Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6C7kBq7DsE7hsmH9UzmoCO0_s0c.roa
File: 6C7kBq7DsE7hsmH9UzmoCO0_s0c.roa (raw, json)
Hash identifier: FPrAofaCkOq0i4vctYtZoEJbhYsjJSnijQ0feqWgS2U=
Subject key identifier: E8:2E:E4:06:AE:C3:B0:4E:E1:B2:61:FD:53:39:A8:08:ED:3F:B3:47
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186586B4F8774B8DEF9D70303B5C21D72F2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6C7kBq7DsE7hsmH9UzmoCO0_s0c.roa
Signing time: Thu 16 Feb 2023 04:11:13 +0000
ROA not before: Thu 16 Feb 2023 04:11:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:58:6b:4f:87:74:b8:de:f9:d7:03:03:b5:c2:1d:72:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 16 04:11:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e82ee406aec3b04ee1b261fd5339a808ed3fb347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:7a:dc:e9:3a:cf:04:e8:06:97:f3:2f:98:
3f:24:b2:a1:9b:95:d5:c2:44:f3:25:9e:eb:cf:3c:
49:b8:cd:97:50:91:06:13:4c:39:cc:31:91:fb:d8:
25:c6:a4:25:03:55:fd:de:7d:87:d1:84:e7:cd:c0:
98:9d:19:49:4d:25:8f:b1:7b:11:28:ca:33:b0:1e:
61:80:00:0d:34:1b:ff:31:d7:2e:9f:1c:f1:43:a4:
ce:d0:d6:ba:2b:f5:0c:5f:9c:17:cc:d2:13:74:3e:
6c:1a:df:05:5a:44:6b:69:a7:98:89:3d:d0:b3:6d:
d1:e5:ed:2d:e3:1b:ed:c2:14:2b:6e:64:6d:3f:7b:
b1:8b:27:89:a2:16:5d:10:f7:f7:29:44:d8:c6:e0:
85:e2:d5:42:dc:8c:73:c1:b7:e3:35:72:97:17:4c:
b2:3b:0e:1a:11:de:4a:f4:de:ca:47:d6:f9:fa:f2:
d2:8b:19:bc:38:a3:cc:55:8a:65:f3:c3:62:07:0d:
cb:7c:25:6b:ed:05:47:9a:87:c1:f1:40:c0:80:e2:
5f:af:07:d9:e8:bf:52:49:a4:3a:b1:2c:5d:71:09:
99:99:37:a9:9c:a9:13:2c:77:be:93:18:61:66:a4:
eb:ad:4b:98:4c:99:32:e4:48:2a:6d:88:77:0f:a3:
a9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2E:E4:06:AE:C3:B0:4E:E1:B2:61:FD:53:39:A8:08:ED:3F:B3:47
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6C7kBq7DsE7hsmH9UzmoCO0_s0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:88:76:f9:4c:09:13:70:a7:81:fd:3a:91:b0:64:c8:b6:5b:
73:ac:32:c1:ca:68:4a:63:80:b5:fb:18:92:c3:0d:1c:80:d1:
a2:68:a0:ec:31:c6:98:d3:2f:aa:38:76:a2:90:f4:c5:ea:ab:
47:b2:26:47:2b:9b:a3:70:86:f8:6d:33:94:a0:7d:48:5d:7d:
96:1c:f0:3f:eb:4d:f8:4d:c0:c3:21:32:39:21:3c:8b:6d:f0:
19:5c:7f:99:f2:de:ef:2b:4f:93:56:b1:68:24:c2:61:a0:f0:
46:ed:d1:04:a3:89:1a:91:f2:aa:f5:a2:6d:61:cc:1e:5c:ab:
79:57:5a:9d:a0:35:39:4b:b1:ce:bd:1c:27:09:7d:62:59:af:
fb:59:e9:37:02:eb:f8:a4:f2:3f:03:82:68:26:e4:f6:68:7e:
ea:08:0b:36:be:80:e4:2a:f9:2d:e1:63:6f:72:13:df:62:f6:
62:b8:ca:ca:5c:0d:ef:48:40:3c:f6:c7:b8:7c:fa:57:f4:15:
07:be:f7:fb:55:16:0d:b4:28:46:34:0d:ef:f9:5e:c8:a3:42:
d2:63:d9:22:9e:ef:0c:df:39:53:c8:4e:4f:5d:d6:54:e2:bb:
80:d6:bd:e6:1b:a6:fd:57:47:f9:21:91:af:79:56:d1:f5:8e:
24:15:8a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:15:04 2025 by rpki-client