Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6N0KmuXIAu6kBqAfgvRKTda8yng.roa
File: 6N0KmuXIAu6kBqAfgvRKTda8yng.roa (raw, json)
Hash identifier: ot4UtziZ32p8eYxVRDiRfXYrH02+CVn/N2e4eSW1UZM=
Subject key identifier: E8:DD:0A:9A:E5:C8:02:EE:A4:06:A0:1F:82:F4:4A:4D:D6:BC:CA:78
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182677E8D5DD4B25935EE2A669D98154491
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6N0KmuXIAu6kBqAfgvRKTda8yng.roa
Signing time: Thu 04 Aug 2022 06:15:23 +0000
ROA not before: Thu 04 Aug 2022 06:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:67:7e:8d:5d:d4:b2:59:35:ee:2a:66:9d:98:15:44:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 4 06:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8dd0a9ae5c802eea406a01f82f44a4dd6bcca78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d2:25:fd:85:7d:24:b8:33:52:5d:04:3a:3c:
cd:1d:3c:dc:67:20:71:c7:41:d7:8e:b7:34:d3:ea:
8b:c6:db:ed:08:42:96:4f:19:3d:4a:f7:d8:03:50:
05:d0:42:d2:48:d4:3c:3b:a2:ad:ca:ba:4f:f9:30:
aa:3f:f7:38:a3:5e:83:5c:6d:e3:e1:93:2e:9f:b5:
35:82:41:9f:be:58:b3:16:e3:18:a4:b6:61:a4:41:
9b:c9:91:9e:52:50:7f:37:6e:1b:be:e9:95:6a:6f:
9c:ed:fb:88:0e:ce:53:16:df:81:26:20:58:c8:6a:
e0:3c:7c:66:79:c8:0b:5e:3d:a3:94:7d:d9:71:80:
20:0d:48:b3:d5:f8:d4:29:0e:7a:40:78:32:92:b5:
16:bb:62:37:e4:67:ba:87:2e:47:03:53:be:fa:ff:
64:90:d5:1b:81:17:5e:8d:1b:b3:09:04:8d:b3:55:
cb:71:36:ca:1a:27:3d:34:f7:df:92:ab:e5:05:b4:
6b:ce:8b:7b:32:3f:b9:e9:68:44:f2:81:b6:02:c4:
fe:47:b0:fc:e8:a7:e0:8f:0e:94:99:77:f5:63:47:
7a:29:f8:0e:42:45:91:81:3f:fa:50:9d:2e:24:82:
a6:dc:2a:9a:cf:06:15:45:9a:e0:f5:50:56:f8:f2:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DD:0A:9A:E5:C8:02:EE:A4:06:A0:1F:82:F4:4A:4D:D6:BC:CA:78
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6N0KmuXIAu6kBqAfgvRKTda8yng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:81:ee:b0:c5:66:b5:89:63:1d:06:df:ae:db:6e:da:ed:a5:
ab:03:7b:21:a3:34:98:50:ef:46:31:ec:52:da:d2:06:bc:25:
f9:65:ed:4b:1c:ff:89:c3:64:3d:8c:1b:52:f0:08:8d:ae:95:
16:bf:b0:ba:cf:c5:38:6d:25:78:f0:3d:f1:95:81:12:7d:13:
10:2e:e8:b0:aa:78:1d:db:47:fb:c6:6f:3e:aa:d1:8f:ad:31:
e0:9e:58:60:7d:a5:ac:e1:8a:88:a0:1c:ca:b1:14:05:dc:ce:
0d:c2:ed:ea:d4:d2:d9:41:e5:ac:79:4f:0e:9b:9a:52:58:b0:
ae:d9:af:24:b7:5c:79:b6:03:ef:4f:8f:a6:aa:17:99:e8:c0:
9b:70:ec:31:24:b2:fa:a0:49:61:59:19:2a:26:8e:62:95:5b:
84:95:0f:75:1d:ff:c1:2e:f8:b1:36:dd:fa:e7:36:17:63:88:
80:27:4e:8e:56:88:ed:79:80:d3:61:e0:b1:2c:3b:22:3d:94:
40:4f:d4:96:f5:8b:6f:5a:33:04:c9:ac:fb:1a:3d:87:28:85:
0f:43:fb:76:08:36:c9:ce:42:47:eb:82:0b:80:2e:dd:b5:9a:
0a:fc:6c:b1:ee:18:e2:83:07:12:fe:80:b1:1b:e4:78:a4:4c:
11:48:c0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 02:32:07 2025 by rpki-client