Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6cLiVla0RwZ_lSNyAMHiaxYVkeg.roa
File: 6cLiVla0RwZ_lSNyAMHiaxYVkeg.roa (raw, json)
Hash identifier: vnS/S5GCGm8/5V2GwpntloqsoTlK4GE1ZQ1qLT+0fqQ=
Subject key identifier: E9:C2:E2:56:56:B4:47:06:7F:95:23:72:00:C1:E2:6B:16:15:91:E8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B54F9280184C9BA2716C0D802B37D6F8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6cLiVla0RwZ_lSNyAMHiaxYVkeg.roa
Signing time: Wed 02 Aug 2023 08:13:58 +0000
ROA not before: Wed 02 Aug 2023 08:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:4f:92:80:18:4c:9b:a2:71:6c:0d:80:2b:37:d6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 08:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9c2e25656b447067f95237200c1e26b161591e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cc:cc:fa:db:bc:ce:c7:75:ff:63:36:15:a1:
62:fb:17:fb:73:70:63:0d:5c:5a:ef:ea:5b:9e:b5:
d5:c7:18:15:df:54:14:17:33:3c:5a:3e:2f:e7:23:
4e:c7:2d:57:d0:24:b7:55:93:9d:4b:e9:ce:6f:eb:
ab:bd:50:eb:08:b0:81:5d:05:86:90:99:c5:87:b8:
2e:c5:a1:cf:dd:c9:64:92:7a:73:e8:1e:1e:2b:9d:
ac:28:db:d5:5c:fe:aa:8a:70:d5:fc:d1:91:19:2c:
61:ec:a1:49:c6:55:48:fa:cf:c7:7a:c0:8b:15:63:
b8:61:80:ad:78:b0:f7:58:23:98:a4:88:ec:27:e9:
fb:b3:b7:7b:4f:83:b5:e0:65:4f:94:5b:9d:61:15:
51:06:73:76:c6:b5:5d:28:fe:2d:65:ee:c8:df:da:
f6:9a:da:77:d6:b0:f3:0e:79:24:49:d1:ec:53:b5:
f6:ba:95:6b:95:5f:09:f3:34:f3:51:c4:aa:dc:c4:
2c:1a:5b:52:9e:3d:99:ce:88:96:dd:e9:b4:a4:a6:
31:84:74:25:00:b6:40:a3:45:9a:ce:8e:a9:a0:b1:
09:8a:75:bd:3e:9a:18:ee:3f:ed:25:cd:ca:0b:eb:
98:6c:4a:bf:0c:63:fe:28:4b:d3:01:5b:2b:80:ea:
f0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C2:E2:56:56:B4:47:06:7F:95:23:72:00:C1:E2:6B:16:15:91:E8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6cLiVla0RwZ_lSNyAMHiaxYVkeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:3d:c9:20:b9:37:46:6c:48:37:bc:37:81:85:22:79:9d:fe:
a2:d6:d8:ec:ea:3f:bf:40:89:8b:26:f0:55:57:18:9b:01:98:
b2:35:d7:0a:19:77:4e:3b:5d:39:1b:97:e5:a5:d1:a8:61:a3:
20:02:e6:92:d2:ee:5b:fe:be:f4:51:b8:c8:c8:5e:33:aa:dd:
8c:82:3b:09:b1:29:2b:6f:b5:c8:99:22:f3:e2:7a:ff:00:57:
14:b6:a4:ab:21:97:c0:bb:6f:d8:bf:bc:c2:9d:42:0a:2b:48:
b1:05:9f:28:46:e4:4a:7f:c2:db:a5:61:d1:73:dd:0f:20:c3:
a0:4a:9d:4d:8b:33:d6:21:a7:10:c9:98:a5:5d:74:ad:d1:79:
24:18:d3:9a:e9:10:93:c5:81:45:c8:23:76:ff:07:61:61:23:
00:f9:b6:63:26:50:a1:c2:14:b9:9a:83:69:ff:5a:f2:f9:16:
53:a3:02:13:ce:79:01:f5:a9:a0:a4:38:a2:67:97:ef:db:0f:
37:fc:b2:d6:be:d9:aa:e4:40:18:78:74:46:45:43:ad:6a:9d:
6e:54:bb:be:7a:cd:91:f3:8b:c5:b7:01:b0:97:23:dc:96:4a:
57:16:c5:66:f0:4d:ce:42:e2:4f:9c:06:96:37:b0:94:ea:a9:
7f:6d:fd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:33:49 2025 by rpki-client