Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Noh713sodTz21hFMTT6HZS4QRY.roa
File: 6Noh713sodTz21hFMTT6HZS4QRY.roa (raw, json)
Hash identifier: EDenLNV+BxJZxep79I1nJFucVzsiT2lH21Pszl3qVe0=
Subject key identifier: E8:DA:21:EF:5D:EC:A1:D4:F3:DB:58:45:31:34:FA:1D:94:B8:41:16
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185662383E31C8861BD9648873079885032
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Noh713sodTz21hFMTT6HZS4QRY.roa
Signing time: Sat 31 Dec 2022 03:04:41 +0000
ROA not before: Sat 31 Dec 2022 03:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:6623:3a48/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:66:23:83:e3:1c:88:61:bd:96:48:87:30:79:88:50:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 31 03:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8da21ef5deca1d4f3db58453134fa1d94b84116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:80:d8:61:b5:0d:b5:b2:58:ef:dc:1b:6f:c2:
2b:9f:67:d7:9e:b4:ae:eb:67:02:a8:07:96:d4:98:
d7:08:ec:a7:0f:b3:63:9c:91:78:45:1f:30:e5:ad:
7a:72:4f:87:b5:45:9d:14:14:49:76:00:4b:85:6d:
a0:a5:0f:96:4a:df:0d:6b:9c:c3:47:fd:11:d7:d8:
1a:25:9d:4d:ee:18:01:54:15:40:e9:9b:d4:b6:42:
4d:73:1b:51:4a:8c:4b:32:af:75:f6:14:f9:31:99:
a8:b0:4f:27:9a:0a:aa:c4:ac:d7:ce:c9:34:4c:5e:
18:ee:7f:b2:f1:5d:a4:6b:66:a0:83:08:96:a0:10:
59:df:11:72:07:ce:18:cd:bd:94:3c:2b:37:60:42:
92:db:fd:32:01:8a:3b:31:0d:e3:c2:46:ee:f5:32:
78:79:f8:7a:3a:d5:1b:c0:8f:7d:bb:c3:c8:9f:ef:
81:52:a1:45:83:40:a4:89:84:5b:15:03:55:b5:c2:
a9:7e:6f:6a:96:c9:79:0a:9d:4a:a4:93:fe:f0:0e:
9c:cc:da:3f:fd:e7:e1:56:af:82:a4:fb:bc:df:37:
45:a4:69:7c:dd:bc:f1:66:09:81:15:64:4c:7c:41:
93:f8:59:a1:f8:1a:f4:a2:c9:55:df:3c:c1:43:39:
87:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DA:21:EF:5D:EC:A1:D4:F3:DB:58:45:31:34:FA:1D:94:B8:41:16
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Noh713sodTz21hFMTT6HZS4QRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:9f:6b:f1:29:b4:ec:c9:30:91:1a:39:a1:88:99:c8:65:65:
ca:c1:7c:bd:a7:ed:0b:95:78:79:98:53:8b:63:3b:21:0b:00:
b9:ec:2e:b5:fb:55:4e:88:aa:b4:4e:5d:86:19:b8:f8:d6:05:
c6:0f:23:8a:83:91:fe:c2:e8:6d:83:f8:59:e8:bd:ac:1f:68:
5c:73:69:78:87:5a:2c:b6:be:6e:60:c0:9a:62:1f:4f:b0:e7:
27:a8:0e:b3:f2:fc:50:f6:95:62:d1:83:c9:c1:45:70:b7:e8:
df:f4:28:35:ad:d1:c3:93:58:0e:db:07:d0:f8:d6:e9:20:8c:
bd:79:ad:56:57:24:f9:85:e7:5d:7f:bb:52:e4:c7:3b:ee:05:
80:0b:71:d9:4a:e6:55:78:24:e3:38:c4:00:8e:02:f8:fd:ab:
46:77:01:fb:63:12:91:28:ee:d6:f4:0f:28:89:c1:70:e7:ea:
df:00:96:0d:86:2e:eb:9f:0d:fe:09:05:0b:8b:2b:cc:57:c9:
96:1a:ed:e0:a5:ef:e0:97:97:d9:e1:ce:68:b5:2c:61:bc:d4:
da:39:7d:76:36:ff:36:91:50:76:e9:e2:a4:e7:c3:ce:58:67:
86:ca:2a:a5:01:d7:25:e5:5b:c1:96:c8:a3:34:08:5c:d6:19:
80:a6:c3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:13:03 2025 by rpki-client