Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d6-GJ-0irKwljEKOIxbSTD-EfjI.roa
File: d6-GJ-0irKwljEKOIxbSTD-EfjI.roa (raw, json)
Hash identifier: IDKr43sDKvN+r2gIxA8yboyinu22k2TInGuPfD17o2I=
Subject key identifier: 77:AF:86:27:ED:22:AC:AC:25:8C:42:8E:23:16:D2:4C:3F:84:7E:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186BAAC51F09B5CECA1E9C659259522E842
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d6-GJ-0irKwljEKOIxbSTD-EfjI.roa
Signing time: Tue 07 Mar 2023 06:05:00 +0000
ROA not before: Tue 07 Mar 2023 06:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:186:baab:c73f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ba:ac:51:f0:9b:5c:ec:a1:e9:c6:59:25:95:22:e8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 7 06:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77af8627ed22acac258c428e2316d24c3f847e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f7:1e:61:62:3f:2a:8d:f3:60:e3:9d:9c:2d:
12:b0:f9:a0:95:94:c0:22:db:a4:b6:cb:cc:bf:76:
d9:b6:fe:13:09:84:fb:a6:99:41:cb:a3:27:8a:a6:
05:6c:90:10:7f:a1:ca:81:af:c6:b7:7a:16:d8:49:
0a:9a:47:45:29:d8:f5:20:2e:1d:58:37:f5:87:f4:
8e:d8:e0:f1:95:60:2a:de:61:c2:3e:c8:c1:99:5f:
37:9e:f7:8d:36:30:37:9d:51:1f:40:bd:19:78:63:
95:9b:be:14:95:dc:a8:f4:2b:74:a8:6e:62:6c:f3:
dd:85:a3:cd:80:dc:ac:89:24:b1:dd:2d:c2:5d:51:
af:00:2b:87:3a:e6:0f:22:9d:d4:8c:5f:0f:ce:6c:
ff:a8:c7:63:86:a6:0d:7a:02:50:81:10:a4:5f:a0:
df:ba:e7:45:8b:42:50:82:69:75:bc:9e:bd:3c:34:
c8:64:34:12:7e:01:d7:e9:15:56:23:d8:4b:47:69:
84:d9:15:92:0d:22:46:9d:4b:24:d7:cb:64:b4:29:
31:07:e4:19:6a:8b:57:a8:9f:e3:d2:67:5c:aa:81:
b1:dd:0c:4f:2a:9c:10:96:d5:60:11:d5:b5:4c:17:
c7:dd:0c:22:5a:7d:e5:4e:8a:ce:92:65:3c:fd:2e:
81:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AF:86:27:ED:22:AC:AC:25:8C:42:8E:23:16:D2:4C:3F:84:7E:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d6-GJ-0irKwljEKOIxbSTD-EfjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:c0:63:2f:a6:7b:9b:9f:44:7d:9f:2c:b2:97:40:25:38:2c:
db:6a:ca:e1:aa:31:71:d2:15:dd:8c:c7:f8:79:18:93:e7:92:
9d:55:a1:0b:5e:a8:54:d9:5e:1d:e6:7d:81:35:42:ea:ba:eb:
f3:6e:fc:ef:fa:e8:03:5e:bf:f1:3b:07:59:28:b6:ef:13:40:
89:54:8f:dd:cd:f9:7c:2b:2a:5c:49:e6:4b:1d:c9:ce:ee:0a:
08:0e:85:9b:8c:fb:e0:7e:79:5b:c4:7f:92:e7:5a:02:75:e0:
a8:9d:f9:dd:1a:bd:58:91:ec:35:59:46:6b:10:5c:c6:cb:c2:
0a:6f:85:54:81:d2:f8:fa:1c:87:a3:88:63:51:4c:10:f8:71:
7c:48:4a:0f:52:67:a4:9a:41:0e:d3:1a:ae:c8:f4:ff:c1:fb:
a7:67:39:62:d8:54:2c:21:53:27:6d:cd:f5:42:1d:bd:e1:4d:
ff:a2:3a:e6:dd:8b:4b:40:fe:0c:41:be:91:70:24:97:2f:c3:
76:98:d4:41:f9:5b:d0:42:a2:11:cf:a5:c9:1f:be:3f:7b:14:
63:09:48:39:3b:24:e4:e5:5d:50:50:c5:65:8f:ec:95:f6:2b:
fe:77:2a:ac:73:d3:6a:9f:5a:5f:c8:a0:f4:8e:6c:58:d7:21:
33:b2:0a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:24:41 2025 by rpki-client