Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C6XjIcS71t1loWHacgsfFrbu4zI.roa
File: C6XjIcS71t1loWHacgsfFrbu4zI.roa (raw, json)
Hash identifier: cH8hlzWn6pOgkCpfnA0Lf2HfuDhQnGZGuZJDOn/n844=
Subject key identifier: 0B:A5:E3:21:C4:BB:D6:DD:65:A1:61:DA:72:0B:1F:16:B6:EE:E3:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6B37FC28
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C6XjIcS71t1loWHacgsfFrbu4zI.roa
Signing time: Wed 16 Feb 2022 23:23:44 +0000
ROA not before: Wed 16 Feb 2022 23:23:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1798831144 (0x6b37fc28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 16 23:23:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ba5e321c4bbd6dd65a161da720b1f16b6eee332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6b:1d:14:38:c5:b1:80:d1:64:b7:50:47:42:
9d:25:b4:b7:95:53:46:f3:3d:2f:82:f3:7d:86:f8:
02:1c:26:17:cb:65:97:59:05:14:90:ea:55:bd:82:
04:aa:d4:68:ef:dc:17:b8:a1:0a:1f:31:37:e8:9a:
42:f1:54:37:91:23:5f:29:8f:ec:12:ff:52:64:63:
f6:15:d9:fb:e4:40:96:35:be:54:4f:94:10:35:ac:
2c:9a:5e:cd:5d:fc:fa:7f:28:c4:a9:f6:85:a0:9a:
f6:68:a3:4e:22:76:74:63:a8:8b:2a:f0:9b:56:f0:
c5:5f:7e:8b:0b:54:58:8c:f9:ba:08:1c:0c:58:ff:
ed:dd:c9:fe:fb:f5:4e:47:9d:52:73:2a:87:c0:ca:
6e:0b:a1:26:7b:f0:ed:59:0b:b1:4f:de:84:f0:34:
64:30:07:30:49:ba:22:22:b0:7c:02:3f:0d:cc:13:
cc:72:b6:d4:f6:4a:2a:3c:40:4d:cf:1b:1d:0f:31:
87:7f:1f:fc:d1:8f:ce:bb:54:f0:df:17:e7:bb:66:
4a:75:72:47:38:cc:ae:89:e5:ff:30:e2:cf:a0:13:
f4:a3:a3:87:9e:cf:8f:e8:7b:c5:52:8b:a7:e1:22:
2c:9c:98:69:ab:7c:1a:8c:f2:50:22:33:ba:2d:8c:
cb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A5:E3:21:C4:BB:D6:DD:65:A1:61:DA:72:0B:1F:16:B6:EE:E3:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C6XjIcS71t1loWHacgsfFrbu4zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:40:fd:74:1e:81:27:fc:c3:7e:6e:cf:77:ba:d6:c3:22:40:
56:4d:75:95:d6:47:b0:fa:61:df:eb:0b:54:fd:e7:2c:5c:37:
29:0f:7d:43:26:81:bd:51:5b:97:dc:bf:dc:13:d8:cc:b8:cf:
68:82:75:f8:23:db:f5:98:74:bb:22:71:c5:d0:dc:06:75:f7:
31:ca:a2:10:fa:23:06:0d:f1:b5:05:61:c3:b5:dd:10:5f:b0:
a8:26:b8:1a:eb:61:e6:12:23:59:bc:8b:a0:1b:20:a6:d9:35:
69:6d:40:b4:1e:f1:4d:31:b0:6c:b1:8b:ce:5f:f7:c0:fc:4a:
89:36:fb:59:a4:4c:75:f4:7d:af:6a:cb:76:8c:3f:8d:b2:11:
7b:42:af:20:c6:92:5a:52:90:36:63:c8:fc:dd:45:0a:6a:58:
27:fe:ff:13:ce:d6:83:a5:83:5e:d5:7f:a6:1b:5f:50:4e:72:
44:b2:04:25:bb:4d:39:d5:d5:0a:9d:85:4b:34:27:5b:ad:66:
41:b5:2e:aa:c4:42:10:97:97:42:06:15:a9:54:dd:06:9f:8e:
eb:92:44:01:44:ab:65:04:cf:4b:3d:dd:b1:8e:a7:c6:41:1a:
d7:c2:5e:e0:9a:34:68:5e:1a:7e:10:ca:bc:58:68:f9:42:a4:
a7:40:e0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:30 2025 by rpki-client