Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6gQsgnUpGtlu7-A_4_Cj8FAndWY.roa
File: 6gQsgnUpGtlu7-A_4_Cj8FAndWY.roa (raw, json)
Hash identifier: z363Wwny3BpjzX5jdpRFQqWxN60sKxQQDcFMZsphzPk=
Subject key identifier: EA:04:2C:82:75:29:1A:D9:6E:EF:E0:3F:E3:F0:A3:F0:50:27:75:66
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185138C32B90E136C3A3CD0F27985A11A3A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6gQsgnUpGtlu7-A_4_Cj8FAndWY.roa
Signing time: Thu 15 Dec 2022 02:10:33 +0000
ROA not before: Thu 15 Dec 2022 02:10:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:13:8c:32:b9:0e:13:6c:3a:3c:d0:f2:79:85:a1:1a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 15 02:10:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea042c8275291ad96eefe03fe3f0a3f050277566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:d5:ae:0c:d1:f3:39:54:ea:da:2e:94:0f:
9b:a5:21:2a:9b:d1:51:d8:23:f1:e3:12:21:38:ab:
db:f0:27:2d:ae:89:21:9d:15:b1:e0:90:9a:84:35:
e4:75:7e:47:c5:e0:2f:ea:d2:2f:f8:70:26:d3:e8:
34:24:44:4a:b7:4c:95:24:50:97:9b:95:27:28:55:
c0:60:d1:ad:4b:90:24:58:b7:e0:00:d0:69:aa:3f:
39:af:8e:70:34:ac:72:96:cc:09:73:a1:c3:47:57:
40:aa:1e:c9:5b:65:88:93:47:6b:47:a7:4a:0c:e8:
a4:f5:8e:fd:ca:e7:f0:38:50:31:91:fd:8d:82:23:
36:dc:75:1f:02:d4:88:50:61:95:95:b7:08:88:a5:
4e:3a:c5:71:06:88:30:0b:18:cb:f3:cd:54:ed:72:
ae:e7:7f:f2:63:f0:96:63:5a:b7:da:95:85:0e:d8:
35:61:3f:b2:73:bf:c9:f7:e3:40:57:f6:a3:91:20:
1c:91:b4:a0:a4:0e:7f:ea:72:73:cf:5d:8f:2c:95:
54:55:99:f4:05:4e:76:40:3c:dd:67:5c:ec:a6:92:
f9:2f:7f:72:9c:68:4f:f9:34:eb:9f:91:16:1d:34:
70:28:e0:53:f6:47:3e:32:66:7d:34:79:44:04:40:
cd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:04:2C:82:75:29:1A:D9:6E:EF:E0:3F:E3:F0:A3:F0:50:27:75:66
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6gQsgnUpGtlu7-A_4_Cj8FAndWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:71:81:0d:eb:cf:56:8a:8d:19:73:8a:aa:3d:fa:b5:10:a7:
27:da:4f:18:73:78:1e:b9:e4:3c:7e:1f:53:ee:65:fc:4b:df:
d8:89:76:80:11:0d:05:c4:38:a9:26:66:4e:6f:33:52:22:b3:
07:14:18:31:a2:c7:d0:5c:f2:e4:03:6d:da:50:8a:bf:eb:69:
e8:1c:60:76:24:22:97:c6:57:4e:e6:17:c0:df:23:62:b8:89:
02:c4:9c:18:14:a2:f5:cb:23:2c:2a:41:24:03:2e:90:10:6f:
b8:fb:2d:6d:c3:be:13:dc:41:b0:99:e2:52:f0:83:df:43:41:
2a:46:c1:b1:83:cc:70:98:c8:ef:57:59:4e:28:df:7b:10:20:
84:12:55:4e:06:5d:bd:f8:3f:1f:ff:47:6d:3b:3d:35:dd:bc:
79:9f:54:1a:c9:97:15:5d:44:bb:d3:b8:51:48:be:3d:e1:32:
2b:c5:75:bb:a2:5a:f0:87:ca:da:29:d4:8e:2b:47:a5:25:87:
42:ac:19:b0:04:97:3a:8e:d5:b7:cf:59:11:c5:02:26:f3:05:
98:28:9f:05:a6:eb:ef:87:48:08:b0:b2:40:4a:9b:cc:c7:38:
e6:28:79:23:be:56:98:05:d0:b4:5e:39:70:e1:e3:8a:e6:61:
86:99:75:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:31:00 2025 by rpki-client