Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Z4txBI40GhVyA4nMECrI9_6Azc.roa
File: 6Z4txBI40GhVyA4nMECrI9_6Azc.roa (raw, json)
Hash identifier: 2nLnR8P85Fcs4FZPorYak3XDvVLVE9SqZanq0M15lug=
Subject key identifier: E9:9E:2D:C4:12:38:D0:68:55:C8:0E:27:30:40:AB:23:DF:FA:03:37
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C4F8AA22F219DD3CD85161740C420C9D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Z4txBI40GhVyA4nMECrI9_6Azc.roa
Signing time: Sat 05 Aug 2023 09:12:58 +0000
ROA not before: Sat 05 Aug 2023 09:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c4:f8:aa:22:f2:19:dd:3c:d8:51:61:74:0c:42:0c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 09:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e99e2dc41238d06855c80e273040ab23dffa0337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:b1:0d:53:54:fc:fe:17:e9:0c:8e:11:90:
d7:23:8c:67:db:d0:ad:a4:ad:ba:88:80:a5:35:49:
e2:fb:d6:c0:29:40:8e:19:f5:bc:61:1c:9c:a1:3a:
42:f9:a8:5e:f4:d2:b7:c9:58:f5:ae:f8:cd:a6:00:
79:03:e2:64:17:ba:be:fc:7d:ae:7b:0d:2d:e6:83:
99:b1:85:a8:27:fd:a7:a8:86:89:69:4a:70:76:bf:
1d:4c:b5:fb:77:dc:4c:73:e2:1a:ba:c8:df:35:68:
80:f0:dc:94:00:20:4b:4a:a4:6a:cc:a0:80:c1:fa:
73:c6:d0:04:4e:e1:9c:39:c6:2e:14:a9:ab:ab:5b:
73:2b:2f:0f:56:44:ed:0a:ba:ee:2d:7c:d3:f5:bc:
a9:ee:23:70:ff:fa:63:84:72:5d:96:c3:ff:e5:38:
4e:00:0d:79:a9:31:78:12:1d:b7:cc:22:08:3f:33:
8e:a5:8f:09:e1:cf:6d:b5:c8:96:26:b6:62:a4:e8:
dc:51:be:10:f0:d7:1a:c0:df:5b:10:fe:ea:da:be:
d0:71:a5:44:72:e3:60:13:cf:ef:a0:a2:76:08:0d:
f8:18:3b:df:8c:65:1e:bb:76:19:17:73:bb:32:01:
7a:c3:56:04:d4:63:b2:9f:85:ee:50:00:2c:54:bb:
e4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9E:2D:C4:12:38:D0:68:55:C8:0E:27:30:40:AB:23:DF:FA:03:37
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Z4txBI40GhVyA4nMECrI9_6Azc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:3f:51:80:e8:c8:2f:f0:69:50:e5:02:da:ed:a9:fa:c4:21:
ed:2c:e2:56:d4:d6:9d:06:36:cf:fb:8c:ca:43:96:27:97:61:
1a:4f:74:67:61:1a:b4:47:10:13:bd:1e:89:7a:80:87:bd:86:
4e:cc:bc:b3:3c:f1:e0:4a:f9:6f:c5:f3:ba:86:2a:78:15:fa:
07:9a:0b:e3:30:b5:df:ab:30:fa:89:78:a3:9a:91:08:08:c5:
e2:31:22:40:13:18:42:a2:76:de:03:71:1d:37:32:36:ab:c0:
05:3f:31:80:e8:e0:17:0c:ee:f5:f9:43:d1:cd:b4:80:99:47:
a3:bb:ad:d4:cd:a7:a8:3c:95:4d:a7:90:72:03:c7:a1:cc:d5:
5c:b4:6d:93:ef:80:df:ff:46:b4:a1:86:b4:36:b1:70:b5:74:
86:e2:81:ac:e7:c0:f9:c5:8a:d3:99:68:f2:d3:3a:ae:fa:3a:
de:87:d7:e6:72:b6:1f:62:b3:3f:83:95:72:b5:ed:36:40:81:
80:54:f3:58:3c:e3:68:cd:44:06:72:3c:84:9b:62:56:64:da:
5f:c0:99:ab:c3:c0:fd:fc:50:06:3a:7a:fe:4b:d9:8b:d2:1d:
c3:7e:57:cf:cc:7b:16:33:96:38:17:a8:de:24:53:a8:9e:96:
7e:5e:a8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:50:17 2025 by rpki-client