Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6h0WlIf5Spf1-KC-AV8DecW6Roo.roa
File: 6h0WlIf5Spf1-KC-AV8DecW6Roo.roa (raw, json)
Hash identifier: QsSCkaG+dMno+C4Ukx1Xb5IqwQlvggIO7N/bLirW7OM=
Subject key identifier: EA:1D:16:94:87:F9:4A:97:F5:F8:A0:BE:01:5F:03:79:C5:BA:46:8A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183DF03DF8FA1DDB4DE3B534B22B7715634
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6h0WlIf5Spf1-KC-AV8DecW6Roo.roa
Signing time: Sun 16 Oct 2022 04:18:36 +0000
ROA not before: Sun 16 Oct 2022 04:18:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:df:03:df:8f:a1:dd:b4:de:3b:53:4b:22:b7:71:56:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 16 04:18:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea1d169487f94a97f5f8a0be015f0379c5ba468a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6f:10:74:ba:32:89:9d:e2:31:b7:32:d4:79:
88:80:a3:50:1c:4c:78:1d:48:e9:f2:f2:6c:52:98:
7d:fd:66:8e:ed:b0:d2:73:0e:83:63:12:b1:09:76:
03:41:4b:7c:bb:bb:0c:42:5d:3f:c1:3c:59:04:5e:
7e:5a:a1:e6:f0:42:67:d8:74:5a:79:8c:f3:ad:e2:
6c:47:5e:97:06:20:06:c9:87:fd:09:0d:79:70:2f:
e5:12:80:9c:54:25:95:c3:0c:dc:a6:bc:3f:fb:98:
e5:17:23:ca:7e:51:fd:85:cf:ee:32:9c:af:8d:e5:
4c:a0:85:80:6e:29:e7:0a:6b:33:76:e4:d0:58:e0:
81:bb:9c:17:be:fc:86:59:4f:6a:35:dc:93:95:df:
73:9a:31:e0:7e:8e:94:fb:6d:e7:3d:99:fa:50:66:
ed:80:cb:d4:23:aa:d8:77:a3:ec:36:b7:0b:e9:66:
e8:83:53:14:bf:2f:fa:68:44:d3:15:7d:94:b0:2e:
dd:df:46:1a:cf:b1:f2:7a:0d:a0:0b:37:29:47:92:
b5:3d:3f:12:8a:12:77:28:38:2b:4e:31:26:98:d4:
f6:07:00:b4:94:c7:21:3f:db:d4:0e:b9:19:67:59:
cf:00:8c:cb:4c:57:3e:85:9b:62:22:11:d4:f0:f6:
e8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1D:16:94:87:F9:4A:97:F5:F8:A0:BE:01:5F:03:79:C5:BA:46:8A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6h0WlIf5Spf1-KC-AV8DecW6Roo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:58:6b:ea:71:cd:b4:37:f3:0f:6d:7d:8b:cf:4c:5e:07:ff:
e6:3d:2d:f5:13:e8:0a:4a:18:41:31:7e:fa:18:b3:01:b6:ef:
e3:97:9f:a6:0a:2f:58:a5:7e:ba:2c:89:91:32:54:9a:65:67:
a9:b7:5b:03:77:86:1f:8a:d8:3e:e4:1a:01:7d:0a:dd:cd:c3:
78:ec:b1:58:f0:b7:fb:2b:b5:ae:c7:0d:a8:f9:6e:4d:a4:33:
35:e0:a5:83:95:1c:10:95:89:98:c3:b3:bc:d0:cb:ec:81:2d:
85:1b:b8:0a:52:40:93:0e:11:e8:c0:b4:01:9a:cd:2a:20:67:
df:e9:39:29:27:ed:29:46:67:d1:ce:dc:77:39:18:eb:ac:b5:
6c:cd:c1:0b:62:11:78:84:72:f1:4f:37:29:75:de:e1:0c:cd:
d8:1c:c9:fa:58:3a:cc:8f:fc:cd:5b:e3:e6:82:10:38:a4:c0:
8d:0d:65:4b:0f:de:49:79:db:71:f4:a0:d8:b4:53:df:bb:af:
df:0d:2a:49:1d:aa:a1:c9:69:00:a9:01:e9:5c:15:75:06:6a:
d5:54:09:8a:85:17:22:ec:8e:a1:3f:51:66:0d:e3:f8:77:b6:
7e:1d:ad:3b:03:3f:dc:16:4e:dd:b2:fa:15:95:5e:ff:d6:7a:
ab:2d:4f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:14 2025 by rpki-client