Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6MB5339DJrby962EMjhe5ZUpXUQ.roa
File: 6MB5339DJrby962EMjhe5ZUpXUQ.roa (raw, json)
Hash identifier: NrTMjZL7AXY7IvDqZ+emzmnyUnyL69cT9oLAHthhMx8=
Subject key identifier: E8:C0:79:DF:7F:43:26:B6:F2:F7:AD:84:32:38:5E:E5:95:29:5D:44
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A614CA9B4BE702B859B2869E8E0EA13D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6MB5339DJrby962EMjhe5ZUpXUQ.roa
Signing time: Sun 30 Jul 2023 09:15:27 +0000
ROA not before: Sun 30 Jul 2023 09:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a6:14:ca:9b:4b:e7:02:b8:59:b2:86:9e:8e:0e:a1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 30 09:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8c079df7f4326b6f2f7ad8432385ee595295d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:3d:ee:ba:3c:e6:0b:ef:a1:5d:c5:47:ea:
e9:84:31:87:70:a2:11:a7:7c:f5:63:dc:9f:f6:2f:
67:94:32:2d:67:d3:ef:d3:8b:d9:8a:78:be:51:0f:
de:0f:3e:f5:26:9f:9d:ad:8f:c2:07:6e:79:79:c2:
29:53:63:f6:5d:b5:89:01:d2:7c:28:6a:61:df:fa:
34:dc:ad:8b:83:72:53:3e:6b:80:a0:08:3d:6d:66:
f8:c5:ae:a2:6a:6b:12:ee:06:59:35:48:2f:10:03:
0d:82:44:17:e8:5c:53:97:25:74:fc:a9:c0:55:a9:
6a:67:91:4a:11:e9:a4:42:40:07:52:b5:b0:96:42:
67:e4:39:e5:78:fe:90:6a:79:fc:5e:c5:04:7e:06:
86:79:06:10:68:39:c8:bf:40:a9:7d:78:fd:9f:86:
d2:e8:79:a8:12:32:11:77:09:c6:67:31:5a:7b:12:
c4:13:eb:6f:28:3b:09:62:4b:3c:f0:bb:85:46:a8:
2d:be:05:61:9d:d1:17:48:ef:f6:11:e4:1b:d8:9f:
be:10:41:3d:dd:a1:0c:e7:4d:0a:84:a2:78:88:3b:
0d:5a:b0:c1:91:d7:80:cf:07:8a:5a:47:a5:77:53:
c7:e1:36:ad:c9:9b:b0:18:f9:a4:cf:3b:a5:3b:3d:
c8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C0:79:DF:7F:43:26:B6:F2:F7:AD:84:32:38:5E:E5:95:29:5D:44
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6MB5339DJrby962EMjhe5ZUpXUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:99:12:11:3d:8d:b5:0c:af:c4:d0:b5:16:b6:97:9d:d6:d1:
52:c7:af:b8:c9:da:f6:b0:ab:a9:48:b7:cc:ea:79:03:5d:4c:
12:2d:d3:19:55:0a:56:e5:8e:2a:1e:ae:79:db:d1:71:d7:22:
19:ca:a8:99:2d:fa:e5:62:c3:9e:40:ad:1c:c7:50:d8:7f:95:
15:15:64:e0:25:fc:e6:c5:07:fa:e9:b8:c7:2f:93:6c:42:da:
df:0b:cb:29:bb:30:aa:ef:d7:fd:1c:4a:20:8b:d6:43:ef:f4:
75:9f:67:43:ea:cb:1f:6b:17:8f:39:b8:74:b4:bf:83:3e:15:
da:c8:b8:1b:0d:82:8a:23:7c:9a:78:68:51:38:35:e1:37:47:
4b:4f:30:ea:dc:ab:6a:86:d2:f5:b3:6b:93:a8:82:55:95:fd:
c5:e1:f9:cb:04:c6:b1:fa:cb:f4:3f:da:3b:09:2d:b2:fc:d0:
3d:3b:a7:e6:6b:c1:9e:43:39:56:2f:81:67:f0:8f:58:08:e4:
55:b9:f0:86:bd:4c:28:bc:46:51:2e:87:1a:45:49:26:68:69:
29:dd:e6:1e:ae:07:8d:56:5b:36:07:de:29:0c:0f:a3:75:a1:
4a:0e:9d:4f:9a:a1:7a:ab:b9:8f:11:61:3d:47:dc:b7:06:44:
9e:15:67:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:38:58 2025 by rpki-client