Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6iINxOfIf2Mz_D8mqkOEmO1yy0U.roa
File: 6iINxOfIf2Mz_D8mqkOEmO1yy0U.roa (raw, json)
Hash identifier: El1EZjj2VmgRM5czz+a2A/MIOfnLyVX26iw6wKZwx20=
Subject key identifier: EA:22:0D:C4:E7:C8:7F:63:33:FC:3F:26:AA:43:84:98:ED:72:CB:45
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0333664A2349DA8C092D94C434B9326A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6iINxOfIf2Mz_D8mqkOEmO1yy0U.roa
Signing time: Thu 17 Aug 2023 11:13:34 +0000
ROA not before: Thu 17 Aug 2023 11:13:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:03:33:66:4a:23:49:da:8c:09:2d:94:c4:34:b9:32:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 17 11:13:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea220dc4e7c87f6333fc3f26aa438498ed72cb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:82:93:77:ca:4c:1c:7a:9d:51:8a:77:90:1f:
e5:3d:9c:88:85:33:14:a5:26:0f:7c:2f:13:bc:41:
c7:84:f6:de:33:53:4f:c8:34:33:63:2b:40:fb:f8:
e9:69:f9:f8:83:c0:7d:dc:75:9d:1a:b1:a0:9e:bb:
da:d0:ed:64:db:77:3d:20:dc:c0:f6:84:05:6b:5a:
1b:52:f9:1b:2e:16:51:7e:dc:b0:8f:87:b4:bd:e0:
16:d4:f6:c9:a8:0b:0e:db:d7:28:cf:44:7d:fb:6f:
b2:fd:f4:b3:ea:26:87:bf:c8:62:92:f9:5e:55:11:
42:75:d4:d0:a5:5f:3a:07:8c:4c:f7:dd:d9:73:6e:
9a:05:88:10:c0:4a:52:85:ae:ef:0d:4c:fc:9b:5c:
3b:d9:f1:8b:74:f3:07:e7:86:ef:e3:39:1c:0b:eb:
07:98:73:e8:b6:af:bc:4b:d7:69:34:29:d9:12:4f:
02:26:35:aa:d2:59:77:8c:09:9e:fc:03:5d:b2:32:
f2:f1:5b:6a:e3:22:1c:83:e3:20:cd:71:ab:ea:a7:
89:32:e9:c9:e4:53:1f:dd:42:30:69:0d:28:ab:0a:
54:6b:01:c1:61:b0:b4:63:da:7b:1d:ff:32:08:af:
30:80:25:87:f7:dd:c2:f5:74:df:97:93:76:82:f7:
f6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:22:0D:C4:E7:C8:7F:63:33:FC:3F:26:AA:43:84:98:ED:72:CB:45
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6iINxOfIf2Mz_D8mqkOEmO1yy0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:d0:ec:21:54:b6:31:7c:45:3d:05:40:d5:2e:09:5f:4d:8c:
db:29:95:55:d5:f9:7b:6f:4f:69:d7:22:a8:48:f1:8b:98:b6:
7e:69:8b:98:9a:18:f9:c8:10:84:33:77:3d:33:64:d4:89:c2:
be:43:1a:be:75:23:bd:bc:f2:ad:b3:70:66:19:05:26:eb:f1:
1d:86:f4:81:94:f7:36:f3:cc:89:19:e0:52:ee:08:60:ec:cf:
4d:27:69:e4:3d:b6:70:ca:1a:1e:b7:e5:19:52:8b:30:c4:df:
68:26:2d:2e:2a:e0:06:a8:3e:30:b7:31:07:f3:a2:74:61:07:
9f:4d:4d:7f:e1:15:ba:66:3e:09:48:c1:3d:5a:ae:2a:8d:db:
f9:37:21:3c:61:42:fa:f2:0b:af:e0:42:12:2f:3b:b7:d2:86:
3e:4f:a0:55:2d:be:d1:b4:6b:ca:52:2b:ed:bb:08:a5:5a:db:
67:f3:31:c0:54:01:cc:00:6c:66:c3:84:75:c2:f7:ec:0f:7f:
af:8c:2a:f7:c0:97:89:16:0d:08:30:89:c4:2e:45:66:a7:80:
e5:bb:50:6f:18:97:98:b9:04:f0:7a:b5:cd:f4:d0:dc:00:f0:
e0:6b:fa:82:3d:36:b0:c4:f0:46:30:25:61:48:af:b2:0b:c6:
52:a2:cd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:19:25 2025 by rpki-client