Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6L-Lxl-Opj4ZhX5u3Rxi-iC0yOc.roa
File: 6L-Lxl-Opj4ZhX5u3Rxi-iC0yOc.roa (raw, json)
Hash identifier: ti2EhzbvG1b5vqg8+C7zvvWZkAVuYv7eILRd3FSWb5M=
Subject key identifier: E8:BF:8B:C6:5F:8E:A6:3E:19:85:7E:6E:DD:1C:62:FA:20:B4:C8:E7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A4062046D06AFF2D856B32F47A435A60F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6L-Lxl-Opj4ZhX5u3Rxi-iC0yOc.roa
Signing time: Tue 29 Aug 2023 08:21:19 +0000
ROA not before: Tue 29 Aug 2023 08:21:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:40:62:04:6d:06:af:f2:d8:56:b3:2f:47:a4:35:a6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 08:21:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8bf8bc65f8ea63e19857e6edd1c62fa20b4c8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:33:5d:4f:9b:e9:47:c1:85:e0:e6:96:09:94:
11:fd:6e:07:ae:ff:35:1f:99:4e:30:06:be:94:c7:
60:91:13:d2:54:fd:8d:5a:94:6c:58:48:c5:ca:33:
95:e2:92:ca:a5:4b:f2:da:2a:ed:a7:d0:b6:dd:32:
d2:8d:78:41:2f:c5:1d:f7:25:35:64:71:24:ae:36:
64:88:b4:0d:55:23:de:ce:e0:7c:ed:a7:40:5b:cb:
e4:15:66:e2:73:1b:27:7c:85:39:65:98:51:0b:f1:
91:25:0d:71:7f:17:28:49:22:24:58:19:f2:78:c0:
7a:d2:45:c1:9a:27:29:0d:d3:2c:48:0b:3e:85:4a:
41:7c:18:41:54:78:3e:87:cd:00:ba:e2:28:d9:b5:
5f:4e:88:c7:77:3a:2c:74:dc:a1:66:ce:69:32:1d:
0f:c1:b6:29:ac:50:67:20:de:73:a9:51:f0:16:66:
2c:9b:72:fe:ba:e7:56:69:dd:08:76:96:e4:47:b1:
01:e6:74:b1:48:3c:45:a5:47:f7:e8:ce:6c:af:43:
0c:dc:26:36:f8:26:3e:65:d8:49:c7:30:00:2f:b7:
e6:0e:5f:a6:64:80:98:bf:a3:33:6b:54:8b:22:f4:
1b:da:6c:1a:0c:fd:f9:d0:e6:af:5f:1a:d3:22:58:
53:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BF:8B:C6:5F:8E:A6:3E:19:85:7E:6E:DD:1C:62:FA:20:B4:C8:E7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6L-Lxl-Opj4ZhX5u3Rxi-iC0yOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:ea:ad:c5:21:8f:33:72:3b:63:00:a9:17:a9:25:ba:0c:4e:
87:fb:2e:68:8e:96:8d:a0:b3:ac:7a:65:0a:5e:a2:db:d7:69:
3c:2e:28:c9:15:7f:4e:a1:cf:e5:bf:8f:41:ed:f4:9d:9c:f2:
58:20:40:33:1e:56:1b:10:96:b4:80:56:03:7f:e1:96:0e:61:
c7:5d:53:d3:ba:2c:0d:ec:a1:ff:9c:f8:a5:5f:43:95:73:e5:
7d:48:e8:1f:87:66:fc:bf:80:1d:b1:bd:07:87:fd:6c:46:bb:
a7:8d:4c:4d:ea:ae:d4:74:76:c6:6b:85:e5:50:d3:34:28:ff:
0a:12:0e:0e:fb:7a:a8:50:41:c0:60:86:6b:ae:f0:2b:57:41:
00:df:dc:66:f9:b7:05:30:69:e3:6f:08:c1:47:ea:06:08:1c:
4b:b6:89:f9:4d:d3:18:55:0c:43:3e:36:fe:53:b0:97:e5:da:
30:7b:b6:91:5d:c2:68:12:a9:bd:bb:ba:85:da:cb:a7:8f:09:
ad:59:12:bf:ef:33:42:3d:81:d2:0f:17:43:2c:74:3b:c9:81:
e4:e7:a6:49:91:11:31:8d:46:3b:82:db:f3:bf:4a:a7:b0:8a:
be:78:fc:f8:b5:db:e5:63:c5:82:a6:a4:20:67:15:bc:7c:53:
0c:cd:69:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:23:28 2025 by rpki-client