Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L6Fo1hkL1KeJPpPTghcnmDIL34I.roa
File: L6Fo1hkL1KeJPpPTghcnmDIL34I.roa (raw, json)
Hash identifier: x7pscweWanBxiKTg54NBa1Meet9nw1j+tb1s1xpEtp8=
Subject key identifier: 2F:A1:68:D6:19:0B:D4:A7:89:3E:93:D3:82:17:27:98:32:0B:DF:82
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018576A942B154382FB7EFDD038AE6108026
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L6Fo1hkL1KeJPpPTghcnmDIL34I.roa
Signing time: Tue 03 Jan 2023 08:04:42 +0000
ROA not before: Tue 03 Jan 2023 08:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:76a8:db46/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:76:a9:42:b1:54:38:2f:b7:ef:dd:03:8a:e6:10:80:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 3 08:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fa168d6190bd4a7893e93d382172798320bdf82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a2:45:c8:a0:4f:69:b4:50:74:0e:26:3a:c8:
39:af:d5:db:c2:c8:47:6d:4c:f5:6f:08:f6:47:e3:
a9:1e:4c:d7:17:b1:61:d5:05:23:4a:39:eb:6d:62:
a1:5c:f4:71:8e:6b:cc:57:b5:55:82:b5:c4:80:88:
28:91:63:37:4f:94:ef:20:2d:13:70:37:ce:bf:6b:
33:50:6a:d0:38:b8:fa:3f:f2:fb:51:3c:18:c9:0a:
6c:91:db:cb:ba:dd:50:c8:77:52:b2:aa:56:dd:e8:
5d:86:24:c2:29:4a:88:7b:f6:05:61:c5:21:dc:12:
7c:9c:f6:b5:08:c8:9c:cb:91:b2:ab:06:ae:37:29:
12:38:52:4b:fb:ed:d2:f8:37:7a:7f:e9:1a:78:ee:
c1:8e:79:5a:ad:a1:45:10:51:5e:b5:9d:eb:2c:4f:
06:18:3c:ec:89:69:3c:0b:ae:1b:c6:2c:6e:af:7c:
c6:ef:c9:59:95:de:be:a1:bc:56:d0:51:6b:04:2b:
bc:bb:96:75:2c:31:44:f0:4c:f5:bb:1d:7b:0e:18:
b5:dd:bd:9b:e2:3d:dd:9d:5d:f1:e9:0c:bf:09:d3:
48:8c:da:35:c3:af:81:30:80:ad:36:6e:71:46:84:
95:4e:8d:af:a2:5d:e0:d3:62:66:83:2b:74:c6:4e:
df:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A1:68:D6:19:0B:D4:A7:89:3E:93:D3:82:17:27:98:32:0B:DF:82
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L6Fo1hkL1KeJPpPTghcnmDIL34I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:b7:57:48:e9:4d:13:c4:bc:72:a7:5b:bb:48:e7:1b:e9:d6:
b7:56:b0:97:a6:f7:d4:9a:fd:6d:fc:a1:b1:99:82:83:92:cc:
13:78:b0:64:1a:99:d8:e1:ef:00:a0:2a:6b:05:3b:1d:91:8d:
e0:6e:ac:60:39:2e:2b:dd:6d:e9:c3:11:09:53:88:82:34:e7:
67:f7:fa:4e:74:57:fa:19:cf:23:d0:84:62:36:0f:41:8d:c6:
76:00:c6:ef:a6:97:39:5e:cf:4d:b2:42:42:3a:86:d8:e4:be:
a1:60:bf:c6:c4:81:1c:62:28:81:bd:ac:67:9e:57:3b:b4:c7:
86:72:02:cd:c5:20:25:6a:f8:2e:0d:f5:a0:97:20:31:d4:bc:
8d:ea:35:c9:f6:46:64:b4:92:17:71:45:df:ab:3c:2f:bc:94:
a2:b5:3f:ba:93:96:de:8e:ec:48:cc:f1:47:07:5d:73:7c:3f:
62:b4:63:76:c3:f1:8b:22:c8:37:16:5a:dd:d3:d7:78:a0:01:
b8:e9:52:d7:b8:d3:76:d1:f7:ec:a1:68:a5:3a:6a:43:18:37:
cf:15:d2:d1:e9:9e:29:22:02:ca:9d:60:59:71:f2:ef:f0:d1:
1d:76:0b:58:ed:0b:96:c9:a4:70:a7:79:ed:99:07:0f:fd:68:
dc:06:24:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:48:49 2025 by rpki-client