Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6ZgAq-O4CJCN-s3E8Vgxc8gSuWg.roa
File: 6ZgAq-O4CJCN-s3E8Vgxc8gSuWg.roa (raw, json)
Hash identifier: 8vO4jIW49kSlJujW3/eudCuksq62qH/AfZu58Y1riRo=
Subject key identifier: E9:98:00:AB:E3:B8:08:90:8D:FA:CD:C4:F1:58:31:73:C8:12:B9:68
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8FADEF4C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6ZgAq-O4CJCN-s3E8Vgxc8gSuWg.roa
Signing time: Sat 25 Jun 2022 10:10:58 +0000
ROA not before: Sat 25 Jun 2022 10:10:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2410540876 (0x8fadef4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 25 10:10:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e99800abe3b808908dfacdc4f1583173c812b968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:87:eb:ab:42:99:72:2a:fb:54:d3:42:9b:e7:
92:3e:0c:30:74:a1:86:e3:e7:e8:42:33:19:36:d8:
77:b0:5f:1f:f3:11:63:9b:51:5d:86:dc:2a:cf:a7:
ed:0c:f7:60:6c:c8:5b:23:02:da:df:f9:9f:dd:92:
54:6a:71:9e:bd:0e:db:c3:52:51:53:bf:66:87:b0:
3a:c1:5f:4e:94:a2:2e:32:6a:03:04:1f:4c:7f:56:
a1:24:bf:09:c5:a7:13:18:73:dc:69:36:70:0a:4c:
b8:83:09:d1:70:9a:ce:a1:d0:da:b4:75:5b:e2:2b:
38:52:97:25:c9:e1:28:81:08:a0:31:a1:9c:cf:c1:
0e:7b:54:b2:d5:27:1f:52:57:c8:71:01:2c:28:5c:
12:f5:9f:c6:da:71:ac:70:68:bf:98:bc:57:00:34:
55:e7:f4:cd:8a:fd:02:51:13:87:9f:ba:3a:64:d8:
ed:df:70:47:ab:bc:82:3b:97:6d:52:2d:04:a9:ee:
d3:14:2a:b1:f5:14:93:b1:d1:96:71:da:a5:f6:f9:
84:7a:32:da:4f:31:2d:f1:bc:c0:59:5b:ac:44:69:
2f:5b:9d:c8:20:81:39:9c:6a:72:99:4e:b5:58:78:
c6:1f:5a:d6:cf:c1:76:44:61:ec:52:06:73:69:e8:
c3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:98:00:AB:E3:B8:08:90:8D:FA:CD:C4:F1:58:31:73:C8:12:B9:68
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6ZgAq-O4CJCN-s3E8Vgxc8gSuWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:d6:b2:a9:55:97:32:08:ae:cd:ba:bf:a6:70:2b:be:ae:e2:
e5:5e:a2:40:d0:86:60:5f:aa:6c:44:e5:a8:d9:b8:30:38:aa:
19:a3:35:8f:c7:f9:7b:29:d4:62:5c:80:a9:54:1b:6d:86:fa:
80:fc:0f:34:68:fa:73:4f:2b:a6:49:bc:8c:fc:96:63:04:c5:
99:45:fd:92:06:92:fa:eb:2b:e2:2e:4b:33:3a:02:b2:6b:1e:
b0:08:32:f7:99:66:2b:f5:4d:e3:ba:1c:27:93:8e:84:3e:89:
56:43:cc:ac:3c:1e:c8:42:4f:b2:8f:f9:24:db:3f:cb:56:4c:
01:e9:ee:68:07:9b:90:c8:3a:f8:99:c4:dd:0a:79:ed:22:10:
04:0b:94:5e:fd:9c:02:8f:86:e0:e9:22:1a:b4:0f:fa:50:4d:
6e:c1:c7:f8:52:78:3c:e7:8c:15:d1:3e:98:20:29:13:3e:a9:
31:7d:d8:3c:d3:c2:43:44:e4:78:a8:bb:f0:ce:30:ff:b8:fd:
d2:c7:fa:d0:17:3d:9b:f0:aa:f2:f3:84:1e:7c:1e:c1:e5:0f:
be:ce:3c:0f:a6:0b:08:ed:8f:76:3c:ba:82:21:c2:8a:5a:81:
f8:e1:71:ac:5c:eb:cc:d2:da:9e:e5:a9:61:63:3a:e8:40:7e:
3b:5d:b3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 02:53:09 2025 by rpki-client