Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C6siyFRHH4vp9y5Heb0qX-ajOao.roa
File: C6siyFRHH4vp9y5Heb0qX-ajOao.roa (raw, json)
Hash identifier: h2t0zkgOXuaeeKpb6sAQjWBYdxxhT4l7cQEopicbpEY=
Subject key identifier: 0B:AB:22:C8:54:47:1F:8B:E9:F7:2E:47:79:BD:2A:5F:E6:A3:39:AA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A42E64FBC90C35C854D469B357D0F3258
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C6siyFRHH4vp9y5Heb0qX-ajOao.roa
Signing time: Tue 29 Aug 2023 20:05:04 +0000
ROA not before: Tue 29 Aug 2023 20:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:42e5:ddf5/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:42:e6:4f:bc:90:c3:5c:85:4d:46:9b:35:7d:0f:32:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 20:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bab22c854471f8be9f72e4779bd2a5fe6a339aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a7:78:7f:ac:8c:bf:10:ab:bc:2a:3c:be:41:
90:7c:1a:77:d0:44:f1:cf:95:d9:2d:ab:3e:de:ff:
a4:0e:d7:bc:42:57:90:4a:71:73:de:15:8c:2a:cf:
d8:ef:f1:76:3e:69:c1:31:52:c3:c0:93:dc:53:65:
fb:38:bb:fb:58:f3:21:3c:00:74:76:71:c8:d0:26:
22:52:5e:c4:2f:e2:38:81:2e:60:95:7c:29:8d:59:
bd:34:cb:63:f1:02:42:3c:e4:09:86:8f:62:c7:2d:
dd:95:41:85:cc:63:49:56:74:07:5c:ff:6c:98:03:
33:33:72:c4:6f:90:0b:61:49:f6:10:0b:35:70:ec:
60:39:1d:88:d8:fc:13:35:13:18:f3:4f:08:2c:e7:
23:1b:b9:09:17:e0:95:0b:a0:70:72:b0:74:61:29:
22:fd:f6:dd:44:11:54:89:d0:34:ca:c8:d9:59:8e:
ef:f6:9f:fb:e1:d7:4a:2d:da:85:02:0f:4d:39:a9:
03:18:80:41:62:22:92:f5:28:d1:15:1b:14:83:71:
c8:ad:d9:4c:89:15:be:78:5a:8c:00:cf:7a:9c:a4:
8f:00:18:66:0e:87:69:9f:50:f4:50:8d:6c:8b:96:
32:f1:cf:29:3b:dd:2c:15:1f:1a:be:44:de:f0:dd:
49:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AB:22:C8:54:47:1F:8B:E9:F7:2E:47:79:BD:2A:5F:E6:A3:39:AA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C6siyFRHH4vp9y5Heb0qX-ajOao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:40:87:c1:c7:1e:63:fb:62:bb:bc:15:d1:c9:f0:80:d8:28:
c1:aa:a5:32:06:db:e8:53:ac:e2:f4:62:5d:f5:bc:65:e9:85:
e8:6c:b9:68:1c:28:ca:60:e9:45:24:42:1e:c6:e7:fb:4d:7f:
4f:d6:5e:77:73:fd:28:74:1c:e3:33:bc:5c:92:f3:c6:c0:e4:
82:b0:7c:69:28:6f:a3:d7:6e:79:37:27:cc:9c:9b:25:ee:2f:
4f:7a:4f:7e:6b:db:c7:22:95:42:c2:68:8e:8a:b2:52:ca:72:
56:4d:c8:85:a1:4c:3f:08:84:a8:eb:b9:64:a0:76:f9:6b:b2:
49:e8:80:45:05:89:fb:30:19:d0:5f:85:77:eb:8e:08:ee:df:
35:b4:6b:9a:06:ae:90:f9:ed:c8:ac:35:a1:76:10:21:2a:91:
95:65:15:49:77:98:f1:91:db:60:0f:cd:70:ee:66:dc:bf:8b:
32:cf:ae:45:ed:a5:58:cd:b0:ba:56:68:d3:92:05:19:b0:04:
1c:a6:e3:37:20:ec:0a:40:e1:29:7d:90:d4:aa:9d:c0:87:42:
de:99:9c:52:0e:be:be:c1:cb:9f:e6:66:0d:6a:49:a3:a1:50:
d7:4e:f4:eb:33:74:05:5f:ab:37:a9:fd:db:b3:32:a7:01:b7:
54:2b:a3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:33 2025 by rpki-client