Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6mEoxmeXB37RS_cLehRox7SV5CA.roa
File: 6mEoxmeXB37RS_cLehRox7SV5CA.roa (raw, json)
Hash identifier: 40/2bT8XoK/47JAGxz+Hsmd8A6RmXrPXQwV+H2NWF84=
Subject key identifier: EA:61:28:C6:67:97:07:7E:D1:4B:F7:0B:7A:14:68:C7:B4:95:E4:20
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855A939E4CA83015662F7DD9C15E873B32
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6mEoxmeXB37RS_cLehRox7SV5CA.roa
Signing time: Wed 28 Dec 2022 21:11:41 +0000
ROA not before: Wed 28 Dec 2022 21:11:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5a:93:9e:4c:a8:30:15:66:2f:7d:d9:c1:5e:87:3b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 28 21:11:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea6128c66797077ed14bf70b7a1468c7b495e420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f1:6f:3c:8c:09:b4:cf:ca:91:38:2e:43:2d:
86:e2:6a:bd:39:db:73:36:e0:21:24:d7:f6:1a:10:
ac:49:49:b5:7f:3c:eb:4b:7f:55:07:3b:e6:ff:43:
7e:22:11:fb:be:59:4f:c8:da:6b:34:cd:d2:fb:13:
32:28:a8:50:87:c0:db:88:ea:92:c8:3a:5b:de:6a:
06:c5:02:5b:42:78:90:68:4c:7c:95:44:65:3a:b2:
e7:c3:19:3e:aa:dd:31:0e:4b:b8:be:81:cd:fa:cf:
16:a2:2a:89:73:89:2a:21:32:17:35:34:bc:5e:62:
24:0c:f4:a0:fb:96:25:ac:99:44:a2:87:4c:8a:db:
55:07:95:b9:c4:3e:7d:ef:e8:d4:fd:cc:66:57:1e:
23:29:93:87:f1:e0:83:fc:4a:55:d2:ef:21:ac:0f:
34:b4:5d:9a:c0:6a:f4:d2:97:f3:b5:b3:c5:9d:ca:
96:7d:22:3c:79:80:e1:89:2e:c3:d3:1d:ee:0d:01:
52:f6:ba:e0:2f:b5:4f:84:16:48:24:f8:43:38:b7:
ab:29:6e:de:92:5e:27:7d:f2:47:bd:0d:72:e5:7a:
44:41:50:8e:82:85:83:c9:0f:a4:4a:71:85:d7:6e:
71:f4:97:d1:e5:37:7b:c8:65:5a:82:21:68:0b:e0:
bc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:61:28:C6:67:97:07:7E:D1:4B:F7:0B:7A:14:68:C7:B4:95:E4:20
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6mEoxmeXB37RS_cLehRox7SV5CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:a0:35:3e:f8:2a:94:9c:84:da:f3:a3:4e:84:37:05:cc:4e:
ba:a4:ab:12:15:31:38:ef:a8:c4:db:e9:a6:df:fb:65:9a:98:
17:12:f4:8f:14:f1:27:d7:08:4e:2a:0d:73:ac:39:d2:ff:14:
d1:69:76:99:df:58:5c:b7:48:a4:24:8b:d9:aa:1b:95:37:6c:
63:d0:b9:9c:6b:6a:ea:6a:1d:9b:2a:87:51:e1:1b:74:e7:65:
ae:95:bd:74:aa:5a:36:77:a1:9d:a8:ec:6c:e9:66:af:18:7e:
63:c2:3f:33:64:fd:0e:56:70:96:ba:f8:1b:02:d1:fa:22:f6:
bd:7d:d7:73:06:52:01:b3:47:38:97:d0:95:78:34:bd:79:4b:
e0:48:28:80:40:96:d9:ec:b3:ee:34:5d:5f:a1:4b:7c:e2:47:
74:f9:66:3a:e9:a4:86:7b:e1:65:11:62:f8:2b:c2:57:56:89:
eb:07:bd:23:bf:26:74:6b:63:59:c8:85:39:78:6f:6d:f1:67:
c1:69:de:36:a4:12:54:a1:92:a2:c9:61:cc:92:e7:b3:d8:05:
bf:1a:7b:bc:3e:9f:0b:b4:cd:d1:d9:a4:08:59:5f:7a:8e:44:
a8:0c:61:96:ec:6c:9a:8a:1e:fe:70:5f:5d:65:23:67:8c:78:
4a:c0:48:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:56:26 2025 by rpki-client