ff:43:30:87:f6:e5:e7:03:5c:6b:41:72:
2d:3d:0b:e3:ef:73:34:eb:f5:05:cb:51:88:81:24:
68:2f:af:29:fc:7d:0c:81:ed:83:18:12:0e:9a:a1:
ba:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:18:2F:38:D4:72:55:B4:4F:22:B2:C8:82:20:90:1C:F0:AE:FD:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6BgvONRyVbRPIrLIgiCQHPCu_Yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:4f:78:d5:22:bb:59:e6:74:df:af:8b:c2:e3:11:43:69:64:
89:aa:b1:aa:01:7e:a7:14:b2:a1:5a:bb:ba:80:3b:9e:23:2b:
b5:6d:3d:36:5c:63:3f:fe:79:8b:bc:61:33:d8:52:bb:ab:52:
aa:7e:9f:3a:1f:e4:4f:95:d1:65:80:d9:b1:94:be:8f:00:ca:
36:31:10:93:1e:6d:63:1b:d2:c3:ff:95:f6:27:fe:d8:80:6c:
37:59:49:c7:cb:1a:d7:5d:c5:17:a9:80:19:77:a8:db:6d:03:
05:1b:06:60:2e:e7:c2:03:0e:74:aa:b9:fb:d3:8b:b1:06:85:
34:f8:4e:ff:60:5e:54:02:db:7c:ae:5c:83:6a:f2:cd:30:40:
11:b7:5a:5e:df:28:92:d0:56:25:b7:a6:bc:e8:fe:c2:fd:e9:
31:80:14:b4:35:9c:79:f0:68:22:7e:e0:17:35:1b:c8:b7:e7:
e9:a2:8d:61:de:b9:4b:d4:69:6e:0d:da:17:76:04:7a:1b:76:
04:e8:c1:9f:a4:0b:7c:14:e8:72:f4:11:73:2b:ed:31:9f:3d:
04:6e:02:f0:80:28:20:64:67:27:6d:f2:95:6a:62:f6:05:90:
d5:6c:f8:29:e8:d7:a3:c1:61:cc:88:0c:30:c6:61:3c:46:08:
47:cb:fb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:17 2025 by rpki-client