Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6hMR5t00Ym-pDrYQOk44QAQjBXQ.roa
File: 6hMR5t00Ym-pDrYQOk44QAQjBXQ.roa (raw, json)
Hash identifier: qZHxbxdcyyzyTDoPXJadtCt5FTAw64l72Qi3nH8PiLY=
Subject key identifier: EA:13:11:E6:DD:34:62:6F:A9:0E:B6:10:3A:4E:38:40:04:23:05:74
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183756B481E82B86A8054D53415790F6F74
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6hMR5t00Ym-pDrYQOk44QAQjBXQ.roa
Signing time: Sun 25 Sep 2022 16:11:48 +0000
ROA not before: Sun 25 Sep 2022 16:11:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:75:6b:48:1e:82:b8:6a:80:54:d5:34:15:79:0f:6f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 25 16:11:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea1311e6dd34626fa90eb6103a4e384004230574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:06:a2:69:30:26:b8:3f:a5:b6:a6:ac:ac:49:
d6:4e:21:d9:27:13:f0:14:13:49:ac:e2:95:7c:c8:
a3:03:9d:31:de:ae:21:47:28:9f:8e:b1:5f:71:e4:
02:bd:23:58:42:38:0f:c1:e3:bc:99:03:86:a1:17:
1a:08:c2:2e:a2:37:55:ae:d5:76:a4:d4:e8:44:f0:
68:38:d7:e9:17:d5:4f:04:b0:36:42:cc:8e:cf:37:
e8:00:95:aa:60:22:55:fb:2d:c7:29:49:fb:ae:58:
df:0b:ae:8a:90:70:60:19:7a:f1:05:25:8a:09:d5:
b1:9d:4c:ef:92:90:09:ff:50:8d:c6:6c:07:ed:0d:
e2:bd:ce:d1:7b:a9:c3:d3:44:2d:64:ed:5b:41:19:
1a:ab:ad:13:8e:f6:e4:f7:31:4e:13:69:17:45:4a:
37:67:ec:00:c9:02:c3:e7:e3:8b:8e:31:ab:7a:e2:
af:35:44:d3:76:24:8b:73:a8:b8:70:ca:e4:d2:4b:
7d:aa:b9:c0:0a:bc:a4:a8:66:30:ab:39:a4:b7:5a:
84:55:54:4e:fb:03:2b:87:7f:1b:b1:c6:c2:0a:4a:
58:57:f2:9a:56:04:38:ca:ef:8c:98:a5:08:9d:f3:
3d:b8:d1:28:23:ef:ba:d4:09:b8:4d:ba:0d:65:ea:
5c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:13:11:E6:DD:34:62:6F:A9:0E:B6:10:3A:4E:38:40:04:23:05:74
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6hMR5t00Ym-pDrYQOk44QAQjBXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:f1:4e:f7:54:7f:1a:ef:49:90:35:b8:fa:cf:15:9d:92:01:
88:80:47:01:21:9f:f2:75:84:91:0b:40:e2:82:14:10:58:a1:
84:7b:9e:18:e0:36:c1:23:17:13:75:ab:fa:64:90:aa:04:df:
df:4e:48:26:a3:13:c6:c4:40:8b:35:7f:8c:2e:df:ea:46:ee:
0c:6f:ed:7b:5e:0a:79:5b:69:b8:69:87:8b:67:23:36:1b:e6:
ff:cb:fa:6b:d8:b3:58:3d:dc:31:e3:3a:d8:fa:d8:0b:42:f8:
0b:87:0a:59:17:42:85:b4:b9:3c:a7:c0:75:39:e6:a7:3f:53:
cf:99:c9:ff:80:4d:e7:52:b1:6e:d3:d0:26:18:3e:93:6f:cd:
be:c3:20:c0:2e:b1:6f:dc:be:42:4f:3b:15:f3:ab:1f:aa:7e:
63:d1:cf:8b:09:a7:22:f9:a2:83:dd:95:23:7a:16:fb:38:15:
42:32:3b:f6:74:1c:53:64:b2:36:0c:f9:cf:9f:88:7e:93:c7:
7c:ae:df:ce:71:f2:79:99:ea:44:97:12:78:a1:38:a2:e9:4e:
3d:de:c6:dc:ea:ea:27:6c:17:3c:e6:3c:5e:17:1b:d5:b0:1b:
b3:e8:34:8d:8a:38:c4:d6:f6:33:b4:c5:a6:09:a1:4d:75:a2:
d2:6c:60:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:25:35 2025 by rpki-client