Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6KBZ6fI6FJlaAaP_UlObyOm08ko.roa
File: 6KBZ6fI6FJlaAaP_UlObyOm08ko.roa (raw, json)
Hash identifier: IRANZKGeAn7CSRApBxbLgOYM5NplouoR1s04IiLWkBk=
Subject key identifier: E8:A0:59:E9:F2:3A:14:99:5A:01:A3:FF:52:53:9B:C8:E9:B4:F2:4A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A0E545CCC2264A5DC41D32D6BCA29B35
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6KBZ6fI6FJlaAaP_UlObyOm08ko.roa
Signing time: Sat 29 Jul 2023 09:05:27 +0000
ROA not before: Sat 29 Jul 2023 09:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a0:e5:45:cc:c2:26:4a:5d:c4:1d:32:d6:bc:a2:9b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 29 09:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8a059e9f23a14995a01a3ff52539bc8e9b4f24a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:57:c3:86:6c:35:c0:25:d1:dc:a0:92:01:
1c:8a:08:d1:7e:69:20:1e:c3:0e:a5:ca:70:d9:ae:
5a:ea:ac:02:79:82:29:03:5c:09:40:f5:e1:ae:46:
ea:94:d2:8e:a8:2c:51:8e:e9:f4:4d:a4:6c:47:80:
3f:63:b9:60:c7:bb:2f:35:6c:57:13:95:03:a8:e6:
a6:99:df:58:2b:dd:39:01:8b:ce:3f:90:4a:8e:12:
2b:8a:30:75:26:13:34:61:cb:24:2b:b0:fe:b6:48:
c5:cc:53:15:90:77:61:2d:9b:e7:4a:bd:c5:ba:9b:
ef:29:c2:2a:a4:4c:8e:56:75:03:21:c7:cf:70:15:
b5:f2:ef:83:88:64:5f:c8:76:52:ce:5a:a8:ee:ae:
9b:c7:fb:1e:76:83:f8:33:af:ac:de:5d:88:28:4a:
2f:0f:b7:cd:87:05:b7:61:d8:da:d9:22:7f:82:d7:
bc:8d:f0:42:c9:88:44:12:ae:be:52:7c:21:4f:a3:
66:d0:8b:dd:42:24:e8:08:e0:78:2c:58:d2:cf:38:
95:7f:4d:ef:e8:1c:85:08:71:96:76:a0:7a:01:80:
74:b3:21:64:33:66:c1:bf:3b:e2:b6:9b:38:aa:d5:
9d:32:04:1b:d1:87:d0:c9:13:9b:d4:22:cd:b0:96:
6f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A0:59:E9:F2:3A:14:99:5A:01:A3:FF:52:53:9B:C8:E9:B4:F2:4A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6KBZ6fI6FJlaAaP_UlObyOm08ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:7f:d6:39:8a:2a:83:d9:28:39:11:e5:86:d8:64:f8:05:d6:
14:3f:b2:8b:c8:f0:82:6b:ab:c5:f2:ad:0d:29:4d:c3:78:e3:
8f:d6:4f:e2:f5:bb:9b:6a:e3:10:3e:49:01:6e:cf:d9:2e:74:
eb:64:86:a0:9e:af:c6:da:18:7c:90:b0:a7:de:e3:25:44:63:
92:89:04:e6:94:21:72:18:fd:9f:10:14:c7:66:84:bd:74:fc:
8c:84:24:1b:a1:3f:c5:3e:13:ec:52:0a:ed:34:45:38:3d:49:
b0:84:1d:bc:c4:db:87:88:4f:05:dd:73:d1:70:d8:00:c7:23:
0d:92:2f:63:a3:07:c6:3a:6e:a4:50:91:bf:93:73:f8:84:1b:
36:f8:f8:4b:c1:00:b7:7f:3e:fc:d5:ac:16:5d:41:ec:df:5d:
c4:cb:41:2e:63:92:44:b4:4b:88:29:13:b4:77:e0:cc:6a:2a:
43:d1:8b:38:6a:ff:cd:aa:fd:bc:91:e6:22:91:5b:81:e9:77:
b4:ac:57:2c:30:41:f7:f7:a9:1a:3c:fd:36:e6:0e:6e:f4:a5:
f4:f9:f0:ab:40:93:7a:7f:bb:a2:df:6f:02:47:73:a8:95:0b:
49:5e:a4:4d:a6:d7:b1:89:8c:d9:64:e6:a4:57:b7:47:e2:b7:
7c:46:64:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:32:54 2025 by rpki-client