Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6_ZudNSuqq_0pCsSkmVRX9rit6k.roa
File: 6_ZudNSuqq_0pCsSkmVRX9rit6k.roa (raw, json)
Hash identifier: GtoVZA4yOw4YHt+ByhfKw3dABThhWMZ6ujs6MBqARfw=
Subject key identifier: EB:F6:6E:74:D4:AE:AA:AF:F4:A4:2B:12:92:65:51:5F:DA:E2:B7:A9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F68B41E81D275F736FBC0F659BAD4A51
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6_ZudNSuqq_0pCsSkmVRX9rit6k.roa
Signing time: Tue 15 Aug 2023 00:14:28 +0000
ROA not before: Tue 15 Aug 2023 00:14:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f6:8b:41:e8:1d:27:5f:73:6f:bc:0f:65:9b:ad:4a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 00:14:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebf66e74d4aeaaaff4a42b129265515fdae2b7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7b:a9:d3:61:a8:83:68:fb:21:5d:a3:d5:da:
4c:e9:55:3c:17:79:9c:02:dc:19:d0:0f:74:33:4e:
76:eb:d5:44:c4:87:09:46:ff:97:25:6a:76:82:be:
2a:0f:d9:a2:c1:6a:84:56:0e:7f:13:e2:25:17:13:
04:6d:84:dc:b0:90:b7:20:8a:f2:26:17:d1:5e:77:
5a:14:3e:a9:77:a8:e6:4e:dd:8d:73:a4:0d:3c:7a:
b0:94:3c:60:a2:b4:b5:f8:50:77:88:a6:1d:eb:dc:
e9:18:8e:31:1e:df:e2:49:49:d8:8e:cb:a1:f8:7a:
4f:80:96:d7:ed:88:86:11:16:f0:a9:6f:07:a2:5d:
e2:34:fc:37:cb:82:b4:20:24:e6:46:70:e9:9f:ba:
47:bd:fc:21:8a:ca:a1:fb:11:e5:fb:ae:07:96:16:
b8:66:ca:80:a9:02:72:0c:f6:a6:11:da:73:bf:c0:
07:d9:17:ad:62:99:59:d3:bb:57:8b:41:b9:e7:36:
b5:da:1c:b9:ea:dc:ae:76:ad:ad:bc:16:57:06:6d:
62:9e:4a:47:98:5d:7a:8c:58:a5:ef:d8:5a:e5:24:
08:b2:c8:a2:15:1b:73:1d:b6:c3:ea:97:7c:91:f2:
99:57:6e:9f:2a:8b:cf:58:c2:9c:12:dd:ea:5f:32:
27:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F6:6E:74:D4:AE:AA:AF:F4:A4:2B:12:92:65:51:5F:DA:E2:B7:A9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6_ZudNSuqq_0pCsSkmVRX9rit6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:2d:cf:42:28:77:24:ed:1a:69:0b:10:9c:0a:c3:3f:b7:fd:
76:25:db:07:86:9c:26:dc:24:39:ef:fa:1f:0a:82:db:8f:a8:
c4:0c:9f:8a:43:89:af:b0:91:90:2d:b4:33:98:0d:db:1c:bf:
cb:65:84:38:5e:6d:e0:3a:b1:5d:07:f7:46:e9:98:fb:35:67:
45:f6:d8:2f:63:01:cb:4b:7e:b6:99:71:74:80:0b:24:29:6d:
bb:c4:52:fd:2c:08:9a:d8:25:10:82:af:aa:6c:4d:62:04:de:
50:eb:3c:41:7f:af:79:d4:16:29:04:1c:cf:52:50:58:eb:ba:
73:cb:28:98:c5:4a:33:e8:34:32:ed:b4:e8:bb:f3:bb:bd:94:
c9:bb:e3:e9:0e:9e:39:65:b3:ec:7c:e2:e5:9c:e1:b7:f8:89:
47:f4:4a:2e:c9:68:9a:e4:c2:c5:27:58:ce:0a:ff:0c:94:18:
63:44:5e:5d:85:12:8b:d9:88:ea:eb:58:8f:5b:01:9c:ff:0b:
82:56:c0:53:d3:f8:ae:4a:49:94:ec:a2:97:aa:2d:ef:43:b7:
07:44:ef:b2:9e:f7:ae:fe:e8:c7:a1:05:c8:c8:7e:83:4a:80:
08:dd:b0:b0:11:ce:7a:1e:03:ab:10:bf:a2:9a:a5:77:fe:dd:
d8:08:27:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:57:48 2025 by rpki-client