Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a6fDSFnm9qzHlclwrcsMJEL4CRM.roa
File: a6fDSFnm9qzHlclwrcsMJEL4CRM.roa (raw, json)
Hash identifier: X9jheU+OqedwOUtZ82vn82/Ra8cdZ1ATDxp+I+zAWN0=
Subject key identifier: 6B:A7:C3:48:59:E6:F6:AC:C7:95:C9:70:AD:CB:0C:24:42:F8:09:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182F2F472978E5F61FBA4F8A853283257C4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a6fDSFnm9qzHlclwrcsMJEL4CRM.roa
Signing time: Wed 31 Aug 2022 08:11:22 +0000
ROA not before: Wed 31 Aug 2022 08:11:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f2:f4:72:97:8e:5f:61:fb:a4:f8:a8:53:28:32:57:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 31 08:11:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ba7c34859e6f6acc795c970adcb0c2442f80913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3c:05:39:b4:8d:aa:b0:0d:13:99:df:12:61:
a8:7b:99:95:8b:3e:c4:7f:ee:89:92:76:e5:0a:e0:
d7:93:7d:67:1c:0a:71:9b:6b:cf:db:40:51:02:29:
80:c9:65:9c:a4:94:0f:c5:b9:28:f5:3b:45:a7:1a:
f8:48:61:87:62:39:83:0b:1f:8b:19:a9:b1:37:0d:
b2:a2:9e:a8:2e:a9:db:11:d4:3f:33:56:ec:f6:e5:
1f:45:2a:fb:7f:d6:aa:9c:56:88:53:0d:4f:c4:5c:
ee:33:71:64:bb:54:ba:a6:d5:0b:02:e9:3a:d3:d9:
b1:07:3d:b1:4f:69:08:d9:62:18:83:29:bf:39:87:
6c:df:4c:94:35:e6:11:2f:7e:10:ce:c7:69:9c:1c:
5f:86:97:4b:1d:95:ce:e1:24:60:13:32:70:2f:86:
9a:99:47:f6:25:7f:39:71:21:64:44:19:a3:90:39:
99:2d:93:c2:d8:c7:7a:c3:ec:dc:9c:d6:74:2f:77:
13:21:ab:a8:72:e0:27:2e:c6:d7:4e:31:5b:c0:ab:
b0:57:7a:c5:dc:23:2e:d7:5f:5d:06:7b:cc:57:21:
3c:26:14:35:cf:90:db:39:e3:60:f3:ad:a1:cb:1f:
a6:5e:bc:bb:ca:72:53:5b:d1:a3:94:9f:f9:36:ac:
8b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A7:C3:48:59:E6:F6:AC:C7:95:C9:70:AD:CB:0C:24:42:F8:09:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a6fDSFnm9qzHlclwrcsMJEL4CRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:96:2f:1f:39:3f:da:bb:91:f6:d7:c7:59:83:cd:f7:97:61:
f0:c6:67:b3:8e:3c:ba:12:c9:1b:9d:31:44:ea:85:5d:c1:a3:
fd:38:21:f3:14:5e:57:0c:9b:86:5b:d8:c5:85:cb:2a:46:7b:
4f:a5:32:82:31:d5:ba:57:8c:ce:d2:f7:39:aa:f6:3f:e4:49:
78:30:75:36:87:c1:b6:08:af:58:b9:64:37:9c:e8:b8:02:48:
7e:af:ee:ca:ed:4f:51:80:3e:14:5b:c4:53:6e:21:25:38:03:
49:98:9c:2f:c1:6f:f9:6e:34:c4:48:0f:a3:03:ac:5a:70:3e:
4f:a8:ae:c6:5e:12:9f:02:27:ba:7a:ef:7e:ee:dc:f1:f5:91:
47:af:0f:0f:56:ad:93:ce:92:c8:7f:b4:0c:b9:b1:82:a9:cd:
05:66:db:c2:7e:20:98:42:53:9b:ee:e6:ca:54:5d:ef:48:0a:
72:6f:45:ca:b9:54:58:0f:a7:c7:a5:54:55:da:19:c6:79:c4:
fc:b2:a1:aa:cd:13:f1:10:bf:6b:cb:96:06:f3:97:7c:5b:9e:
ec:bf:7b:9b:6a:6e:8a:55:2c:97:78:64:ac:21:2d:5a:2b:21:
1f:bb:70:57:49:5f:92:96:61:ac:9b:cc:94:34:e8:57:ac:7e:
4b:b4:83:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:02:38 2025 by rpki-client