Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6bD0goGg0Itn6DF2H7SAJ2OI89Y.roa
File: 6bD0goGg0Itn6DF2H7SAJ2OI89Y.roa (raw, json)
Hash identifier: 7Zjr4Bl/vmRBXvuPNnfHHOLuwzhwMSEa8/kRtPOlR7s=
Subject key identifier: E9:B0:F4:82:81:A0:D0:8B:67:E8:31:76:1F:B4:80:27:63:88:F3:D6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018985746B03758E8524F08BF48C088AA72C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6bD0goGg0Itn6DF2H7SAJ2OI89Y.roa
Signing time: Mon 24 Jul 2023 01:12:26 +0000
ROA not before: Mon 24 Jul 2023 01:12:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:85:74:6b:03:75:8e:85:24:f0:8b:f4:8c:08:8a:a7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 24 01:12:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9b0f48281a0d08b67e831761fb480276388f3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ea:84:25:a2:6a:b3:8d:59:dc:d1:94:39:a3:
1f:21:a3:ae:48:2b:d5:5f:7b:40:d8:d9:2a:30:3f:
3e:56:8a:20:68:e5:52:53:9b:a1:8e:12:37:1a:71:
c6:fa:3d:4f:e5:99:24:6a:a2:e5:67:a2:6d:25:d5:
a4:76:c4:f7:84:b6:e0:74:67:f6:ab:73:a0:d0:0e:
d8:16:e2:51:fc:8c:60:30:5a:00:98:0e:7b:53:96:
18:11:65:59:fb:f8:85:cf:46:92:bc:54:f8:d9:28:
69:db:37:c8:63:c6:db:2d:50:08:f4:f1:50:76:e2:
74:2c:7c:51:c4:9b:bd:95:ea:d6:95:67:c7:c2:13:
cd:89:8a:61:47:08:67:a9:ee:80:9e:e4:56:c6:76:
c1:8b:d6:60:7c:1e:49:95:91:ec:10:64:e0:70:f2:
8d:a8:2e:54:48:27:00:94:bf:fb:37:82:c6:45:33:
5c:d2:a5:ff:f6:7f:a2:de:93:56:bc:c6:08:88:0c:
45:43:61:08:aa:7b:0f:54:cd:06:60:b2:50:3d:b4:
8c:db:20:b5:0f:ff:6c:76:e0:5d:73:f1:04:ba:57:
88:0f:09:ac:ca:08:60:1d:21:fb:65:21:34:7f:e2:
22:70:f6:78:6c:2d:7a:e8:db:b0:bb:5d:aa:cb:4e:
f6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B0:F4:82:81:A0:D0:8B:67:E8:31:76:1F:B4:80:27:63:88:F3:D6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6bD0goGg0Itn6DF2H7SAJ2OI89Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:4b:17:a0:53:de:da:ed:80:1d:d0:e4:99:90:5f:3c:67:61:
8b:5b:1a:51:80:1e:0b:04:77:a4:19:5d:70:7f:30:6a:ad:81:
e8:2b:ac:cc:d3:7d:e4:92:a0:0e:11:8c:15:27:ba:6b:52:8d:
65:8e:e3:fd:05:5b:46:42:bf:cb:9a:d0:21:b4:0e:c3:c4:f9:
ee:b3:cb:4b:ff:46:c2:3d:f9:85:18:01:d6:69:1e:88:3d:e0:
a1:60:ab:be:f0:38:a3:6c:15:02:e1:b6:71:05:d4:5d:e5:6c:
55:8b:d5:e8:82:28:11:86:29:73:29:e6:91:36:cd:21:1c:90:
29:15:73:5f:40:f9:33:2b:fe:b3:0e:31:2d:8f:e7:7e:63:d4:
6c:5a:97:d7:02:36:cf:7d:e3:33:ba:d2:14:aa:19:4c:b0:55:
86:2a:49:b2:07:44:eb:ff:3a:4b:df:77:67:73:61:54:22:bc:
98:17:d4:e4:72:4b:32:9c:5d:6e:11:a6:73:13:3b:82:75:95:
f0:55:90:d5:be:0c:2b:be:83:ad:b8:fb:40:b6:9a:4e:b9:b3:
0f:ad:7b:3a:25:9f:a4:6d:61:82:09:ca:c7:37:6f:15:a6:64:
08:56:f6:58:99:ee:a6:a8:9e:df:36:df:5d:cd:2a:7e:3f:bd:
ac:c6:d1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:20:57 2025 by rpki-client