Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6z8-RIKHzgqGzuc_JFGIQGeiBjU.roa
File: 6z8-RIKHzgqGzuc_JFGIQGeiBjU.roa (raw, json)
Hash identifier: 50v827+iYpFFE39N9FWrl+IUNA5tXrKDO6L6kXvOyyU=
Subject key identifier: EB:3F:3E:44:82:87:CE:0A:86:CE:E7:3F:24:51:88:40:67:A2:06:35
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01856BBC50682009AF98D7BC1F33AAE4FBE4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6z8-RIKHzgqGzuc_JFGIQGeiBjU.roa
Signing time: Sun 01 Jan 2023 05:09:41 +0000
ROA not before: Sun 01 Jan 2023 05:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:bc:50:68:20:09:af:98:d7:bc:1f:33:aa:e4:fb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 1 05:09:41 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb3f3e448287ce0a86cee73f2451884067a20635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:58:a7:7d:e5:85:85:b9:d4:7f:52:f9:5f:bc:
f3:28:b1:9c:4c:e6:82:e6:21:ac:59:17:19:e5:95:
d4:7e:a9:a1:17:29:1e:c3:64:41:79:fa:ce:3f:ea:
b8:c2:1c:6d:6a:92:4c:82:52:2a:dc:24:e1:fa:05:
34:24:f9:d5:bd:1a:7a:e2:1d:19:e6:11:30:2d:06:
b4:d8:11:00:ae:50:64:8a:d0:90:b7:16:76:c6:d8:
fa:21:c8:db:1c:23:98:2e:8a:73:5d:32:d7:71:06:
91:d3:86:4e:7f:8f:8c:76:f0:07:7d:81:b7:64:00:
f9:6b:dc:35:1d:d6:15:96:dc:6b:1b:28:fa:51:d5:
ff:a4:a9:d3:17:ee:e3:10:2c:f9:de:e3:82:09:57:
af:f8:44:9e:a2:12:10:e4:b4:39:32:d1:52:14:51:
4f:d8:ea:15:aa:2f:92:35:bc:70:f4:d1:39:20:8a:
c6:d0:a8:b8:b1:6c:8b:c2:6c:4f:91:93:92:ce:3b:
36:6a:15:90:11:f9:40:03:b5:db:75:79:84:29:a2:
d2:b2:90:cf:ce:aa:6b:e2:61:57:05:23:51:96:9f:
b2:09:a6:6d:ef:3c:de:cc:b5:58:57:a3:c8:75:cb:
fe:37:ba:fb:19:aa:0e:48:e0:d0:4e:78:88:db:da:
d0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3F:3E:44:82:87:CE:0A:86:CE:E7:3F:24:51:88:40:67:A2:06:35
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6z8-RIKHzgqGzuc_JFGIQGeiBjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:eb:11:f6:9d:ba:6e:ec:06:05:41:3f:49:4c:8c:c7:c9:2c:
d7:76:48:6d:40:58:e6:eb:39:09:a4:34:10:d0:13:c4:38:04:
30:b1:c6:d8:a0:fd:21:9e:c9:88:2a:83:24:6c:ca:f1:17:4e:
61:8e:ec:3a:10:b2:42:75:8e:6b:c0:eb:44:ed:ad:d0:4a:cf:
a5:07:3c:2a:4c:5b:0e:af:98:87:06:d4:3d:11:dd:b4:02:4f:
8e:4e:39:07:e3:8e:88:33:da:69:4e:12:3f:dc:ef:b3:01:72:
32:77:00:1e:e2:02:4b:10:fb:e3:13:8a:17:c6:7b:39:3e:d6:
7e:1e:a7:79:32:d8:78:c8:76:64:cd:33:4f:d7:d7:d5:18:2c:
e7:62:b3:0d:39:66:5f:e7:36:c8:7f:cc:8f:38:92:c4:4a:2a:
2f:34:ce:3a:79:04:8e:22:9a:76:0b:29:cc:d7:c8:f8:c1:72:
13:9a:eb:7c:7b:98:ce:f7:d5:76:9a:b5:7b:01:c0:3d:8e:80:
3f:29:6d:dd:48:91:d2:75:47:00:20:2f:1e:5a:db:9a:cf:9d:
70:c1:12:1a:57:b2:6e:57:92:33:0c:2d:ca:e5:dd:a2:28:38:
4a:e2:6f:a5:6e:ba:7f:a0:9d:7a:6c:99:18:83:7c:85:b1:52:
03:8c:9d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:15 2025 by rpki-client