Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6OavJZq2OKGw_EbUj6Rm_oB2CbU.roa
File: 6OavJZq2OKGw_EbUj6Rm_oB2CbU.roa (raw, json)
Hash identifier: +8L4blZ45zZUNhO/NK1/8vgPK+TXJffoHLtSSiU0tVo=
Subject key identifier: E8:E6:AF:25:9A:B6:38:A1:B0:FC:46:D4:8F:A4:66:FE:80:76:09:B5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 68125321
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6OavJZq2OKGw_EbUj6Rm_oB2CbU.roa
Signing time: Sat 05 Feb 2022 08:09:19 +0000
ROA not before: Sat 05 Feb 2022 08:09:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1746031393 (0x68125321)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 5 08:09:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8e6af259ab638a1b0fc46d48fa466fe807609b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:74:3d:df:a3:db:9a:e1:fa:75:ef:d2:0f:24:
d8:f6:bd:29:b7:f4:0c:dc:45:4c:0d:34:0d:73:d1:
b5:78:58:ee:02:b4:0c:bf:b7:98:59:97:1b:86:cc:
2a:78:be:32:ca:af:0e:5b:8a:e7:74:70:91:2c:20:
88:f7:f2:13:29:14:23:e3:b6:04:b2:3a:3a:f2:66:
5d:45:b2:b6:94:b6:b7:f0:50:69:42:74:93:a6:b8:
5b:6b:12:0d:8d:0d:18:b6:a8:29:0f:60:fa:6c:c5:
cd:e7:e2:88:7a:36:23:ae:b1:91:f5:67:9b:fc:77:
02:9c:a4:8e:49:75:66:c1:2d:b2:4a:1f:4c:c4:a6:
fe:00:1b:9e:28:b3:36:f7:cb:db:f1:82:34:64:68:
77:f1:a4:4e:67:53:64:1b:ad:01:d4:a4:13:a7:38:
73:65:19:17:6f:49:17:9b:76:f3:09:02:2f:13:41:
00:b9:18:f7:4e:86:78:2b:eb:18:c1:71:8f:97:15:
68:89:24:ab:27:c7:8b:dd:32:33:c6:11:b4:79:5f:
db:b4:e0:a9:24:f4:1f:9e:1c:74:7a:78:73:32:e1:
42:d8:bd:21:e2:64:39:5c:ca:56:ed:05:44:be:b8:
b9:01:b4:ec:90:ec:62:e8:95:72:45:7e:cc:34:58:
cc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E6:AF:25:9A:B6:38:A1:B0:FC:46:D4:8F:A4:66:FE:80:76:09:B5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6OavJZq2OKGw_EbUj6Rm_oB2CbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:7b:05:1c:4a:f2:97:d6:36:c9:c8:d9:a6:4d:0e:a4:01:da:
93:90:59:eb:5b:f8:71:9d:84:d4:cd:1a:38:55:7d:9c:e1:0f:
b1:8d:f2:40:56:d4:4c:33:53:d5:31:42:2f:a1:9f:2f:1d:77:
91:88:29:ca:0b:24:2f:48:08:86:0b:20:35:e9:9c:2b:87:37:
05:d3:8b:ff:0f:20:3f:d1:dd:d2:f3:d1:62:87:b4:01:b1:3c:
64:bb:39:ee:9c:5a:a3:cc:96:ec:e5:fe:4d:b1:e6:cb:ff:57:
44:6e:ba:0d:b7:47:33:25:ad:11:40:b8:64:7f:b3:f8:10:d8:
f9:dc:03:02:d1:4e:60:3a:e4:b7:1f:bf:e0:87:a8:f1:ab:97:
43:be:ec:68:4f:20:4d:b7:36:be:0c:84:43:8d:35:c6:e8:ef:
ce:46:6a:4b:7c:5f:bb:c5:1f:c7:17:6c:e2:24:cd:e4:c3:32:
b4:8e:d2:37:40:c9:2e:90:14:b0:bb:ab:e2:76:82:e7:00:e0:
cf:3a:f7:56:d3:a3:24:02:1d:d1:03:b1:1e:ab:52:76:22:26:
ab:35:ed:45:bd:3e:54:6f:5c:2d:f6:20:3e:51:e9:da:4a:61:
41:67:e6:4a:74:c1:d9:72:d7:80:4a:40:e4:bc:36:a1:b7:e4:
f8:e2:2f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:12:55 2025 by rpki-client