Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Sju3H4whe3ggA8lwz7TVqrAzCI.roa
File: 6Sju3H4whe3ggA8lwz7TVqrAzCI.roa (raw, json)
Hash identifier: i2yMKFbLXfZKxvFGxbv+p/NI40gY27ZCwmAg6VKUVOw=
Subject key identifier: E9:28:EE:DC:7E:30:85:ED:E0:80:0F:25:C3:3E:D3:56:AA:C0:CC:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E8DA223C60DC579D65C2AA281E552B6B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Sju3H4whe3ggA8lwz7TVqrAzCI.roa
Signing time: Tue 06 Dec 2022 19:12:00 +0000
ROA not before: Tue 06 Dec 2022 19:12:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e8:da:22:3c:60:dc:57:9d:65:c2:aa:28:1e:55:2b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 6 19:12:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e928eedc7e3085ede0800f25c33ed356aac0cc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a9:d9:77:6f:5e:4c:a8:fd:e5:f0:0e:91:d0:
a5:d6:03:f1:56:6f:ff:6d:21:13:19:6b:94:f3:4e:
71:ca:dc:59:48:98:a0:08:5c:51:da:70:fa:6f:36:
b1:53:59:f5:0a:d8:81:1d:2d:6b:7f:ff:43:09:77:
29:53:f8:94:51:d8:14:9b:33:ce:b0:f3:e0:ed:33:
17:4c:8b:69:de:c8:b4:b0:99:40:16:f8:d2:e1:37:
c8:86:8b:21:c1:c6:f5:83:94:d7:77:3b:41:16:f3:
1f:3c:c0:c1:e4:c0:32:60:07:06:b9:02:cd:7e:36:
80:ac:65:ef:c7:8a:c5:39:9d:74:00:f4:fd:b2:14:
2c:46:98:ef:35:42:9c:ae:54:45:4c:b3:37:9b:04:
cd:4e:63:57:ed:54:47:cf:b9:73:cd:0e:55:90:fc:
0f:a5:15:21:b5:47:0c:32:48:d5:e8:4a:54:86:56:
42:24:a8:3c:74:e0:5a:70:17:28:68:68:9c:c5:6a:
3e:90:cd:9a:2f:ba:4a:15:bd:7d:42:ed:9e:2d:c5:
65:e3:9c:76:22:fd:d0:10:aa:fb:87:52:ff:fe:ab:
68:a9:0c:c5:a2:02:44:7d:3e:a8:d1:ba:64:27:45:
4e:96:40:03:b0:8f:6b:95:d0:dc:09:9c:4c:59:71:
0e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:28:EE:DC:7E:30:85:ED:E0:80:0F:25:C3:3E:D3:56:AA:C0:CC:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Sju3H4whe3ggA8lwz7TVqrAzCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:2d:80:8f:66:ba:36:97:25:ea:80:33:35:c8:b6:c4:aa:db:
f5:47:46:c0:7b:c0:13:0f:18:d4:19:7e:f9:09:3b:b1:e1:77:
19:a9:90:d7:55:bf:00:ad:d0:fc:b3:8a:ba:f3:df:81:68:94:
ae:4a:fa:18:74:7c:4b:51:3a:d3:49:79:22:73:97:55:e2:96:
97:54:ca:ac:0d:aa:d6:b5:37:cb:db:cb:eb:96:df:15:23:7f:
95:45:c8:3d:ff:a4:86:38:50:71:0e:03:ec:5f:86:22:18:d8:
2a:38:b1:ea:21:1f:8c:38:5b:b8:2c:c1:86:3a:bf:0c:da:62:
c8:21:c8:b4:2c:18:ec:7b:a2:78:ae:ac:be:87:d7:e1:bd:8f:
81:d3:ab:36:e0:e8:4c:2d:93:05:c1:4b:66:47:7d:40:7e:11:
87:0f:d9:67:9a:67:5c:df:4d:2f:3d:5f:b0:1d:d7:e1:85:4f:
02:2e:ee:82:78:7d:c2:cc:2e:cf:87:c9:b7:27:f9:7b:49:10:
24:d8:8e:6f:2f:a0:43:d5:81:56:c5:41:67:fa:5c:71:ce:56:
47:d5:cb:08:b4:f0:18:43:3b:3b:d8:58:c8:8e:3c:9f:c3:9e:
b1:9d:1a:4b:41:d4:00:f3:5e:1c:ec:55:f7:79:61:87:43:81:
3b:a6:95:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:29:01 2025 by rpki-client