Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_G6RbOA7usBRJdVE9eLR6XSbs6M.roa
File: _G6RbOA7usBRJdVE9eLR6XSbs6M.roa (raw, json)
Hash identifier: jDJ2SN69OOQABR8lfF7WsYnn4+o54W0DB7nrg1wP4bg=
Subject key identifier: FC:6E:91:6C:E0:3B:BA:C0:51:25:D5:44:F5:E2:D1:E9:74:9B:B3:A3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186AD6E1FF680F95F38F7D775BC0D052640
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_G6RbOA7usBRJdVE9eLR6XSbs6M.roa
Signing time: Sat 04 Mar 2023 16:22:00 +0000
ROA not before: Sat 04 Mar 2023 16:22:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ad:6e:1f:f6:80:f9:5f:38:f7:d7:75:bc:0d:05:26:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 4 16:22:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc6e916ce03bbac05125d544f5e2d1e9749bb3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c8:c4:cb:6e:66:f2:1d:c6:92:fd:18:e5:21:
62:67:ac:f5:77:96:e9:ed:f5:9e:69:2a:93:2b:f8:
30:63:04:00:5f:82:d1:df:08:f1:45:ec:31:89:40:
d5:b2:41:56:b1:72:ec:28:9f:7a:b5:a7:7d:18:b1:
11:f8:12:27:5b:6b:1a:ce:40:c5:54:3c:f0:16:34:
0f:a6:3a:1a:12:07:70:8b:31:3c:fa:29:48:af:ec:
00:28:0d:d8:1c:14:b8:91:3e:95:1e:0a:b8:44:b7:
01:0e:e6:bf:39:a8:6f:f2:bf:51:49:35:3b:b1:ef:
50:39:02:67:ac:c6:77:c2:f4:ca:53:2e:f2:f4:45:
f4:cb:9a:94:1c:be:29:0d:79:fc:76:63:21:62:91:
c3:90:96:e8:56:de:34:65:f4:b6:ac:4b:77:f7:c3:
43:b3:ca:2b:d1:74:60:0c:69:30:cc:bf:46:a5:8c:
9f:bd:cd:04:24:00:3b:14:f0:09:4c:4e:0f:21:ae:
75:34:3c:e0:14:6c:cd:f5:43:51:c0:af:15:3b:9e:
51:8d:0e:2e:1f:db:db:0e:06:6c:b5:5a:ba:de:9b:
6f:b6:27:d9:cf:4b:87:fb:cd:8a:71:05:dd:4b:ad:
27:ac:f9:73:ab:38:2b:d6:8d:7c:76:6a:3f:f9:7f:
79:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6E:91:6C:E0:3B:BA:C0:51:25:D5:44:F5:E2:D1:E9:74:9B:B3:A3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_G6RbOA7usBRJdVE9eLR6XSbs6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:9f:60:ac:d6:8a:8f:6a:34:3c:47:ce:ba:31:d4:b9:6c:28:
9b:fc:13:41:fd:fe:50:22:ab:11:90:71:1e:42:51:9d:d2:33:
fb:08:16:18:99:3a:65:34:b9:d6:b0:11:3e:bd:11:4f:88:55:
5b:28:d7:b7:f5:4a:ab:d5:7d:9c:e3:46:a7:50:f4:bc:ef:62:
a7:ba:73:98:eb:9e:26:17:da:90:e6:bd:3a:52:51:f4:23:86:
cd:e6:05:7b:21:62:b1:6d:e8:c8:7c:47:1e:7e:cb:9d:53:53:
58:dc:7c:a6:24:7b:2b:ae:0f:1d:06:9f:9d:74:f9:66:d1:10:
2a:58:59:49:5a:48:14:48:9d:73:83:c0:00:bc:f8:e4:f0:4f:
c9:fa:a3:26:3f:5c:62:b6:71:79:22:ff:bd:40:aa:c6:80:59:
8b:b1:0e:62:a5:94:94:ad:55:f4:ee:a0:57:e0:1e:58:ff:92:
a6:cf:16:d2:6a:52:c9:32:6e:de:d5:59:f1:f6:7a:c0:0d:62:
9d:63:71:80:17:6f:84:df:51:84:43:5b:ae:6b:c5:dd:50:08:
94:0c:02:d4:e8:02:7e:0f:1b:bd:6d:18:66:c2:ac:af:aa:fa:
99:81:4a:15:50:4c:fb:1b:f1:57:51:ce:3c:a9:e2:a2:88:19:
99:33:f1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:45:19 2025 by rpki-client