Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h6ARkncA8lMPTATTVIpTQoFTyOo.roa
File: h6ARkncA8lMPTATTVIpTQoFTyOo.roa (raw, json)
Hash identifier: tWHJpKwJSU7rf/M9zIh+syDI0FNHWfRF7NgQFDZMZ4w=
Subject key identifier: 87:A0:11:92:77:00:F2:53:0F:4C:04:D3:54:8A:53:42:81:53:C8:EA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018457FD870692BF4FD46B11E5FE18A271BB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h6ARkncA8lMPTATTVIpTQoFTyOo.roa
Signing time: Tue 08 Nov 2022 16:05:43 +0000
ROA not before: Tue 08 Nov 2022 16:05:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:57fd:1b43/128 maxlen: 128
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:57:fd:87:06:92:bf:4f:d4:6b:11:e5:fe:18:a2:71:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 8 16:05:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87a011927700f2530f4c04d3548a53428153c8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:76:f2:ec:55:9b:0d:9e:68:e4:7e:16:da:59:
6b:54:6a:42:59:f0:59:63:38:7d:5d:bd:d8:84:2f:
f7:f7:2b:31:9b:f8:e7:27:cb:7a:9a:7e:52:9b:29:
67:9f:93:33:4f:7a:1b:9c:43:ad:d7:a2:9a:b7:3b:
f7:ae:4d:bd:d5:d3:f9:cd:f3:b0:e6:82:f5:58:39:
d4:cd:79:51:ab:94:a6:b1:45:40:55:59:c1:55:71:
2e:87:06:51:37:ce:51:db:b6:ea:e7:4b:a9:8b:50:
3c:dd:66:81:88:b6:46:19:25:8a:25:bd:62:cc:fe:
4c:07:cd:5e:9a:fe:e7:ed:c4:fb:f5:c6:17:97:a6:
fe:81:80:27:44:0b:b2:03:78:d2:01:2f:e6:92:9a:
d8:63:dc:ef:d1:f4:8f:c9:7c:d1:87:7a:39:7b:19:
4f:42:93:eb:08:5a:7a:9f:f1:ef:15:ee:2f:a8:02:
6e:ac:c1:21:ba:cc:a5:a2:fd:38:a2:1d:6c:74:48:
ad:07:7c:6e:83:4b:9e:82:48:7b:73:8b:54:0c:b0:
a7:87:f5:b8:d5:a7:f2:c0:fd:ae:86:69:5c:93:e6:
31:94:89:71:5c:76:94:ec:5d:6b:67:c2:e3:c7:de:
f7:9c:c2:fb:9d:51:64:92:b8:fe:bf:fb:77:f1:31:
a5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A0:11:92:77:00:F2:53:0F:4C:04:D3:54:8A:53:42:81:53:C8:EA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h6ARkncA8lMPTATTVIpTQoFTyOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:17:da:c5:52:f1:96:13:f8:30:d3:81:2b:f6:5e:06:fa:64:
28:51:62:1d:db:12:aa:a8:69:84:ab:26:1a:83:9c:44:43:19:
64:b4:ff:e8:5d:ba:af:5a:a0:34:62:be:d6:d6:e1:87:e2:d4:
6a:de:77:83:58:d8:72:2b:d7:e3:b4:19:33:af:e7:bf:7f:12:
65:cd:34:c5:78:df:86:c0:98:92:4a:c6:ce:6f:a0:21:b0:df:
d2:b4:8e:65:ee:57:b1:94:cf:fb:54:3a:cd:98:d4:b5:2f:4d:
94:39:fb:38:e2:9f:2c:ec:61:ff:a8:4c:2b:cf:f8:f0:96:05:
6d:39:60:d9:6c:4d:f5:36:cd:a0:ab:b1:58:04:38:26:80:f2:
f6:cf:3e:89:e5:61:1f:36:73:fe:c3:01:d1:a1:08:f8:d9:a0:
e7:9e:3d:07:45:9a:42:2d:dd:95:9b:61:4b:dd:f4:18:ca:d2:
c5:e7:f3:22:00:62:4c:cd:d9:83:5c:9b:8a:76:b1:9b:5b:87:
dc:80:d4:a8:fe:38:be:76:13:e2:59:9d:11:e0:b1:2f:e3:c4:
21:64:ea:da:88:cf:f0:66:fe:00:e7:a2:2f:2e:93:6e:29:5c:
b5:f4:f1:f2:5a:2d:14:3c:50:2c:6b:29:75:dd:b5:e5:81:67:
39:e4:d6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:11:10 2025 by rpki-client