Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c6eWSNZk7DgN09GO1RkfVAGYd5o.roa
File: c6eWSNZk7DgN09GO1RkfVAGYd5o.roa (raw, json)
Hash identifier: CfJ1vtbN/6fAc/UQkZUAs2cW/o86Rf8YVShjhhcBElc=
Subject key identifier: 73:A7:96:48:D6:64:EC:38:0D:D3:D1:8E:D5:19:1F:54:01:98:77:9A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6C3B0A36
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c6eWSNZk7DgN09GO1RkfVAGYd5o.roa
Signing time: Sun 20 Feb 2022 11:09:39 +0000
ROA not before: Sun 20 Feb 2022 11:09:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1815808566 (0x6c3b0a36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 11:09:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73a79648d664ec380dd3d18ed5191f540198779a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f2:15:72:7c:75:c1:04:4f:f6:3f:e7:22:e0:
d7:cc:03:64:b0:d6:f2:41:fb:45:b6:67:5e:60:3e:
e3:39:69:20:e5:42:2e:37:fc:21:91:b6:6c:11:06:
fd:0a:24:fd:27:a3:a6:e0:28:8e:bc:eb:50:c9:17:
10:80:76:ea:2d:06:6e:f6:c6:7a:78:ff:12:8f:e0:
10:1c:48:89:8c:a7:1d:be:df:6a:68:04:98:35:a2:
fd:cf:9b:17:b1:5a:7e:17:a6:26:ff:17:52:c9:68:
0f:d1:2c:62:a3:b4:e3:a8:53:54:8c:68:ae:56:90:
67:27:80:5f:8f:a3:98:26:08:79:d9:36:b5:7f:f0:
d4:37:a5:fd:97:5f:af:fe:1c:2d:2e:9c:82:a9:0a:
2a:ff:e8:26:5d:86:12:61:be:4b:d2:90:d4:61:3c:
d5:19:68:dc:c0:14:64:bd:be:c6:0d:59:80:03:9a:
89:81:fe:21:8a:b7:71:89:4c:7f:25:c1:de:a1:5b:
af:14:3e:92:03:2b:70:2b:b9:ff:39:e8:36:6e:a0:
df:3e:77:4b:1e:50:96:04:20:ad:57:15:02:ca:56:
17:27:f5:42:37:4e:de:a6:7a:42:b8:bd:f5:0d:52:
2e:1e:f3:94:da:95:53:f6:f7:16:a4:29:85:71:68:
36:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A7:96:48:D6:64:EC:38:0D:D3:D1:8E:D5:19:1F:54:01:98:77:9A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c6eWSNZk7DgN09GO1RkfVAGYd5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:6a:c0:01:5a:f0:2c:ea:47:89:31:3c:22:95:bf:5a:22:8f:
47:97:93:50:68:c9:eb:9a:74:16:85:f0:0d:6f:28:7b:d3:ed:
44:68:d8:78:e4:38:a5:41:c7:7c:d5:5b:53:50:b5:bc:13:2b:
fe:03:70:2f:07:10:28:e6:aa:e6:9d:86:bf:6b:e0:76:b7:eb:
65:e4:75:c9:72:b3:75:bf:ae:06:d2:89:59:cd:cd:8b:0e:ed:
29:2e:f1:7e:2e:68:b0:dd:ca:d1:37:79:cf:16:77:44:7e:b7:
a2:9c:c0:b4:38:e2:e6:3d:dc:7d:f3:a6:9d:b0:2e:f7:fd:6b:
00:c1:b0:8c:f9:08:8d:a5:48:6b:b4:26:eb:57:ea:ff:d5:83:
e9:da:ef:17:63:58:fa:44:4e:43:73:c5:c9:44:3e:55:0b:31:
23:7a:08:12:fb:fd:ef:47:02:a1:90:35:2e:d6:2b:59:19:19:
35:5f:18:97:d7:6a:d7:1e:21:e6:1b:03:3a:90:f9:4d:be:f6:
14:86:71:fa:ad:fc:07:82:b1:9a:cd:31:71:fb:28:30:92:19:
03:49:87:7a:5e:16:36:7a:52:80:56:f9:42:f7:5d:d0:90:12:
58:f6:29:1b:f0:5a:85:5d:70:9c:e7:f5:7a:fe:4b:c0:20:f2:
8b:66:ec:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:37:38 2025 by rpki-client