Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6VfFxr-PlJ1VEKHpcCwfpnTyWpc.roa
File: 6VfFxr-PlJ1VEKHpcCwfpnTyWpc.roa (raw, json)
Hash identifier: ZiKy5m4NhsMl0ws9vkVhqmqPwZeO/G6Y5FvBo5CCKOQ=
Subject key identifier: E9:57:C5:C6:BF:8F:94:9D:55:10:A1:E9:70:2C:1F:A6:74:F2:5A:97
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018530BA317393199EC8969A8E3B4B9636B3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6VfFxr-PlJ1VEKHpcCwfpnTyWpc.roa
Signing time: Tue 20 Dec 2022 18:09:46 +0000
ROA not before: Tue 20 Dec 2022 18:09:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:30:ba:31:73:93:19:9e:c8:96:9a:8e:3b:4b:96:36:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 20 18:09:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e957c5c6bf8f949d5510a1e9702c1fa674f25a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:90:13:60:9e:4c:d6:09:36:3c:5a:9b:9a:97:
d1:7e:3f:53:e5:f6:73:04:3d:4c:aa:a5:52:71:95:
4f:ff:c0:21:91:07:00:88:41:c0:28:04:32:c9:2c:
84:7d:24:c8:04:bf:98:4e:d0:c4:3d:5a:35:6e:97:
30:7f:6b:88:d8:80:1e:18:c3:4d:62:84:35:1f:45:
e6:bb:5e:87:ec:f0:64:4a:c6:ae:b7:08:65:92:b8:
15:30:b4:8c:9b:a5:83:bc:c2:f4:d5:91:61:fc:f3:
73:2e:3c:53:74:c3:b3:66:7b:b9:da:59:e4:83:1d:
d3:b4:71:10:b3:1c:3c:7e:e0:ce:9f:dc:e3:ff:3d:
3b:b4:ea:5e:6e:63:fc:96:db:e1:35:5f:2e:d5:62:
e8:53:9f:68:c5:14:91:95:2f:11:00:cc:60:fa:50:
10:0d:a6:32:c6:93:8c:77:d0:e4:33:44:d7:e9:fa:
de:b5:65:4b:50:d3:3f:41:c3:af:5f:01:8c:d7:17:
ed:8d:75:53:36:f8:d8:9a:83:a9:7d:d1:5e:60:90:
37:5a:1a:ab:23:c2:83:2e:33:88:f0:0c:e0:8c:a8:
e0:b0:55:05:7a:30:3e:f9:4d:d6:23:94:6e:40:bb:
ca:7c:a2:5b:76:ae:16:07:40:62:4c:8d:dc:c2:e9:
f3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:57:C5:C6:BF:8F:94:9D:55:10:A1:E9:70:2C:1F:A6:74:F2:5A:97
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6VfFxr-PlJ1VEKHpcCwfpnTyWpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:7c:ab:15:20:b9:2b:20:80:8c:ca:56:33:c1:f2:ee:dd:bf:
4d:aa:12:05:04:74:c4:ea:e2:64:1f:d9:52:0d:f3:74:ef:71:
5b:8f:41:f9:72:52:1e:05:09:51:85:1d:a0:7b:39:84:46:79:
bf:3e:94:07:dc:c6:39:ce:4b:71:04:39:f4:de:8d:16:21:91:
18:92:f0:79:c2:f7:b9:75:d5:1b:94:b7:3d:54:09:cd:32:c6:
3c:ef:44:bf:64:12:ff:46:1b:a3:f8:ac:ab:11:66:8e:fc:e8:
4c:44:62:a4:ed:78:bd:73:de:9f:c3:97:e4:1f:72:c6:8d:7e:
f7:fe:e6:6b:cf:a4:7b:14:12:02:f6:70:a6:d4:a5:87:14:e0:
bd:f7:b1:cb:ce:ec:82:cb:5f:d9:e9:a0:ae:ea:10:80:a4:59:
b4:33:82:51:2f:6d:b0:6e:04:8c:24:9a:05:05:58:24:55:1d:
ee:36:ea:71:3e:6e:8e:8e:d3:c4:ad:dd:95:e4:85:63:cb:4b:
df:9b:a9:c5:28:41:81:16:8e:14:02:97:5c:5b:cc:f8:76:79:
a9:e0:fd:5e:d9:fc:96:47:b7:69:93:3e:5a:fc:f2:ae:61:00:
86:64:e1:2b:4a:67:c6:94:9a:c5:82:d6:84:a0:46:04:21:8e:
e0:d8:d0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:51:12 2025 by rpki-client