Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Nute1C-5qE4p_QLINTy1cV0V-E.roa
File: 6Nute1C-5qE4p_QLINTy1cV0V-E.roa (raw, json)
Hash identifier: +fMa9CAjqQSUydLNFbBd8s+2uFn28YPXR3hb2IyDIMs=
Subject key identifier: E8:DB:AD:7B:50:BE:E6:A1:38:A7:F4:0B:20:D4:F2:D5:C5:74:57:E1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183D224E7D80086AB770C8CCB77F1EFA895
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Nute1C-5qE4p_QLINTy1cV0V-E.roa
Signing time: Thu 13 Oct 2022 16:19:37 +0000
ROA not before: Thu 13 Oct 2022 16:19:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d2:24:e7:d8:00:86:ab:77:0c:8c:cb:77:f1:ef:a8:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 13 16:19:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8dbad7b50bee6a138a7f40b20d4f2d5c57457e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fb:4c:70:b1:72:64:e8:b7:f3:69:0d:14:e2:
85:4e:54:4c:45:db:06:8f:4c:14:54:96:22:f3:7d:
b6:11:28:84:0e:76:4b:e2:0c:f6:cf:d0:8e:1e:7c:
c9:77:a3:31:c9:b4:b1:f5:4b:b8:5e:df:7e:a9:aa:
a7:92:16:d0:ba:b7:ab:21:3e:2e:7d:71:ea:60:e8:
09:0b:08:2c:14:73:32:d5:ba:70:f4:1f:bc:4e:31:
7e:4f:27:61:f3:26:98:16:1d:52:f7:ff:3e:2c:d7:
41:f5:53:23:3c:36:8a:1c:11:e9:df:6f:f4:a0:08:
a3:bd:93:bb:d5:5f:df:0c:4e:b5:e3:0c:33:cd:b7:
74:d6:4d:97:05:5c:99:1f:67:b2:98:d6:5c:0f:15:
82:80:fb:86:3e:6d:87:16:7a:4c:e7:1c:26:2a:0a:
c6:b6:7f:0a:d3:8f:77:df:e3:4c:fc:61:04:3e:a7:
f8:63:5c:94:ed:69:3e:e6:b6:55:bf:41:10:c9:3c:
09:11:16:7b:8b:b8:e4:72:00:6b:26:8a:57:b7:2b:
19:66:56:cf:55:4f:03:7a:b3:56:a6:64:e7:24:9f:
36:de:49:e4:ad:e5:3b:a3:36:d5:26:55:0e:d7:1c:
77:e5:92:8c:25:98:24:6a:51:82:34:8c:c0:ad:1d:
61:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DB:AD:7B:50:BE:E6:A1:38:A7:F4:0B:20:D4:F2:D5:C5:74:57:E1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Nute1C-5qE4p_QLINTy1cV0V-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:43:86:d9:92:ea:89:87:2e:5c:2d:f2:19:23:b1:db:84:6f:
12:f3:96:d2:fd:6d:24:20:03:3b:4d:8c:73:01:0a:1e:3c:53:
f2:e7:6e:80:c3:13:6a:3c:f5:dc:5f:20:76:b9:68:5c:5f:89:
79:f0:d4:83:33:0a:c2:61:d6:b8:ba:3c:28:8d:68:02:5d:0c:
fc:73:c4:59:a4:6e:2e:0d:17:32:a5:bc:15:59:b3:d5:c0:03:
ce:41:56:82:f1:db:0e:4d:d9:24:b4:a3:6c:f8:ed:02:3c:98:
fc:fc:5c:14:95:8b:b4:9c:8d:53:9d:6c:4e:d5:97:23:1c:72:
fd:b1:a1:cb:9d:94:85:e2:3a:5c:5f:8d:51:74:bb:22:2b:cc:
a5:62:a9:cd:f7:f7:64:71:19:2f:42:9d:d3:37:44:67:6c:e8:
ce:b6:98:29:45:17:61:ec:59:77:63:95:3c:49:99:b1:39:1b:
dc:2f:b0:36:6e:ff:e1:53:2a:5a:59:58:86:60:6d:59:15:d9:
51:4e:99:f7:a0:8d:5b:7b:15:87:cd:4b:52:6b:4b:16:0c:a9:
15:02:c2:8a:79:61:a6:fa:8f:51:d2:39:da:97:25:3b:79:8b:
93:e0:4d:67:1e:24:e3:89:97:15:f4:7b:17:06:95:ec:11:df:
17:8d:22:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:48:19 2025 by rpki-client