Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6wqLENQXLCXtoSNpeazCC2s3srw.roa
File: 6wqLENQXLCXtoSNpeazCC2s3srw.roa (raw, json)
Hash identifier: DaLhwtK7Etvw1OyVbV46Ix2uUqriD2ZHFvzna5KQcAI=
Subject key identifier: EB:0A:8B:10:D4:17:2C:25:ED:A1:23:69:79:AC:C2:0B:6B:37:B2:BC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7BBA726E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6wqLENQXLCXtoSNpeazCC2s3srw.roa
Signing time: Sat 16 Apr 2022 07:10:50 +0000
ROA not before: Sat 16 Apr 2022 07:10:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2075816558 (0x7bba726e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 16 07:10:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb0a8b10d4172c25eda1236979acc20b6b37b2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:54:ab:8a:97:5d:63:55:fd:9c:5e:ac:0b:
8b:b3:35:c6:aa:4c:a6:d0:53:01:21:6c:50:a2:c5:
9e:90:ff:61:74:ed:1e:a6:9a:81:fc:3e:55:53:08:
99:54:a4:8b:82:a2:6a:04:55:56:fa:1b:67:3d:e7:
ac:e9:89:6c:07:3d:82:01:96:06:42:db:ce:ca:08:
55:a2:93:3c:89:88:ce:5a:92:a1:40:e4:4a:77:59:
de:31:9c:cc:4a:d0:ac:6d:1c:95:67:af:a5:74:77:
93:ae:da:c2:c9:45:7a:8d:90:f2:68:4f:ca:26:3c:
32:47:9e:1f:a4:d7:a1:8e:50:e3:a9:c3:7a:8f:30:
6b:85:b6:4a:43:7c:b0:fb:13:a5:41:1a:21:1f:42:
1d:a4:85:79:a0:84:63:c5:03:ac:34:7a:36:2d:1c:
31:9d:06:8e:6d:34:74:f7:87:9d:06:68:54:fe:62:
a4:71:2e:db:21:4a:f3:4d:e7:d1:52:7d:39:ae:26:
d8:9b:9d:5f:ab:39:91:fc:3d:dd:38:f8:9b:f0:44:
ec:e7:82:00:0d:ca:87:86:37:62:54:f2:89:c1:f1:
3c:4d:e4:db:d4:56:df:65:7c:bb:da:27:35:30:41:
38:03:63:04:14:bb:7f:3d:0e:f0:b0:6d:83:bd:4c:
f4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0A:8B:10:D4:17:2C:25:ED:A1:23:69:79:AC:C2:0B:6B:37:B2:BC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6wqLENQXLCXtoSNpeazCC2s3srw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:49:5f:61:ea:61:82:e9:81:9e:bb:25:bf:29:42:2d:e5:51:
be:71:42:77:f4:79:bb:b3:d4:48:9d:bb:54:ad:5a:eb:f3:1d:
29:2b:70:a6:5a:5f:42:84:db:18:43:57:4a:73:6f:3f:8f:65:
f2:4f:fe:ff:74:34:65:9f:36:c9:f7:00:92:1b:04:b8:68:8c:
62:37:47:a0:f8:95:b2:dc:b3:6b:f5:7f:27:46:72:de:af:f4:
9a:c5:e2:f9:d5:b6:20:27:73:fa:89:51:7b:f9:57:08:4c:a7:
02:7b:e0:ea:8d:b0:74:08:33:69:9c:bc:30:f8:86:c9:59:b2:
9b:b2:bf:d5:63:f2:b2:a6:63:dc:f8:41:72:2f:da:64:79:2a:
bf:75:16:07:90:6f:c1:49:48:0c:61:8f:d6:d5:21:8b:2b:72:
71:c4:64:cb:7e:22:d1:59:cc:2c:5d:9b:98:8e:50:81:f2:2e:
6d:65:f0:d3:e7:f1:f0:db:c2:89:d7:98:57:a6:39:f9:c9:67:
a6:d6:6b:d4:60:45:ea:ef:56:d5:63:6b:f9:b9:91:1b:0c:8b:
6d:ba:76:aa:60:24:31:ef:2a:c6:59:e0:d6:36:5c:d6:4f:04:
2a:47:08:39:d7:a3:a1:27:16:6b:60:a8:2e:97:d9:f1:05:32:
1e:63:2c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:51 2025 by rpki-client