Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6d7eV5C_cIJfpKclLT5VnM9d5eo.roa
File: 6d7eV5C_cIJfpKclLT5VnM9d5eo.roa (raw, json)
Hash identifier: OnxxJdeSTdrejWdJwc4EQfvmhTgh2w5cwb9L/R5juBM=
Subject key identifier: E9:DE:DE:57:90:BF:70:82:5F:A4:A7:25:2D:3E:55:9C:CF:5D:E5:EA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D3D16E3681B70A5127F45A6528C7D392
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6d7eV5C_cIJfpKclLT5VnM9d5eo.roa
Signing time: Fri 02 Dec 2022 17:10:28 +0000
ROA not before: Fri 02 Dec 2022 17:10:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d3:d1:6e:36:81:b7:0a:51:27:f4:5a:65:28:c7:d3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 2 17:10:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9dede5790bf70825fa4a7252d3e559ccf5de5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:95:a0:2b:94:d3:bb:9f:d8:09:f0:16:d1:
e8:08:6f:1a:61:62:ad:ae:f7:2e:06:ef:e1:3f:57:
55:52:11:00:dc:0a:a8:45:16:85:ff:80:e3:fe:3f:
b6:a7:71:05:ff:be:0a:3f:82:d5:3f:e2:0c:c4:3c:
8a:22:12:5e:59:e1:2a:b0:d2:07:84:76:fb:0a:28:
9f:a0:eb:f8:62:c5:1e:ca:42:59:3e:5c:4e:7c:62:
ca:b8:3b:2c:02:eb:6c:3f:e3:2e:d2:74:89:a2:c5:
e7:89:85:0d:bf:b5:c9:be:8a:04:ae:e0:14:66:00:
d4:10:3d:ba:1d:cf:b8:94:d0:c5:77:38:67:07:ca:
e4:3c:d3:d3:73:45:62:dc:d1:7b:d8:96:d7:73:73:
71:90:6c:7c:da:6f:79:05:89:08:9f:19:47:cd:8f:
31:5b:24:a5:12:fd:3e:11:41:1b:96:a6:24:0f:88:
1c:a8:a3:7f:a5:f1:ad:c3:ca:aa:05:52:02:25:20:
b1:46:d4:83:55:1a:69:b6:03:13:80:75:2f:b6:29:
a8:41:15:c7:d3:15:1f:8d:83:10:0f:56:7f:77:b9:
63:1f:3b:37:6e:e2:00:4c:0f:14:ee:fb:9a:18:ee:
38:b5:09:7f:42:f5:91:0a:64:25:4d:2f:4d:3b:14:
0a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DE:DE:57:90:BF:70:82:5F:A4:A7:25:2D:3E:55:9C:CF:5D:E5:EA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6d7eV5C_cIJfpKclLT5VnM9d5eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:38:29:bf:ca:e5:c4:a6:5b:ba:82:2d:b9:fd:29:9f:05:bd:
0c:96:5c:73:3c:0b:5e:0a:00:5f:ab:26:68:4e:7a:e5:28:fe:
60:be:83:16:7d:3d:bf:2e:6a:42:2e:6a:1b:33:2e:1d:ce:f6:
7d:b8:4d:f1:80:e8:96:fc:a5:23:f6:02:ac:91:4e:17:99:a8:
9d:b1:24:30:d9:8b:14:19:2b:f2:e4:58:00:8b:3b:87:9d:3d:
bc:92:80:57:d6:7d:3f:9a:bc:83:ed:52:fe:97:e6:ae:ed:0c:
cb:ee:ac:9b:14:de:90:e8:fa:10:28:e2:b8:10:27:6b:3d:13:
ab:3a:d5:d0:86:2f:ad:ae:fd:07:6d:5a:ff:86:dc:9b:b6:e7:
0c:d3:7e:a1:ee:1f:47:4e:62:7e:78:9d:fe:cd:1c:20:1e:a3:
6e:3b:bd:e9:b6:42:d5:ee:57:d2:0b:73:7f:04:d4:3a:86:cb:
3e:10:6a:da:cb:29:94:24:fa:31:78:f6:d2:d0:6a:38:b6:60:
4c:c8:a7:df:ea:36:7b:77:3d:42:15:ea:5b:07:bc:39:70:72:
eb:c5:77:70:6d:ad:1b:84:7e:56:65:a1:94:bd:9b:44:8f:93:
ce:14:fa:4c:c3:15:80:3f:81:0c:5e:1f:62:30:dd:33:eb:e4:
88:9c:84:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:11 2025 by rpki-client