Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6oWRcgom3I_I6ruDe29v1C0VSVY.roa
File: 6oWRcgom3I_I6ruDe29v1C0VSVY.roa (raw, json)
Hash identifier: 9vjYhj1IAvEwT64mGMsqiuRgWIoF/MIYxfkJD0m4Nuo=
Subject key identifier: EA:85:91:72:0A:26:DC:8F:C8:EA:BB:83:7B:6F:6F:D4:2D:15:49:56
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184775B04E573296A6767C290AB9F4DA51C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6oWRcgom3I_I6ruDe29v1C0VSVY.roa
Signing time: Mon 14 Nov 2022 18:16:04 +0000
ROA not before: Mon 14 Nov 2022 18:16:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:75cf:c8d9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:77:5b:04:e5:73:29:6a:67:67:c2:90:ab:9f:4d:a5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 14 18:16:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea8591720a26dc8fc8eabb837b6f6fd42d154956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6e:b5:89:fb:f7:22:cd:76:72:df:bb:97:05:
0f:66:bb:ed:81:98:ce:50:77:1a:73:d0:71:b7:91:
5b:5a:3a:f4:9f:3b:f9:0b:1e:0a:ff:8f:1e:e5:b4:
5b:4b:87:08:a0:b0:12:7c:f7:0a:ad:eb:33:62:52:
e7:c1:73:df:38:f2:2e:ef:c0:a5:6f:f4:84:53:54:
fc:c1:2b:2f:99:1a:86:f3:9f:bc:02:a5:79:68:5c:
9c:f9:43:66:cc:2d:23:cd:ae:6a:67:67:a3:eb:54:
58:5e:e6:97:55:55:9d:9b:b8:ab:55:2e:6b:b7:94:
d1:e0:26:bf:09:91:2d:90:12:81:e3:ec:ff:0b:a2:
5e:7b:02:61:7f:cd:ca:17:88:10:ae:aa:66:8a:ff:
86:1c:eb:67:aa:cd:eb:ba:3c:2b:7f:be:98:ed:bf:
7e:58:eb:e3:49:42:2a:8f:19:96:2b:05:b6:d3:33:
2d:18:e0:a4:de:a2:3f:ca:3b:9e:64:1b:aa:9f:12:
6d:3a:35:1e:9d:c8:9f:5c:f4:ae:99:32:22:c8:37:
b7:7e:f7:dd:bd:91:56:7f:ae:58:39:7f:9e:df:6f:
40:17:e0:1d:f0:cb:14:5c:57:eb:9d:58:46:e8:eb:
0f:75:ab:9d:a9:01:a0:52:dc:b1:d5:54:13:51:4c:
37:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:85:91:72:0A:26:DC:8F:C8:EA:BB:83:7B:6F:6F:D4:2D:15:49:56
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6oWRcgom3I_I6ruDe29v1C0VSVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:05:6e:20:f6:36:2a:fc:b6:6e:f9:c7:6e:2f:d9:53:e4:b4:
78:20:ec:01:20:89:c9:4e:0d:8e:cf:3f:79:eb:3d:d5:30:97:
d8:18:b9:41:94:d3:ac:03:48:10:ed:db:0a:53:47:03:c8:e8:
73:b4:25:ee:1f:70:1a:4c:07:09:60:f7:a5:49:e3:bb:d2:c0:
6a:3d:2f:59:8d:0c:6b:85:42:2b:37:85:d1:72:35:90:4a:7d:
68:64:01:ae:88:4b:c2:e0:0e:68:b6:dc:db:b8:e8:82:90:f9:
b6:c5:c1:bc:b3:b9:53:4e:6a:80:c1:8b:a9:75:26:81:52:0b:
82:de:0d:63:b4:d2:19:4b:f8:2e:da:96:05:c7:0f:7b:ba:fa:
d4:e9:0e:dd:50:ad:7c:9b:03:15:2b:aa:39:ce:eb:1c:7c:43:
d8:af:3c:7e:52:68:07:ce:b2:6f:80:da:72:75:67:d5:c7:1f:
70:6a:2b:14:15:4c:16:cc:d6:20:3f:d2:f3:db:ad:02:c8:02:
fe:46:a2:b9:57:86:e9:14:9f:c6:3b:77:3d:ee:04:43:7e:e2:
52:d3:62:22:0a:73:68:c3:03:6b:f7:94:66:61:c2:e4:9e:a8:
1e:ec:33:5e:87:11:48:fb:80:8e:20:4c:6c:5d:11:43:dc:01:
91:33:2c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:02:09 2025 by rpki-client