Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6jb-lrLf2-JbqYwhRm8g-bBpPEg.roa
File: 6jb-lrLf2-JbqYwhRm8g-bBpPEg.roa (raw, json)
Hash identifier: ZO+XIQppwDOgQu6TeNXkxHaiZ/jqgjyZKEyvVAr/AMs=
Subject key identifier: EA:36:FE:96:B2:DF:DB:E2:5B:A9:8C:21:46:6F:20:F9:B0:69:3C:48
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01883F13896314728BBCF1380E3BE02FA154
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6jb-lrLf2-JbqYwhRm8g-bBpPEg.roa
Signing time: Sun 21 May 2023 16:10:24 +0000
ROA not before: Sun 21 May 2023 16:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3f:13:89:63:14:72:8b:bc:f1:38:0e:3b:e0:2f:a1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 21 16:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea36fe96b2dfdbe25ba98c21466f20f9b0693c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:63:63:f3:0d:d2:c6:5a:44:92:47:86:cc:45:
0f:dd:73:f4:40:76:c8:55:03:2c:e8:7f:24:ec:38:
e1:73:18:cd:c8:c9:ff:5e:e5:fe:c9:86:99:db:06:
99:84:00:94:a8:66:b2:e3:83:5e:67:cc:05:5f:a0:
d4:7f:9e:d4:02:25:93:97:d3:e1:96:25:e3:dc:fb:
ee:aa:f8:93:7b:c3:10:31:3a:19:05:14:05:98:14:
79:d4:06:84:72:99:9a:d6:37:40:6f:b5:45:bf:5a:
4c:32:88:f1:69:3f:59:4d:e5:3f:e3:a0:c6:f7:4b:
7f:6a:e4:35:24:99:76:8f:01:61:b2:39:c3:1e:71:
3e:b8:77:74:86:fe:d6:14:ea:f1:c6:4d:5d:78:58:
e9:3d:5d:29:df:b6:77:01:40:be:56:ab:1c:8b:6f:
ff:dd:14:3d:49:a3:38:67:42:d8:d7:a4:a2:55:69:
cb:71:fb:06:90:e2:e4:2e:22:af:05:53:35:d3:e6:
42:d3:b1:63:67:88:8c:6d:d2:e1:b3:74:4b:e0:8d:
fc:77:4a:32:23:dc:2e:e0:39:35:fa:10:52:09:8a:
11:cb:d1:7f:8a:67:c1:e0:3a:67:e1:ef:46:d6:a0:
26:09:45:9e:a6:e8:99:74:93:a3:a2:67:7d:91:fd:
62:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:36:FE:96:B2:DF:DB:E2:5B:A9:8C:21:46:6F:20:F9:B0:69:3C:48
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6jb-lrLf2-JbqYwhRm8g-bBpPEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:68:b5:e4:69:82:29:d1:fa:2d:91:20:c7:43:36:96:6c:5d:
a6:8d:82:30:11:f2:fd:78:7f:43:c1:37:5a:53:75:56:dd:5c:
cf:91:00:ae:1f:6f:51:54:5d:94:43:c3:4a:d0:7f:ea:8b:84:
7c:e8:f3:cb:96:7d:9d:d0:bc:03:52:1d:7b:5c:38:d0:2e:5d:
3e:85:8d:67:9c:30:fc:8d:36:ee:89:c6:09:1e:4d:85:ce:8f:
cf:b0:97:44:b8:9c:40:26:6d:72:cc:d1:8e:ae:6e:67:b6:ad:
7d:0f:58:0d:29:07:93:05:58:38:b0:36:bc:de:73:eb:63:ab:
6b:a2:ba:f9:92:da:6c:1c:8e:01:94:7f:83:32:d5:a0:4f:9b:
35:70:bf:d9:c2:02:7c:fc:95:ae:16:f4:09:2c:68:bc:cf:5c:
95:d4:db:98:86:92:85:57:2e:81:cd:27:c6:7b:f5:47:10:0d:
ec:6b:49:2b:ab:fd:6e:bf:9b:21:b6:9d:a4:db:72:f0:9c:77:
90:b7:d1:ed:81:b2:90:d3:f1:87:7d:6b:44:47:27:b9:8a:db:
8f:9e:c1:aa:46:e2:8c:10:99:91:03:60:8d:04:51:d6:55:5e:
f2:56:65:fc:07:3e:71:7b:d6:fe:f6:6c:bf:6b:79:b0:19:43:
09:71:21:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 04:49:39 2025 by rpki-client