Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6nY1iQ2sqOIAyKU11mNyGB5kVQk.roa
File: 6nY1iQ2sqOIAyKU11mNyGB5kVQk.roa (raw, json)
Hash identifier: FLYiJU78zkWLtgyJdBy5rTxs6vurxzHB53Z/VoxUkx0=
Subject key identifier: EA:76:35:89:0D:AC:A8:E2:00:C8:A5:35:D6:63:72:18:1E:64:55:09
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D69D602028880662CE4157000DB1702E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6nY1iQ2sqOIAyKU11mNyGB5kVQk.roa
Signing time: Sat 03 Dec 2022 06:12:28 +0000
ROA not before: Sat 03 Dec 2022 06:12:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d6:9d:60:20:28:88:06:62:ce:41:57:00:0d:b1:70:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 3 06:12:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea7635890daca8e200c8a535d66372181e645509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:32:07:eb:19:c6:96:2b:44:1f:61:51:31:aa:
6a:25:36:2d:50:3d:b4:2b:1e:bb:5a:4c:b7:e2:44:
bd:fd:81:4d:98:ee:23:f4:8d:ed:d9:bd:f3:49:bd:
81:6a:8d:e6:6d:e4:c2:f1:84:74:2e:39:66:4f:2a:
10:aa:21:df:b5:8c:10:42:3b:14:b4:35:97:ca:b2:
e3:66:5d:f1:af:79:28:04:1c:64:00:f1:21:f4:55:
9e:57:35:ca:24:3a:f1:d3:59:58:5f:86:11:6b:d4:
f2:e8:2c:be:00:bb:91:7a:9d:2e:2e:ba:ac:b5:5a:
6c:d8:bd:99:3a:c3:38:76:27:c7:ca:a6:2e:b2:9c:
e1:1b:73:e7:bf:d3:fb:71:83:08:30:92:05:35:cc:
ca:c0:6a:d2:fa:57:0f:c7:71:57:41:80:01:ff:53:
bc:c0:f8:eb:60:d6:92:d2:d4:ab:db:fa:2b:70:fa:
c7:7f:2e:51:b1:5d:52:b6:9b:63:44:00:42:e8:3f:
3b:76:62:50:85:cb:5f:4a:d0:24:cc:95:48:e1:d8:
88:95:eb:7d:ce:47:fe:9e:d5:93:d6:b1:28:fc:60:
15:f7:74:96:c4:df:a1:be:5b:81:39:18:f7:d7:0d:
fb:e8:69:8b:c5:b4:eb:a5:ab:50:fd:64:7c:5c:f1:
27:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:76:35:89:0D:AC:A8:E2:00:C8:A5:35:D6:63:72:18:1E:64:55:09
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6nY1iQ2sqOIAyKU11mNyGB5kVQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:a2:19:61:1c:d1:9d:96:62:6e:0d:81:c6:a4:6f:68:99:07:
13:16:1e:d7:6a:3b:fe:be:2c:b3:32:f8:89:7b:83:2b:38:5c:
4b:0a:63:d9:48:1d:a4:40:1d:5f:19:0b:44:91:cc:f1:38:a6:
33:28:f5:b7:dc:59:49:3c:66:c7:a0:a2:e1:2a:a3:1e:ff:20:
90:54:d1:93:12:11:e9:4d:b1:17:87:7a:70:84:15:f8:e7:42:
9b:af:3a:2d:3e:fc:5e:49:55:1f:63:51:62:c8:e7:ac:e2:80:
5e:ca:a5:8d:ee:54:65:10:74:50:ee:8f:81:68:e9:3d:fc:ae:
8b:93:b1:43:d1:d0:ea:61:77:d9:be:b1:0b:da:59:3d:ea:ec:
59:43:3a:28:83:64:22:db:29:ff:9f:16:a3:c6:5e:b2:54:94:
77:13:1b:fb:7b:4a:e8:7b:9d:b4:ad:8c:57:0c:ac:f8:b4:6f:
bf:07:f0:c6:b9:e4:9e:b2:6c:db:55:e0:9a:ae:3c:f0:a9:cb:
66:d2:9c:d4:af:8e:ba:24:9e:d8:14:80:90:50:34:eb:b5:8d:
f6:83:58:3f:5a:da:46:d0:4f:ae:49:53:ca:82:3a:7e:9a:2f:
92:4d:5a:e4:81:e7:f4:09:21:af:a2:46:f8:34:74:b0:fc:1b:
16:32:62:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 14:30:14 2025 by rpki-client