Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6RBce6CYoZEi2O8Kjtl0BKFvbmE.roa
File: 6RBce6CYoZEi2O8Kjtl0BKFvbmE.roa (raw, json)
Hash identifier: JlziZgq5wd9ScDAlIDuV/DwiBdI+Nv1AUDrSkWuH5kY=
Subject key identifier: E9:10:5C:7B:A0:98:A1:91:22:D8:EF:0A:8E:D9:74:04:A1:6F:6E:61
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2CDA502F962AF1C18391A5BD7FC3FAF1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6RBce6CYoZEi2O8Kjtl0BKFvbmE.roa
Signing time: Fri 25 Aug 2023 13:20:19 +0000
ROA not before: Fri 25 Aug 2023 13:20:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2c:da:50:2f:96:2a:f1:c1:83:91:a5:bd:7f:c3:fa:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 13:20:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9105c7ba098a19122d8ef0a8ed97404a16f6e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:38:21:ee:65:2e:b9:68:19:7e:c2:64:d1:97:
d3:07:00:d4:cd:3d:0d:97:58:5c:9a:96:39:5f:c3:
69:c9:f9:da:f9:47:93:ec:87:5c:88:bd:d4:71:08:
78:3c:46:88:7e:e5:e9:f2:5c:2a:0c:95:10:d6:6b:
bc:f7:48:6d:6f:1d:d6:87:e6:0e:98:c4:dd:44:8c:
7a:91:5a:e5:9c:81:48:97:ff:51:7d:a3:34:66:7f:
6e:e4:ef:d0:f1:09:bd:cf:a3:c3:36:6e:06:ae:e2:
4f:d8:62:13:03:18:12:27:6e:ef:39:7f:ae:33:e2:
6a:82:18:25:3e:8b:e5:d5:76:c2:0a:a2:3e:4f:ec:
2f:d2:be:4a:2f:78:b1:93:a9:61:6b:04:51:20:53:
8c:68:eb:4e:42:4e:bf:70:55:2d:c7:52:00:e6:b8:
f4:2d:bd:f9:75:a5:3f:54:b3:11:fa:e5:22:82:87:
0b:d7:75:1f:60:95:dd:a4:b9:8f:ee:0a:5f:b0:4f:
f1:19:88:36:e4:2a:44:88:50:fd:18:ee:58:9f:4b:
a9:f1:e7:85:02:de:c0:66:83:b6:16:59:02:34:7d:
8e:21:11:59:ab:6b:13:90:98:8c:73:c4:ef:47:8b:
10:ef:ff:0b:50:1c:c0:61:00:9e:8d:d4:d4:03:88:
05:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:10:5C:7B:A0:98:A1:91:22:D8:EF:0A:8E:D9:74:04:A1:6F:6E:61
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6RBce6CYoZEi2O8Kjtl0BKFvbmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:21:0f:d7:ac:cf:8c:28:51:24:f4:9d:c7:d7:70:92:c8:f6:
19:ac:df:1a:cf:a6:1e:d8:99:c4:7d:16:a6:63:6a:f4:8f:92:
fa:c5:06:03:e3:8a:83:9f:34:ff:36:43:62:fb:63:5c:ae:6b:
fa:8b:e4:96:6f:d4:e4:4e:69:25:96:7d:b4:54:ce:07:a3:01:
a7:19:7d:96:f2:07:4b:35:c6:93:3b:1d:ad:02:ee:45:e0:1c:
ce:ec:65:6b:a7:58:78:6c:26:fd:ef:73:f6:bc:a3:42:84:64:
b0:a1:47:64:11:33:85:4d:0e:49:66:26:3f:5f:92:91:0b:d2:
09:9e:3b:d0:26:12:41:4a:cb:67:24:b2:03:0d:a0:1f:c2:08:
77:76:77:59:6e:fe:dd:6e:d9:dd:42:57:17:30:13:ff:1b:ab:
09:92:fc:da:bd:35:19:95:4d:c4:d2:7e:9c:a7:f2:da:29:a1:
52:99:51:2b:61:39:2f:97:ea:75:f6:8a:e3:62:8d:42:3c:48:
e1:5e:49:e6:9d:be:dc:c1:49:37:45:1d:89:bf:aa:ef:ca:36:
5c:29:b0:9c:3b:2f:2f:09:0e:50:83:52:f4:c4:e5:ce:27:5b:
ba:e3:54:38:0a:2a:f2:6f:8a:94:4e:54:b5:de:ef:96:52:e8:
47:50:ed:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 07:32:36 2025 by rpki-client