Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6BnVHzQuBcbVPolKFpYXZ4Oropw.roa
File: 6BnVHzQuBcbVPolKFpYXZ4Oropw.roa (raw, json)
Hash identifier: nePKskelgwNIC7N6TOBD8IQzY/JI2LLDc518f+4TfZ8=
Subject key identifier: E8:19:D5:1F:34:2E:05:C6:D5:3E:89:4A:16:96:17:67:83:AB:A2:9C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01849BD2D43A228271A3BF9A917076C10082
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6BnVHzQuBcbVPolKFpYXZ4Oropw.roa
Signing time: Mon 21 Nov 2022 20:13:16 +0000
ROA not before: Mon 21 Nov 2022 20:13:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9b:d2:d4:3a:22:82:71:a3:bf:9a:91:70:76:c1:00:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 21 20:13:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e819d51f342e05c6d53e894a1696176783aba29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:60:c9:be:45:3d:0d:0d:1a:57:59:60:b6:f1:
92:ce:13:e5:19:5f:04:b0:1e:a6:82:63:04:de:88:
1e:13:12:cd:e6:d8:89:5e:2b:61:1a:fb:3d:55:1c:
f7:30:a6:81:01:da:9d:ac:7e:9b:0f:bc:a2:1f:ed:
61:4f:46:e5:ed:d6:67:f8:47:b6:10:49:a3:34:21:
a3:74:c5:6d:15:6a:4f:b5:d2:02:2f:3b:bb:67:3a:
e2:22:38:56:1c:3b:f3:01:4d:9e:ef:79:6c:5a:25:
cf:c4:5c:d8:ed:ba:51:20:45:c7:22:69:40:d7:f4:
ac:fb:f9:96:7a:c5:b7:82:9b:7f:0d:a7:47:1d:19:
82:98:44:2b:2b:72:7c:99:cc:19:57:f3:44:92:00:
81:59:b5:65:d2:a7:77:a9:8c:c5:2a:f7:b8:2d:77:
ed:db:6c:98:0e:51:5c:b5:00:7c:a0:a1:2a:9a:28:
b9:bc:89:7c:6e:00:03:9a:eb:fa:6b:fa:2b:f9:63:
46:04:dc:69:5a:86:5e:50:b5:e9:c4:4f:2f:bc:18:
49:e9:9d:2e:3c:d2:89:79:b2:38:13:04:0b:62:13:
6b:1d:f0:03:66:b2:29:3b:42:92:9a:da:b0:bf:74:
18:ec:f9:91:a7:af:85:29:d5:48:ef:e5:87:e9:e2:
32:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:19:D5:1F:34:2E:05:C6:D5:3E:89:4A:16:96:17:67:83:AB:A2:9C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6BnVHzQuBcbVPolKFpYXZ4Oropw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:73:b8:4f:06:e5:52:47:ab:7f:05:4c:6d:b9:2a:d3:e4:1a:
68:80:07:a1:a6:35:e5:0c:51:1a:a9:64:3a:7b:04:4d:49:5a:
2b:8d:f9:23:88:ee:dc:bf:a4:80:60:a6:1b:3f:ec:43:ab:58:
ae:c6:d4:52:6e:fb:5f:99:d7:37:15:2a:c8:ae:68:01:a4:5e:
19:d9:44:88:a6:aa:ac:2c:c3:89:13:69:58:9d:fc:05:4b:c8:
e7:57:00:a0:4b:3b:29:3f:61:32:17:ef:f7:3a:58:ed:3b:86:
3e:f5:86:05:e0:46:fd:c9:ec:a3:11:3d:53:ad:96:74:0a:3f:
90:e0:f9:98:84:ab:2a:8a:1f:6e:8a:a0:c0:13:4e:78:9d:a5:
64:b4:f9:74:bb:83:b8:95:42:3c:07:66:1b:f2:71:97:f7:64:
b1:45:fb:cd:66:8b:42:eb:11:c2:a4:3f:9b:66:ea:db:19:d1:
61:e8:05:95:21:a9:c4:b0:d4:ef:a9:9f:1b:bd:24:bd:95:09:
cc:95:7f:47:d5:28:60:1b:3d:43:95:35:49:1e:0e:e5:14:a3:
02:67:43:ba:43:37:a5:e3:4a:01:d1:98:fd:ee:b9:60:9c:0e:
7a:d5:a3:84:27:ab:37:7f:bc:20:aa:f1:0b:81:89:ec:f8:2d:
11:e1:61:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:08:12 2025 by rpki-client