Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6vzRa2etPXhF62Ze9ei1iD05ICY.roa
File: 6vzRa2etPXhF62Ze9ei1iD05ICY.roa (raw, json)
Hash identifier: P+2B6NeL8198wCcs0/ldkgr0jsRW99aYqJKffoLgrsI=
Subject key identifier: EA:FC:D1:6B:67:AD:3D:78:45:EB:66:5E:F5:E8:B5:88:3D:39:20:26
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D88AD98F0B5D6B2541F204DC5C514A4D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6vzRa2etPXhF62Ze9ei1iD05ICY.roa
Signing time: Sat 03 Dec 2022 15:11:29 +0000
ROA not before: Sat 03 Dec 2022 15:11:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d8:8a:d9:8f:0b:5d:6b:25:41:f2:04:dc:5c:51:4a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 3 15:11:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eafcd16b67ad3d7845eb665ef5e8b5883d392026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:6a:6a:06:37:46:0f:5e:55:2d:33:42:93:
8b:4d:2f:65:ca:26:31:42:9d:99:20:3c:02:9c:a0:
b0:5c:5c:f3:15:bb:67:f6:98:88:39:cb:64:73:3c:
54:6a:35:c4:15:da:23:8d:16:1b:bb:6b:e2:3c:c9:
3b:6b:70:f2:e8:11:4b:c5:e1:19:5a:5d:80:7a:a2:
02:30:78:39:b0:04:50:b2:26:8c:3a:db:c7:9a:06:
57:ac:10:13:1e:a0:7f:be:ca:e3:05:cc:a2:92:a0:
28:9d:46:fa:92:81:b3:de:71:56:8b:f8:a2:37:4d:
e6:9d:3d:c1:ad:e9:2e:cf:8a:a7:18:1a:5c:68:fb:
be:cc:5c:fc:88:9f:08:f9:32:d2:46:a9:77:fb:de:
18:73:28:2b:71:a5:f4:23:49:75:0a:3c:c1:df:4b:
b1:94:fd:c8:2c:a4:7d:13:a8:11:a9:ed:b7:11:33:
36:75:45:92:37:f9:44:be:53:49:cf:93:44:e2:fb:
ea:0c:68:e3:5c:f4:89:f4:06:ed:03:d7:a5:1b:07:
5a:df:e6:31:eb:ce:c1:13:03:d0:f9:9f:49:80:82:
f7:2b:b6:08:f4:a4:48:df:07:0d:99:1a:1f:12:0e:
0c:d7:df:77:51:60:de:41:8d:3b:d7:5a:7d:c5:00:
49:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FC:D1:6B:67:AD:3D:78:45:EB:66:5E:F5:E8:B5:88:3D:39:20:26
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6vzRa2etPXhF62Ze9ei1iD05ICY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:00:12:53:ee:f5:66:73:54:32:07:bc:6b:a1:4a:43:d3:a6:
18:b1:4c:21:25:df:bb:ca:ed:80:31:84:50:ea:47:89:e1:61:
6a:39:0d:72:3d:fc:75:f8:eb:62:e6:95:ce:f2:62:92:63:69:
db:bf:a7:b9:8a:60:57:0d:10:27:e7:68:25:4f:b5:0d:6f:93:
e1:3a:9e:3c:4a:40:49:04:5d:a6:e0:d1:14:be:27:e9:88:e8:
e0:77:8d:b3:be:f4:8c:f1:6f:c3:00:1e:d3:6b:1d:b8:75:6b:
f1:1e:6b:c6:db:dd:d8:28:0f:71:18:8b:59:31:ac:2a:a9:5f:
0a:96:0c:b5:0e:d7:f3:e4:b4:a9:c7:24:6e:99:2e:fc:f7:59:
35:b1:ab:37:ba:d1:b3:50:8b:06:87:7d:6b:76:a3:a3:bb:d3:
bf:03:30:40:62:b7:e9:dc:02:d7:01:55:53:99:0a:81:81:40:
10:31:d0:39:cd:8c:94:ec:1b:33:d7:5c:8d:b9:5c:09:1a:c6:
8c:f3:17:eb:76:77:e6:c5:47:85:7e:24:12:29:4e:cd:71:75:
5d:41:c5:41:42:b0:b9:c4:7d:9c:21:a4:4e:09:84:80:11:01:
3c:7f:64:e3:73:d4:8a:d4:ba:cd:29:d2:92:6d:10:ff:5c:3e:
be:43:00:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:13:15 2025 by rpki-client