Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P6J0ue1LEoBWOxGGFGujXbDALbI.roa
File: P6J0ue1LEoBWOxGGFGujXbDALbI.roa (raw, json)
Hash identifier: 9783rHea12R7YIPWsdoScLg1yIWzXWuEPG6qUUx7XtQ=
Subject key identifier: 3F:A2:74:B9:ED:4B:12:80:56:3B:11:86:14:6B:A3:5D:B0:C0:2D:B2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018691B9104E7D80101C984C11D98327ADDB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P6J0ue1LEoBWOxGGFGujXbDALbI.roa
Signing time: Mon 27 Feb 2023 07:14:29 +0000
ROA not before: Mon 27 Feb 2023 07:14:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:91:b9:10:4e:7d:80:10:1c:98:4c:11:d9:83:27:ad:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 27 07:14:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fa274b9ed4b1280563b1186146ba35db0c02db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:59:53:e9:a3:cb:98:24:8c:77:cf:7d:8b:37:
70:78:28:e8:8c:3f:2e:a2:a2:ec:57:ab:4f:e7:3c:
23:3b:aa:b2:c7:f9:1f:25:07:16:78:c0:b5:59:af:
11:b3:5f:41:6e:b8:c6:41:1a:1f:55:14:d4:21:9e:
ec:63:90:ac:85:6c:2d:38:ec:a7:12:e6:7a:73:2a:
4c:31:b3:4b:9f:5e:70:36:08:89:b6:b5:29:25:c8:
fa:01:06:96:bd:89:49:7b:f2:fb:30:a6:97:14:f1:
1a:13:4e:37:1c:93:27:10:db:f0:ec:e9:32:9d:d6:
be:a3:eb:99:13:0a:52:7f:82:e7:81:80:a5:1a:06:
57:69:8a:6e:4f:c7:4d:41:62:4a:f8:6f:67:71:1e:
e3:da:3d:3a:ed:53:9d:9c:70:d2:5e:dd:8f:3f:4a:
a9:c1:c1:68:f8:a0:da:ce:4a:16:ac:20:d1:63:38:
76:2a:38:c4:ff:2a:4c:cb:2f:24:6b:66:59:a5:ec:
a3:d8:8d:8b:af:d8:d8:e6:b1:c7:ce:b7:5b:a4:7c:
32:22:c4:64:01:ef:ca:d4:06:f1:95:e7:eb:ae:50:
62:72:7d:6b:3d:a8:14:c3:32:da:c9:8c:f1:67:5f:
14:0c:91:e0:18:b7:d9:1c:1e:bd:28:d7:96:0e:d3:
3f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A2:74:B9:ED:4B:12:80:56:3B:11:86:14:6B:A3:5D:B0:C0:2D:B2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P6J0ue1LEoBWOxGGFGujXbDALbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:e2:d3:79:59:81:03:0e:04:1e:12:b6:25:8b:1e:a3:78:81:
99:8e:7f:2a:93:ed:21:86:0e:f8:3a:18:bb:f2:8c:8d:14:f9:
cc:da:2e:b2:a5:b6:f3:f4:20:d8:e1:d4:99:8b:bb:e1:1a:1f:
88:1a:04:f1:fe:b7:9c:1c:b6:f7:15:16:10:29:63:a5:1d:28:
da:dc:06:83:33:2f:58:52:9a:1c:ef:5f:18:37:cc:53:fd:cd:
56:b9:83:d3:ee:e7:17:24:5f:68:2f:3d:56:f3:21:eb:fe:46:
1e:d6:1c:5f:8c:19:ee:82:1c:de:41:5d:76:cf:6f:b9:fe:7f:
c5:5c:61:84:e6:0d:d8:f3:94:ab:03:3b:c5:2f:33:a6:c9:b2:
5f:e4:75:e5:f1:30:f9:8a:ef:38:2a:dc:b7:cf:93:f8:8d:f6:
65:ff:00:76:f1:ac:90:ee:ca:d6:55:f5:7e:2d:8f:27:dc:32:
84:20:e4:11:7a:a9:ec:a9:98:ba:df:a0:de:80:67:50:cd:74:
cb:44:93:8f:0d:ea:80:53:78:9d:f1:15:db:9c:5c:c4:31:f2:
32:ab:d3:ab:ff:29:2b:71:81:3a:7b:21:3d:8a:c0:16:99:56:
b6:0e:2f:01:d5:e5:23:21:bc:f2:b5:27:d3:35:4a:fb:11:16:
b2:b1:f4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:10:43 2025 by rpki-client