Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6q7c0wDvQE_PuIKlFlanI1fT_EM.roa
File: 6q7c0wDvQE_PuIKlFlanI1fT_EM.roa (raw, json)
Hash identifier: 0Qh+ilieG6N9HOFaiJmD77eFtarY10D1WOtTqkm2YtE=
Subject key identifier: EA:AE:DC:D3:00:EF:40:4F:CF:B8:82:A5:16:56:A7:23:57:D3:FC:43
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01857D5023182C9507A04FA7AD8901305B00
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6q7c0wDvQE_PuIKlFlanI1fT_EM.roa
Signing time: Wed 04 Jan 2023 15:04:41 +0000
ROA not before: Wed 04 Jan 2023 15:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:7d4f:b206/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7d:50:23:18:2c:95:07:a0:4f:a7:ad:89:01:30:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 4 15:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eaaedcd300ef404fcfb882a51656a72357d3fc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b6:2f:51:f4:2f:f5:c6:32:21:28:52:59:c2:
15:0a:f7:84:50:d5:ff:05:47:bf:aa:be:c9:18:c8:
70:6e:16:fb:e9:15:07:01:11:30:98:1c:09:f0:6a:
a4:c8:f1:40:71:44:d3:4e:16:81:b6:80:51:3a:bf:
be:fb:44:8d:b3:bb:79:42:e0:9a:fa:8d:aa:f2:e8:
96:b3:7d:86:8b:4f:47:28:4e:11:b5:e6:4b:4e:87:
e7:98:6e:c4:d7:29:3c:5d:03:ce:1a:99:e6:ea:0a:
4f:ee:05:c1:0a:86:14:f5:a0:23:6b:79:a6:e4:18:
da:69:9e:25:2e:3d:f9:db:78:b7:6c:08:5a:87:90:
f8:32:1c:03:4d:8e:28:85:4f:77:37:da:8d:87:df:
64:58:55:dc:8b:a0:67:91:f2:49:bd:1d:d5:dc:85:
ac:8a:bd:42:e1:52:74:64:31:5a:bd:ee:b9:e3:02:
53:8a:99:78:e9:58:a7:a3:4c:24:ea:99:6f:af:19:
89:a8:db:e7:01:06:31:aa:b5:38:d5:40:db:ee:2f:
5e:43:d9:14:14:8d:53:f1:be:47:b4:84:93:e8:8d:
c7:37:a3:e2:59:8d:3f:05:45:df:92:7c:fe:29:73:
ca:4f:0c:04:4f:be:a7:21:c3:02:d1:47:ca:8b:43:
07:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AE:DC:D3:00:EF:40:4F:CF:B8:82:A5:16:56:A7:23:57:D3:FC:43
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6q7c0wDvQE_PuIKlFlanI1fT_EM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:38:18:28:c6:ce:a2:2b:c0:c8:1e:ee:a1:a8:cb:16:84:4d:
40:8d:5a:b3:f4:f7:6c:a7:c6:9a:8b:7c:81:64:59:46:14:99:
fa:a9:b0:ff:35:33:f4:8b:4c:76:c4:ef:42:e6:75:d8:32:8a:
70:78:9e:ce:67:13:b8:87:66:96:cd:45:16:14:30:78:ef:e2:
ad:a1:83:f8:32:b3:5a:41:4a:3a:b7:59:09:7d:c1:9c:9b:be:
09:46:f7:cb:4b:b2:e7:9e:07:af:44:cd:0d:1b:07:b0:fd:99:
e3:ec:74:82:2c:e2:19:3d:8b:0b:1c:a5:5b:aa:ef:df:f0:35:
14:d7:bd:b7:42:bd:11:65:a6:fb:c8:e3:d1:38:ef:fd:3c:f4:
2a:ec:27:14:8b:7a:aa:c6:36:ea:a8:50:89:ca:a4:01:33:9d:
db:bf:5e:40:06:72:43:c2:09:0f:18:02:0d:4d:6f:81:95:90:
06:f0:a4:c8:58:52:06:89:61:02:28:bd:69:8b:4d:27:34:c0:
68:dc:2a:19:3e:6f:20:15:71:8d:33:8b:8f:cc:ce:86:fb:6a:
47:91:2e:81:ae:eb:cb:12:41:04:63:6d:d6:c9:08:e2:94:e0:
0d:ae:5c:fc:3b:32:ff:55:79:da:6c:06:5a:96:9a:6f:c0:ab:
35:2f:4d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:23:31 2025 by rpki-client