Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6RiTf9hUyq5ri1nMEfI1NpFy6Xk.roa
File: 6RiTf9hUyq5ri1nMEfI1NpFy6Xk.roa (raw, json)
Hash identifier: 5I+BaEpX3sP3OPFTzh/BAId9MmyLenTy3NxJJ40eisA=
Subject key identifier: E9:18:93:7F:D8:54:CA:AE:6B:8B:59:CC:11:F2:35:36:91:72:E9:79
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865FB18F1ACF1BFD70656520EDCEBD3134
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6RiTf9hUyq5ri1nMEfI1NpFy6Xk.roa
Signing time: Fri 17 Feb 2023 14:05:17 +0000
ROA not before: Fri 17 Feb 2023 14:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:5fb0:d240/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5f:b1:8f:1a:cf:1b:fd:70:65:65:20:ed:ce:bd:31:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 17 14:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e918937fd854caae6b8b59cc11f235369172e979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:83:bc:66:e4:5e:de:c6:66:7e:e0:33:04:21:
02:fc:ca:b6:ef:26:23:93:02:f2:b2:19:3f:71:0c:
3e:49:2e:e3:c7:94:55:35:7f:bc:b0:c1:20:df:4d:
68:44:3e:89:f5:80:61:e0:e4:ae:0c:a2:2a:61:d4:
34:7f:32:e5:0a:5e:8c:1b:28:98:19:5f:ef:83:88:
15:67:d5:20:fb:8e:a4:b5:06:f3:8a:4e:1a:b7:df:
3b:0d:95:16:f1:5e:e7:7f:51:de:ec:03:44:0c:85:
6f:6e:3f:e4:93:71:04:21:9e:9d:00:2f:a9:3d:ed:
60:0f:d9:36:5b:37:6e:0c:6d:00:b6:ed:d0:b3:3a:
fc:4e:6c:7b:c0:33:5c:90:4d:10:5a:ab:67:96:9f:
71:7a:ba:ee:be:b3:68:f1:b7:7a:0c:e0:9b:a4:46:
3e:2c:c8:f6:85:c9:6b:2b:b6:27:8a:e7:7f:8b:ce:
e9:4d:6f:21:6f:2d:e4:56:75:74:c4:49:fd:79:cd:
a3:55:39:a8:0d:5c:f4:ec:94:31:0e:35:51:83:05:
d9:5d:b2:f4:d6:4d:20:96:bc:05:a3:92:b9:2f:28:
b2:50:dd:62:7a:c5:9c:7e:57:e5:b7:72:af:49:6c:
c9:d2:5d:8a:06:bd:9d:7b:a4:4a:bd:db:07:51:c5:
c6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:18:93:7F:D8:54:CA:AE:6B:8B:59:CC:11:F2:35:36:91:72:E9:79
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6RiTf9hUyq5ri1nMEfI1NpFy6Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:49:d6:e4:7f:20:67:59:f7:f9:d5:e1:f3:cc:c3:1e:17:b9:
9f:b1:08:99:c7:05:3c:32:d4:e9:a2:39:1a:ff:c8:45:e6:6e:
5a:88:05:6c:79:7e:68:92:a5:c8:6a:77:fc:c8:90:d7:b1:31:
f4:70:59:84:29:e5:cf:b1:9f:6a:86:99:a1:30:37:88:57:fd:
9e:0c:07:97:a0:0a:45:60:b9:e8:3f:c2:3a:70:b9:33:48:20:
5b:39:a0:3b:61:0a:8f:56:1c:df:fe:9a:43:23:7c:13:8c:41:
a6:f0:43:98:60:5f:e2:81:65:3b:94:6f:1a:e9:47:c6:6c:8c:
6d:db:2e:f6:36:10:b5:3b:df:c9:81:a8:8f:ed:cf:a7:d9:c4:
ef:61:4d:ac:c3:9c:04:d0:8b:9a:9f:e3:4f:07:43:30:1f:b0:
4f:88:bf:75:2d:52:df:d2:61:f2:dd:10:a6:96:26:76:cb:fc:
c8:c1:8e:a9:56:fd:18:34:d7:ed:db:7d:1c:59:01:3e:e7:83:
5e:e9:a0:87:01:9a:88:05:03:36:58:42:46:3a:a9:f0:12:dd:
11:cc:7d:03:fd:9d:78:e4:87:d4:13:06:08:de:c8:db:61:d9:
ad:38:40:eb:93:f0:b6:bb:50:0a:2e:f9:31:4d:1a:40:9c:14:
ed:64:f9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:31:53 2025 by rpki-client