Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C6M6NMkTC-dAdAKishOoNZQC3Iw.roa
File: C6M6NMkTC-dAdAKishOoNZQC3Iw.roa (raw, json)
Hash identifier: UI5EdSna/Yrv2T9wLq0rFpkXDPjZDm3k4JU+9yU2ol0=
Subject key identifier: 0B:A3:3A:34:C9:13:0B:E7:40:74:02:A2:B2:13:A8:35:94:02:DC:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01862B25994BECF85519975040C0D441BF8D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C6M6NMkTC-dAdAKishOoNZQC3Iw.roa
Signing time: Tue 07 Feb 2023 09:12:09 +0000
ROA not before: Tue 07 Feb 2023 09:12:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2b:25:99:4b:ec:f8:55:19:97:50:40:c0:d4:41:bf:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 7 09:12:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ba33a34c9130be7407402a2b213a8359402dc8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:91:1c:69:18:fd:f6:bf:ba:f8:09:d5:2c:6f:
61:de:61:72:2c:55:1d:93:2a:0d:18:63:b7:bc:08:
c3:f9:41:34:07:36:03:18:88:9f:2d:92:4d:66:87:
07:40:5c:b7:18:20:e5:e9:3b:b6:0c:e1:c3:66:5a:
93:01:dd:f1:67:a4:e1:e7:9a:6a:04:0f:fa:94:45:
e9:79:12:98:10:8b:4e:32:25:aa:23:1f:4a:11:43:
5d:d2:8e:71:3e:51:51:ac:db:71:e8:c5:fc:50:30:
6f:d9:4d:ee:d2:07:10:0f:c3:d3:09:38:3e:97:c9:
ef:f5:61:86:e7:b2:46:dd:a6:5d:9b:6f:a9:d4:28:
e9:9c:bd:a5:29:61:1a:4a:27:f4:c3:49:fb:1e:0a:
2a:ae:11:7c:c4:4d:cb:11:4a:d8:c4:16:8f:85:27:
c5:64:7b:2c:b7:19:e2:28:cb:1a:ed:9b:1a:e2:9d:
19:43:d6:f7:80:3d:5a:86:18:e5:3e:f1:3e:a7:c4:
c8:85:af:c3:56:bf:22:f6:ea:55:ab:49:21:e9:c5:
a3:03:40:e3:a8:d6:46:70:9a:49:3f:87:d6:09:04:
81:d0:86:7f:31:71:82:d9:85:01:b3:90:71:52:b4:
1a:9c:52:a4:30:8e:27:fa:22:a8:16:17:98:1b:e3:
b8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A3:3A:34:C9:13:0B:E7:40:74:02:A2:B2:13:A8:35:94:02:DC:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C6M6NMkTC-dAdAKishOoNZQC3Iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:c6:7f:e1:33:2b:8e:54:04:b7:68:a4:66:46:0d:35:0f:0f:
d6:80:93:7e:14:ed:00:1c:7a:c6:da:07:83:d6:4f:b7:2d:7a:
5d:33:ec:52:6d:a8:3c:9f:12:c6:7e:e6:6d:99:bc:14:1f:93:
f8:44:9a:8d:66:61:5d:3a:5d:b3:cd:f2:07:de:36:e3:4b:bb:
32:f9:cf:b7:d8:5b:c0:e0:f0:d6:91:a1:ef:aa:00:f5:f9:72:
a2:f0:d2:d8:8b:fa:b9:71:57:46:b0:60:62:86:cb:da:00:c0:
13:47:e9:4d:2f:a3:59:6d:94:06:26:2a:67:7a:5e:ab:31:c7:
c1:42:ea:c6:36:d0:b1:c9:27:c5:c6:bb:74:35:c4:34:06:1a:
f4:f6:73:67:13:79:5f:27:d4:d3:a0:d0:be:17:d2:19:0b:08:
7e:b8:24:5b:d8:2c:77:ec:f6:a0:d7:43:f0:55:48:a2:e5:4e:
74:ba:b3:d5:53:79:f2:58:86:d3:87:84:05:cc:31:10:e9:0f:
a1:53:52:41:85:64:41:d7:97:57:49:45:81:52:68:dc:e5:8f:
9f:af:05:b2:2d:dd:d4:96:94:e0:3a:d2:91:a3:f4:cb:6e:3f:
08:3b:8a:db:7e:b7:50:33:c0:ed:62:b0:6d:6c:19:ab:1d:a9:
a4:21:92:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:31:30 2025 by rpki-client