Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6VMrTHxdR2yfyVEoZXhmBRcGIIk.roa
File: 6VMrTHxdR2yfyVEoZXhmBRcGIIk.roa (raw, json)
Hash identifier: s8MrCUvB2AV9JgAPFsusuUF6n7ITD2pnptfcwzFDg6s=
Subject key identifier: E9:53:2B:4C:7C:5D:47:6C:9F:C9:51:28:65:78:66:05:17:06:20:89
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8A8E92C2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6VMrTHxdR2yfyVEoZXhmBRcGIIk.roa
Signing time: Tue 07 Jun 2022 01:10:20 +0000
ROA not before: Tue 07 Jun 2022 01:10:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2324599490 (0x8a8e92c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 7 01:10:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9532b4c7c5d476c9fc951286578660517062089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:56:32:2d:37:10:81:45:9f:a8:d2:5b:49:
ae:16:ba:fb:2a:63:73:a0:1b:9d:91:4f:80:2b:c4:
f0:b0:95:6f:6c:cd:15:b6:f1:52:c7:1e:32:74:c0:
3f:7b:08:e0:8c:12:6a:8a:c6:fe:9b:2a:c2:60:1f:
2f:0c:27:f1:02:c8:85:fa:41:98:2c:8c:bb:3f:b5:
7d:01:31:6d:cf:7c:bd:7f:47:d7:6f:ac:38:14:02:
af:21:ad:5d:bd:b1:0b:d8:69:e8:a1:30:5b:ac:b3:
09:f9:56:02:6f:1f:af:f1:0d:85:c5:70:53:d8:82:
08:ac:f7:ac:b7:a1:ff:22:a4:f6:a0:a4:50:1c:36:
f7:de:5c:2e:87:bc:eb:2e:77:a8:33:99:22:60:34:
60:37:44:10:f3:f4:8b:a4:0a:d5:d4:ed:7f:07:ca:
7f:f3:76:1d:7f:08:64:0a:de:f8:3e:79:0f:0c:d3:
3b:fd:41:31:03:fc:51:4d:e2:1c:c6:13:04:53:1d:
f9:66:8f:85:3f:0e:07:9d:a7:32:37:5b:da:7e:bf:
c0:9b:f2:21:b6:23:8e:16:b9:43:2d:e6:7a:fd:bc:
28:a1:fe:62:ca:63:f2:cc:3f:f3:ba:13:75:05:51:
1b:ae:bc:95:28:23:bd:b3:53:fb:55:f4:38:e5:73:
9f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:53:2B:4C:7C:5D:47:6C:9F:C9:51:28:65:78:66:05:17:06:20:89
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6VMrTHxdR2yfyVEoZXhmBRcGIIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:a3:cb:ae:ee:40:ba:9c:4b:3a:ac:51:b2:59:8a:20:70:8c:
14:f2:0c:b7:05:5e:59:d8:f8:86:34:7f:ca:6e:52:35:56:4a:
00:8d:ab:a2:77:1e:f5:fe:0a:1f:2a:ea:b2:90:c6:79:77:ea:
ff:a6:92:b2:9a:3f:ab:14:e1:8d:f8:ae:4e:00:13:a2:7d:ac:
79:b2:7e:05:74:14:78:52:17:d7:dc:ec:13:83:94:dd:3e:ee:
4f:90:86:f0:2f:a6:1d:4a:18:4f:8a:fb:09:32:ab:29:3b:e8:
ad:99:3f:78:2e:d8:20:5a:cb:28:3c:6c:04:83:0d:e9:25:b1:
8a:1c:d4:23:e7:19:97:34:c8:5a:2b:65:db:5c:b2:d6:33:50:
25:e8:eb:a7:db:1a:be:75:ee:20:f9:8e:0a:71:80:9f:d3:5f:
05:21:ca:f6:b1:a6:56:e4:e0:84:7a:22:de:32:d4:24:17:a0:
14:e8:47:36:6c:10:13:37:7c:5f:aa:e4:5b:d2:2d:1b:23:70:
1d:cf:bd:e7:b9:0a:2e:01:bb:fb:3d:17:ba:31:38:00:e0:2e:
9e:57:9b:d8:64:f3:3d:1e:cd:ea:42:45:07:57:94:a0:68:8d:
c2:c4:1d:14:61:c7:17:8d:ca:c9:7a:ea:2d:12:0d:de:bc:ab:
90:78:b6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:12:18 2025 by rpki-client