Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6WCWY5Js7YNsJ9w_6Sz-je8yxzk.roa
File: 6WCWY5Js7YNsJ9w_6Sz-je8yxzk.roa (raw, json)
Hash identifier: EfyQI8IxknSRvoKCgYu7dobH5J6y5PnSSdDwicVD16k=
Subject key identifier: E9:60:96:63:92:6C:ED:83:6C:27:DC:3F:E9:2C:FE:8D:EF:32:C7:39
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A6B7C0349B62CEE0B70354B16A84901D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6WCWY5Js7YNsJ9w_6Sz-je8yxzk.roa
Signing time: Sun 30 Jul 2023 12:13:27 +0000
ROA not before: Sun 30 Jul 2023 12:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a6:b7:c0:34:9b:62:ce:e0:b7:03:54:b1:6a:84:90:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 30 12:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9609663926ced836c27dc3fe92cfe8def32c739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:23:16:27:bd:76:4e:42:8b:1a:84:fa:1d:14:
bd:c5:36:2c:4a:86:3b:e8:4c:4c:d1:06:5a:68:93:
b3:74:ab:5a:68:d4:36:54:55:fa:d5:27:ab:a6:df:
e9:cf:d5:f9:81:ff:1a:91:5a:a2:a5:02:c6:eb:77:
2f:ca:96:db:29:eb:71:e3:2a:c2:f6:7a:7d:e7:8d:
e8:93:ad:20:19:8d:5e:a4:2b:21:9a:d7:2e:4f:fd:
e0:04:a9:5e:4c:28:89:32:c6:b4:f9:85:55:a0:10:
76:04:b0:87:04:54:c3:e8:78:94:7d:23:83:f6:c0:
2b:57:95:f3:40:27:bc:b9:9c:e6:d9:e0:4c:49:f7:
d2:e6:c9:d8:b8:e0:eb:39:66:8e:f0:db:9e:ea:99:
3c:c0:d6:88:02:c1:a9:d4:7d:6a:41:d7:4b:22:c6:
e7:97:6c:b3:bc:4e:84:91:4f:af:da:74:1b:55:52:
56:eb:8d:87:cc:48:db:05:ff:e9:32:4d:d5:46:c8:
de:39:a3:24:d7:46:cf:45:db:21:6b:8f:17:0f:62:
d2:65:04:50:cf:dc:84:d8:5b:d1:cc:fc:31:15:1f:
6c:d8:37:25:cb:65:7d:f0:b9:ed:9d:69:01:2d:52:
37:53:97:17:4d:2f:b1:25:45:c7:f1:ee:96:12:fe:
6a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:60:96:63:92:6C:ED:83:6C:27:DC:3F:E9:2C:FE:8D:EF:32:C7:39
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6WCWY5Js7YNsJ9w_6Sz-je8yxzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:ac:b0:65:08:d4:5f:3c:2c:d7:40:d0:3a:76:f4:1a:5e:8d:
b9:15:f4:9b:10:05:8c:69:bf:3f:31:15:7c:41:0f:fc:75:ad:
25:01:3b:1b:e8:75:1d:e0:9f:a9:33:9b:3d:72:2b:d4:0b:f0:
7a:7d:1c:30:e0:15:7d:bb:7e:8b:d6:4f:5d:33:f1:e8:6d:84:
d2:83:be:ca:55:d2:1d:f0:f6:8a:af:55:3b:fd:80:d0:01:52:
73:cf:1a:15:af:fb:54:2d:9e:6d:42:50:90:39:c9:f5:5a:18:
e4:42:47:8a:6b:74:c9:70:27:ee:5b:22:71:b0:09:86:ac:12:
77:be:dc:8d:74:a7:60:d1:82:ae:af:eb:9b:d7:65:c4:51:56:
13:ff:df:82:8f:3e:a2:75:29:f3:76:17:f5:a1:42:59:4e:24:
7a:81:87:f3:fa:d7:26:05:0b:c8:d9:37:79:c9:59:66:36:bd:
65:7a:a4:78:51:2f:06:99:d1:5a:bf:88:45:71:18:4f:54:f0:
dc:46:88:41:b9:66:d8:5e:a9:5f:cc:97:51:17:5e:6d:07:24:
61:e4:db:10:65:92:de:3c:1c:c1:0d:12:71:1b:b9:e6:a4:1a:
d0:62:47:19:83:de:a3:a2:1d:01:3a:18:23:10:6c:fc:cc:38:
ff:9d:d2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:20:19 2025 by rpki-client