Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6DysH4BwXLMVQRlXUbgvL8LKwhE.roa
File: 6DysH4BwXLMVQRlXUbgvL8LKwhE.roa (raw, json)
Hash identifier: gFspmNLQY6sizns/OY0XvXd6I8GtPiBaTv7gkBgpIZA=
Subject key identifier: E8:3C:AC:1F:80:70:5C:B3:15:41:19:57:51:B8:2F:2F:C2:CA:C2:11
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018836EB37E568DCA046C833062F765EA2A7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6DysH4BwXLMVQRlXUbgvL8LKwhE.roa
Signing time: Sat 20 May 2023 02:09:24 +0000
ROA not before: Sat 20 May 2023 02:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:36:eb:37:e5:68:dc:a0:46:c8:33:06:2f:76:5e:a2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 20 02:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e83cac1f80705cb31541195751b82f2fc2cac211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:11:8f:30:8e:54:7b:40:15:f2:f1:86:a8:5d:
9f:eb:64:41:59:94:1a:c3:c7:40:7a:5d:c2:27:24:
d1:4a:68:cf:60:fd:b9:20:57:2e:9b:d6:bb:fd:3c:
1a:93:29:17:6f:83:e7:1c:f5:38:c1:3e:40:dc:9b:
aa:48:dd:35:64:86:5e:4f:02:71:65:96:86:a0:1d:
0b:4f:bb:a5:00:15:a4:14:02:f2:98:20:86:f2:2e:
40:22:42:de:fd:c7:6a:ec:1e:7d:fa:68:98:79:66:
87:b1:96:cc:f7:70:8b:66:4c:14:3c:7f:c9:b4:cc:
00:e9:4d:14:de:f5:cb:a5:89:da:9a:16:6a:f4:ca:
98:c8:8d:9f:da:ef:da:b0:62:91:80:cc:05:9e:fc:
8b:d2:cb:8c:47:b4:b4:83:af:65:63:0f:01:69:86:
de:6c:2a:4b:f5:eb:58:76:c8:ba:c0:3f:de:b3:fe:
ad:7c:2a:59:34:7d:8f:1f:e4:35:a9:bf:26:7b:b6:
7c:8b:bc:ed:d7:17:8b:1f:48:85:8f:53:c4:4e:90:
e1:b1:f6:75:cd:46:30:5a:ed:f8:e4:ab:cb:0d:05:
85:da:a5:80:38:bb:7d:df:a5:db:dc:99:99:82:67:
88:b9:38:82:26:49:34:a4:37:9d:b5:41:6a:9e:96:
c4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3C:AC:1F:80:70:5C:B3:15:41:19:57:51:B8:2F:2F:C2:CA:C2:11
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6DysH4BwXLMVQRlXUbgvL8LKwhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:35:e7:fd:4f:38:2e:22:11:43:79:87:e9:6f:21:36:ec:59:
c1:28:94:62:fb:34:e9:e9:4c:ce:ba:af:8c:0e:a0:c4:1d:9e:
87:d0:51:29:85:4c:f8:c5:a3:ee:e5:5a:bb:5b:c7:4a:fa:7a:
36:4a:9f:f8:44:27:99:21:55:4a:13:b8:83:8b:ff:be:c4:18:
b5:07:b6:41:5e:ff:3b:4c:62:7f:e3:5c:22:98:bd:b0:82:cb:
46:13:0b:8b:09:8a:83:cc:7d:f8:63:3e:cc:4c:f2:12:21:6b:
54:57:08:73:4e:38:89:ab:5f:04:e7:48:38:b3:14:2a:4d:be:
33:6e:2e:8f:9e:6f:04:20:cf:cf:d2:73:91:81:29:98:89:5c:
d5:c6:5a:32:6d:67:93:85:e7:ba:70:5d:58:96:28:6c:73:35:
0e:f7:5c:e0:0d:d1:09:04:97:1c:a8:f4:3f:50:92:a4:15:16:
ff:1c:05:e1:14:2e:7f:fb:f1:4d:98:13:e1:3a:d3:47:6b:90:
e6:cd:f9:a8:3a:b3:81:29:54:a2:b9:3a:d7:bd:d1:7f:e9:ec:
37:85:26:f5:91:82:94:8e:e6:8d:2d:3a:e6:8c:53:3d:5a:8c:
4b:17:ab:2c:42:48:d4:5b:15:b9:43:4f:1a:51:b3:5c:14:b3:
8e:41:d0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:56:45 2025 by rpki-client