Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b6Cav0PScEYtwU1t9etspVB9I_o.roa
File: b6Cav0PScEYtwU1t9etspVB9I_o.roa (raw, json)
Hash identifier: /A/Oz8ueF1IGnaWo+Mx2g1K8gZDodM03lm6aN8BfWgU=
Subject key identifier: 6F:A0:9A:BF:43:D2:70:46:2D:C1:4D:6D:F5:EB:6C:A5:50:7D:23:FA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184CF4F264277C98B807E3A972DDCD86A64
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b6Cav0PScEYtwU1t9etspVB9I_o.roa
Signing time: Thu 01 Dec 2022 20:09:41 +0000
ROA not before: Thu 01 Dec 2022 20:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cf:4f:26:42:77:c9:8b:80:7e:3a:97:2d:dc:d8:6a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 1 20:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fa09abf43d270462dc14d6df5eb6ca5507d23fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:52:02:18:6f:90:12:a7:08:78:33:bb:a8:66:
95:77:92:ae:b9:49:a5:a8:79:0d:25:bf:6c:ee:16:
cd:66:07:b7:75:e1:47:ed:0a:b5:93:55:3e:9a:43:
f6:5f:41:ab:c3:aa:c5:9e:2a:78:4c:b5:21:23:bb:
e8:99:25:d8:6d:51:7a:68:a6:b6:b2:50:f1:74:ad:
8d:66:93:4f:1a:d1:35:0e:11:46:6b:c4:a3:1d:84:
a4:62:2c:e1:26:fc:65:dd:01:10:46:07:ee:25:a6:
79:dc:84:0e:29:2a:4c:9d:0c:99:58:a1:d5:af:d8:
13:d7:35:83:18:af:47:8c:da:59:09:95:47:62:8a:
ba:81:8b:5c:a8:b8:18:60:44:8e:02:94:ec:62:e0:
82:31:7b:ae:f1:4e:4d:76:be:cd:86:23:39:5e:f0:
5c:bd:8f:cf:26:45:70:5f:46:97:ac:2d:3a:85:59:
09:89:14:14:9f:a4:a2:69:b1:65:12:23:8c:89:f0:
ab:2c:f4:0a:5c:7b:9a:66:e9:a8:db:c1:99:0e:bc:
bb:96:af:26:42:3b:c7:8c:73:8e:5b:d9:75:c6:c5:
83:83:fa:ac:2d:55:22:36:d7:3c:be:2d:e2:10:98:
e4:2a:93:07:2f:45:5d:28:17:9b:25:de:40:21:70:
1f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A0:9A:BF:43:D2:70:46:2D:C1:4D:6D:F5:EB:6C:A5:50:7D:23:FA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b6Cav0PScEYtwU1t9etspVB9I_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:40:7d:ea:fa:ec:f8:0b:c0:6b:37:26:4c:50:60:88:a7:16:
13:88:25:fb:13:5d:e8:4e:c9:15:c4:2e:aa:6c:8a:56:35:6d:
30:cd:3c:eb:56:5c:a2:f4:42:8b:4e:69:f7:1c:62:d6:1d:65:
73:e3:89:4f:90:55:0a:c3:c4:b8:32:f6:24:d3:06:a3:ff:4c:
e1:11:33:c3:01:1a:1e:67:c7:25:e3:22:af:5f:fe:94:7b:2c:
56:59:cd:65:ba:67:19:49:a9:53:b4:bf:f2:1c:3f:82:64:6d:
84:1b:cf:ab:7d:9d:06:d3:e5:4e:23:79:90:a3:2c:f5:4d:4b:
89:e0:6d:68:68:2a:d9:7d:3e:20:c7:3d:8b:3a:cb:a7:f6:b9:
f1:56:6a:63:43:d9:73:a2:7e:da:4d:d5:56:14:3a:fa:1d:57:
50:41:c8:2e:92:77:86:7f:c2:1c:4d:60:d6:ae:2e:4b:09:7f:
2b:23:11:c9:27:7d:8e:50:79:bb:1c:32:46:97:28:fa:37:dd:
66:d4:31:01:76:c3:c0:3f:e5:52:72:e8:1f:fb:b5:e4:d7:69:
06:5b:63:37:b7:0f:f7:9b:d9:03:cc:09:8f:9e:6a:fb:53:d5:
4e:aa:a5:db:0f:2b:0a:e0:cc:ba:93:06:53:cc:9f:fd:38:69:
06:03:0f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:26:09 2025 by rpki-client