Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6JpF3T93S2PkBnGK4dGztHEfB1E.roa
File: 6JpF3T93S2PkBnGK4dGztHEfB1E.roa (raw, json)
Hash identifier: g8/b7GFYYLsnb1g5moxoFk+XH41iI2TmFZMz9VcPro8=
Subject key identifier: E8:9A:45:DD:3F:77:4B:63:E4:06:71:8A:E1:D1:B3:B4:71:1F:07:51
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E29B81D7CAAFDF839FE75738233F235D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6JpF3T93S2PkBnGK4dGztHEfB1E.roa
Signing time: Wed 15 Mar 2023 00:11:27 +0000
ROA not before: Wed 15 Mar 2023 00:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e2:9b:81:d7:ca:af:df:83:9f:e7:57:38:23:3f:23:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 15 00:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e89a45dd3f774b63e406718ae1d1b3b4711f0751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6e:14:c9:80:27:66:d8:fc:b9:35:13:55:9b:
e6:74:ab:2e:81:8c:75:b9:9f:6c:36:fd:a1:80:82:
bf:09:1b:b5:37:e0:0c:14:b7:1b:c0:bb:ab:e9:60:
c6:19:b6:85:ea:2f:04:f8:22:47:2c:ec:7e:f6:99:
59:6e:28:81:b4:4f:ea:0f:58:3e:03:99:cf:1b:92:
6c:47:45:83:39:6a:b4:44:2a:41:8a:4f:44:ed:5a:
cd:d0:16:16:6b:e6:39:93:21:70:48:17:de:b3:f8:
b4:5a:5f:e5:29:79:0a:36:e1:59:8f:0e:1d:bc:0b:
6c:5f:b5:de:b0:5b:00:a1:df:27:9a:6a:12:b7:c2:
d3:ff:1c:f2:4f:e9:d8:87:df:82:6b:b2:b9:19:5c:
0d:db:e8:9d:62:d9:c5:66:70:3b:93:ea:f1:e2:74:
78:a8:6d:42:25:25:e1:bd:ee:ad:8a:13:fd:b5:ff:
05:f1:f3:fa:fd:f4:d3:24:37:bc:95:03:b7:8f:77:
81:85:e9:76:b9:31:18:c6:b0:74:9b:65:1e:1c:4a:
b5:a3:f6:6f:6b:68:10:99:9e:e9:de:11:0b:5e:e2:
8f:d6:a6:4e:5c:f1:a6:8d:05:27:19:bd:95:45:ee:
93:37:a8:35:b8:9e:53:17:43:20:48:75:06:7c:ec:
fb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9A:45:DD:3F:77:4B:63:E4:06:71:8A:E1:D1:B3:B4:71:1F:07:51
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6JpF3T93S2PkBnGK4dGztHEfB1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:eb:02:da:67:bf:85:28:ae:33:0f:58:d4:1d:01:85:58:18:
2d:8a:75:b1:b2:41:e3:03:39:84:8f:ca:a4:82:6c:bc:60:a8:
24:13:de:d0:bc:24:22:14:60:d5:f6:69:8b:df:9e:7a:66:99:
93:43:63:80:d0:98:a6:e0:21:d7:b2:9b:4f:15:17:f3:22:26:
de:6f:57:3c:ad:5f:f8:64:f9:5a:de:61:dd:cc:56:14:64:eb:
76:9d:20:86:03:b3:fb:3d:36:b6:8c:17:9f:e4:48:16:03:b2:
b1:90:b6:e5:9f:99:46:83:69:09:3f:ab:de:5f:2a:01:d1:3f:
0a:c4:be:b3:8f:1c:60:76:1a:6b:8d:f1:c4:b6:bc:65:02:7a:
16:b2:37:9b:6e:fb:14:36:e0:49:10:fe:9f:56:74:17:66:28:
15:ab:09:f5:d7:83:0c:f6:eb:10:1c:fb:c8:15:c8:72:56:ed:
da:91:a0:8d:5f:49:0f:a4:d0:bf:23:5e:0a:ac:2c:ba:c6:3f:
d4:d4:c3:f3:1c:49:98:9f:05:fc:ce:37:68:77:63:63:87:b2:
e3:a8:19:c2:17:95:64:f4:c9:51:c1:30:c6:66:04:4d:ce:6e:
8b:e6:bf:72:13:93:4a:5a:d3:ca:a4:1f:e3:65:1f:f0:bf:58:
ab:79:51:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:34:53 2025 by rpki-client