Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6vaiWGmC7CarBctWSgnDg9eapYY.roa
File: 6vaiWGmC7CarBctWSgnDg9eapYY.roa (raw, json)
Hash identifier: 1yvsHqFmFtQIp8LyswGHHoDZlL49FmCYyXnsAMa4ZAI=
Subject key identifier: EA:F6:A2:58:69:82:EC:26:AB:05:CB:56:4A:09:C3:83:D7:9A:A5:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6A517614
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6vaiWGmC7CarBctWSgnDg9eapYY.roa
Signing time: Sun 13 Feb 2022 17:08:26 +0000
ROA not before: Sun 13 Feb 2022 17:08:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1783723540 (0x6a517614)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 17:08:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eaf6a2586982ec26ab05cb564a09c383d79aa586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:ed:1f:77:bd:b4:61:f4:e6:87:5b:6b:9f:
41:19:8f:09:87:a6:c0:8c:4d:e3:8d:b4:85:03:14:
5e:c9:4a:df:e8:f5:6d:bf:9c:f9:84:46:48:2c:62:
fe:ea:dc:cf:68:3e:45:4a:c1:03:d0:95:86:86:70:
4b:98:1d:d1:dd:e4:8d:1f:8f:a4:c9:e4:3b:5d:db:
e4:43:b4:4e:a5:57:94:f7:ec:89:3b:d8:2d:cf:45:
a2:35:30:1d:e2:94:b6:57:d5:10:d4:44:22:0a:e8:
13:fe:a1:c7:f6:48:25:32:b7:92:51:6b:d2:b2:4b:
28:a4:09:a2:1f:e7:f8:e0:2b:96:af:76:bc:00:bf:
9b:02:59:41:58:08:77:eb:64:5d:7c:c4:e2:57:c9:
35:39:09:15:34:66:48:5e:f4:01:5a:57:06:89:b8:
0f:c6:c4:c4:28:b2:14:6a:24:c7:32:51:2d:5e:e3:
99:85:6c:3d:6d:e1:1c:3a:2e:87:24:cd:45:b8:a2:
29:8c:cc:e3:fb:80:2d:54:7f:7b:f0:40:27:7d:ba:
98:85:9b:c3:b1:9a:93:cd:90:ef:90:c9:d5:14:2d:
1c:98:24:8f:c2:05:37:fa:28:1d:7e:30:72:1b:64:
59:4b:e4:ea:78:23:8d:c3:fa:fd:b6:0b:91:61:b9:
35:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F6:A2:58:69:82:EC:26:AB:05:CB:56:4A:09:C3:83:D7:9A:A5:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6vaiWGmC7CarBctWSgnDg9eapYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:8b:d0:f1:27:5d:a3:b0:dc:43:a3:94:25:89:06:0b:6e:ce:
68:8c:41:4b:69:17:20:d5:5f:18:75:f5:9d:12:02:b4:82:92:
47:11:75:aa:22:33:26:31:cf:8a:5d:f7:a9:5b:1f:a1:72:fa:
9c:e8:3f:16:76:a2:7a:50:72:45:e4:16:7c:59:67:8f:96:f3:
7c:dd:ca:f5:c8:a2:61:0e:28:cf:8c:28:f8:7f:3a:1c:cb:fe:
c9:c8:5d:76:ac:68:78:1c:79:10:6c:9f:2c:68:89:49:1a:81:
d9:ec:fc:dd:4d:8d:c1:8e:7c:73:fc:9b:8e:6a:65:55:3f:40:
05:50:f2:6e:c5:ce:ec:a8:c3:b7:0d:bb:9d:c8:4a:1d:40:0b:
4d:56:bb:54:8e:54:71:05:f2:1e:65:49:d0:ed:5e:54:1b:72:
ee:14:59:a4:46:d3:c0:46:fe:12:bb:ec:bd:54:97:b3:f4:81:
65:de:9a:bd:71:82:dd:c0:54:53:83:61:53:97:1c:d9:f7:74:
45:ea:c8:28:80:27:6f:dc:2e:e0:f1:c0:08:72:1a:9a:f4:66:
17:a9:32:d9:45:46:41:de:a6:f4:a4:73:e3:5e:7b:63:cc:5a:
10:58:cf:48:97:d3:16:5a:21:49:82:6e:5a:b5:f4:ce:98:48:
d4:e2:df:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:13:44 2025 by rpki-client