Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6BrwX9ksXllO5gMCXP_af5OZFMQ.roa
File: 6BrwX9ksXllO5gMCXP_af5OZFMQ.roa (raw, json)
Hash identifier: K+AB1a2s8w4R2zOYHUOMsEOcK3CsWv+mm1UCzShjMDI=
Subject key identifier: E8:1A:F0:5F:D9:2C:5E:59:4E:E6:03:02:5C:FF:DA:7F:93:99:14:C4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B43C630A849F02F27AA62D6BAD9DA617
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6BrwX9ksXllO5gMCXP_af5OZFMQ.roa
Signing time: Mon 06 Mar 2023 00:05:01 +0000
ROA not before: Mon 06 Mar 2023 00:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:b43b:9d16/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b4:3c:63:0a:84:9f:02:f2:7a:a6:2d:6b:ad:9d:a6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 00:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e81af05fd92c5e594ee603025cffda7f939914c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:2b:ce:63:11:1d:63:7a:e5:6e:d4:7c:01:
ff:b1:5d:fb:23:0a:78:f4:f6:5f:cd:69:e7:7f:68:
c3:6f:3f:31:cc:ef:4f:13:c5:aa:53:52:df:53:cb:
0f:52:b6:a9:41:e9:5d:d4:72:57:ad:67:35:8b:0e:
4e:5b:5d:54:f1:4c:29:8b:68:b4:4e:ee:02:8e:72:
27:58:61:33:92:45:20:56:e7:0b:41:00:d2:63:3d:
eb:75:23:15:a3:56:80:06:d6:d6:10:01:92:b2:37:
73:92:68:0c:2a:ab:11:54:35:bc:08:cb:9d:97:f3:
30:26:21:ed:8e:d7:34:fa:30:3e:67:62:95:80:74:
f2:ea:05:81:bf:9a:6b:81:d4:9c:bd:a1:2f:c4:b6:
e1:0f:fd:60:f0:7a:6d:3c:8b:65:71:45:2f:38:a6:
4f:8d:79:c3:e2:d4:d3:03:ad:39:8d:af:53:0e:da:
b4:39:1c:06:9a:63:ca:9f:f3:9f:69:cc:79:31:e2:
af:88:91:fc:90:b9:ed:34:6e:43:de:30:bb:57:b2:
2a:13:7c:1e:a9:f0:98:d2:74:8e:f3:9f:28:42:42:
7b:06:e1:cc:f5:3f:f0:b5:32:42:63:b4:12:ac:48:
f1:69:a5:eb:fe:ec:c7:39:bf:f0:4c:d6:c4:f9:5a:
d8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1A:F0:5F:D9:2C:5E:59:4E:E6:03:02:5C:FF:DA:7F:93:99:14:C4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6BrwX9ksXllO5gMCXP_af5OZFMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:91:75:62:8d:49:01:26:c2:b5:01:28:bf:8f:c7:ce:b5:6c:
82:ff:f7:fa:f9:90:2a:0b:85:03:7a:9d:d3:e7:5f:35:38:c9:
52:d8:1d:cd:ad:8c:6b:c3:cb:1f:e0:39:e2:af:00:3e:9d:51:
a9:cc:92:83:5e:fc:8e:37:a1:ad:82:33:bb:6f:4b:57:0b:04:
cf:b1:5c:af:19:95:af:72:6a:7d:1f:c7:bb:69:90:2b:b0:56:
f0:e3:1b:e5:3a:f0:58:f5:85:bd:6c:03:d0:dc:15:bb:be:01:
a1:3b:d0:1f:c5:8e:9c:47:af:b2:e3:73:35:04:05:08:2f:37:
71:5b:b4:8a:f3:a5:38:5e:d4:b3:d1:e2:60:fa:f9:19:3f:60:
5d:b8:a2:d3:b3:06:15:17:9a:80:5b:f8:a6:9b:01:95:26:f0:
8c:ad:00:5b:50:c8:b4:70:09:b8:5e:1a:f0:7e:17:40:87:b0:
9b:cd:4e:b2:98:fc:8e:fc:0b:11:4c:72:0d:12:b4:48:57:bf:
b5:ef:2a:30:08:85:89:6a:69:ff:c1:c3:bb:f9:6e:d8:94:e8:
76:aa:cb:8a:c8:34:d2:94:bc:b4:3b:fe:85:4f:05:40:08:ee:
53:1b:1e:1a:ac:6f:e5:d8:44:fd:ca:22:f1:ab:63:b1:03:ae:
78:0f:cf:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:23:50 2025 by rpki-client