Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6xeRaqq6sTGqPXAVVy-SvUNZTLY.roa
File: 6xeRaqq6sTGqPXAVVy-SvUNZTLY.roa (raw, json)
Hash identifier: GOfD8RlP5RvhpmZCbfl07a1NIyslah+hgsmuCR/wbtE=
Subject key identifier: EB:17:91:6A:AA:BA:B1:31:AA:3D:70:15:57:2F:92:BD:43:59:4C:B6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01856DE1A25C754E4DC973C1ACA475756658
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6xeRaqq6sTGqPXAVVy-SvUNZTLY.roa
Signing time: Sun 01 Jan 2023 15:09:41 +0000
ROA not before: Sun 01 Jan 2023 15:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e1:a2:5c:75:4e:4d:c9:73:c1:ac:a4:75:75:66:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 1 15:09:41 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb17916aaabab131aa3d7015572f92bd43594cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:37:b1:c8:3e:50:51:b6:b5:27:7b:94:6d:
12:9d:a8:e2:ee:ca:a5:a4:76:21:48:ab:59:f2:8b:
dd:3e:dd:57:cd:e2:10:f7:56:4b:d1:d6:e4:83:9c:
0b:a9:2f:28:b7:19:44:3b:ff:ad:c3:0a:bd:0b:7e:
c3:ab:e2:9f:e7:72:64:4b:52:aa:9f:9c:93:cd:cc:
cd:b7:38:91:2e:96:b8:43:36:0b:19:a1:29:ee:11:
0f:12:3d:6a:49:d8:7e:c5:7f:11:f5:da:92:83:d7:
5d:4e:7c:b4:63:c9:77:88:e8:0d:90:c3:bf:2d:52:
5a:5c:d5:08:b9:c1:7e:88:12:2a:62:7d:79:74:7c:
d4:8e:ba:5c:bd:6a:d7:3e:ed:33:97:91:7d:b7:cf:
a0:d2:0f:e8:0a:ea:56:28:50:a3:9f:ea:04:ad:41:
18:33:eb:a7:d2:60:58:9f:b8:bc:9b:2f:89:b7:39:
d7:4d:68:a1:a8:fa:4b:15:54:50:cd:f5:63:6b:17:
91:61:3f:ef:7f:5f:41:9d:b6:41:24:05:09:17:0f:
d0:18:84:c0:29:6b:68:45:fe:d8:d1:23:df:51:20:
5c:cc:26:29:c9:33:8e:7d:0f:f5:ee:27:2b:ac:2f:
98:6a:7d:46:62:4d:0b:35:4f:7b:02:16:1b:79:98:
4f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:17:91:6A:AA:BA:B1:31:AA:3D:70:15:57:2F:92:BD:43:59:4C:B6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6xeRaqq6sTGqPXAVVy-SvUNZTLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:6b:90:0c:fd:22:1c:2e:e8:ec:99:a5:a9:4e:ac:fc:fe:c1:
51:63:1f:44:f0:47:5b:0c:c7:ea:0c:c7:73:6a:f4:1f:55:d0:
31:f1:60:ad:0d:70:94:38:5e:fc:45:5f:6a:59:73:48:1b:80:
46:42:01:43:a9:85:40:14:40:88:f4:f7:4c:55:8e:6d:30:14:
bc:c1:bb:23:1c:e0:dc:4c:da:ad:d9:42:c4:11:4e:22:f5:e9:
8b:c1:5f:ff:0b:64:89:a8:53:c2:e2:bb:55:67:70:cb:d6:9c:
dc:e5:3b:c5:f0:d5:88:fb:27:f8:ca:ba:d9:2b:11:0b:af:2b:
89:be:54:05:53:ce:17:ea:b0:e2:b5:bb:74:e8:3d:49:ef:68:
23:59:89:c0:21:8e:e6:eb:15:03:d4:66:d5:56:a1:7a:de:12:
ba:61:4f:38:2c:24:17:da:48:b4:9c:e4:1d:ee:85:17:cf:a0:
cf:23:24:a4:e5:ba:f7:78:6f:b2:6e:fa:c6:a4:9f:11:20:d2:
46:a9:fc:b7:a3:78:9b:1b:64:94:98:ff:d5:bb:4f:d2:8f:bb:
2f:0c:eb:13:3e:9a:04:4d:c0:09:3a:2d:97:d4:79:ce:a6:05:
17:86:a9:8e:43:83:38:5b:51:af:ed:59:8e:97:d5:c9:fa:7f:
50:73:c0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:25:22 2025 by rpki-client