Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x6B0myg6FxOAkENATy1INq3WZHE.roa
File: x6B0myg6FxOAkENATy1INq3WZHE.roa (raw, json)
Hash identifier: 0y49/VWUqVa/YNcDea7EHC5rxnelR1oeJZU1x4jD1+s=
Subject key identifier: C7:A0:74:9B:28:3A:17:13:80:90:43:40:4F:2D:48:36:AD:D6:64:71
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01870F6E1B6C9981393646053A784F788E0A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x6B0myg6FxOAkENATy1INq3WZHE.roa
Signing time: Thu 23 Mar 2023 17:04:46 +0000
ROA not before: Thu 23 Mar 2023 17:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:187:f6d:bacb/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0f:6e:1b:6c:99:81:39:36:46:05:3a:78:4f:78:8e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 23 17:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7a0749b283a1713809043404f2d4836add66471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:61:30:36:82:c9:39:dd:18:c9:74:c3:b1:54:
e3:e8:cc:92:bc:39:91:d1:20:d0:e1:67:6a:5d:00:
fb:5e:e7:89:39:64:d1:1a:15:58:0a:67:39:7e:44:
d5:ab:58:63:b2:31:65:0c:54:c5:6a:ff:96:32:4a:
37:25:a1:c8:b8:8a:4d:4d:41:47:c7:56:eb:49:0e:
6c:f5:dc:5e:f0:d9:b8:0c:e9:cc:70:93:34:fb:d7:
8b:a7:b3:75:0d:5a:f1:18:03:7c:39:c0:14:8f:27:
16:58:99:13:72:e9:4c:a1:43:13:7d:22:d3:d0:46:
a4:ca:df:16:6d:40:cb:01:db:64:d0:15:d3:34:ce:
a0:5f:83:37:f9:40:3e:d4:60:12:97:1a:09:1c:83:
9c:36:8a:f7:b6:74:84:30:38:40:bd:6f:8d:5f:a9:
35:63:34:c3:eb:2c:35:6a:72:76:54:33:20:ef:ff:
ba:7a:52:fc:d8:b3:8a:77:0d:27:2e:3c:2a:f9:97:
bc:04:1c:96:82:f8:7f:fb:c2:93:8a:c5:a5:1b:cd:
0c:f0:de:08:89:4a:4a:b7:21:56:ac:45:e6:17:eb:
29:96:67:8a:ae:a4:9f:27:63:ef:f9:81:ea:c8:65:
7a:ba:61:37:00:e5:72:f1:0a:e5:72:85:c2:8f:bc:
78:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A0:74:9B:28:3A:17:13:80:90:43:40:4F:2D:48:36:AD:D6:64:71
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x6B0myg6FxOAkENATy1INq3WZHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:a8:69:37:4f:8c:7f:51:79:cb:d4:de:f8:4b:cd:3d:31:5a:
a2:a8:4c:19:93:1f:ef:1f:54:eb:8e:80:43:ed:58:8f:21:3b:
ae:c0:60:21:a3:8f:bc:a6:45:5e:48:3f:78:73:12:07:b8:e8:
5d:4a:03:90:d4:63:a8:09:17:90:52:cc:cd:90:bf:3d:c9:02:
6e:aa:dc:29:a7:f8:e9:d3:aa:d2:16:a1:12:0e:b0:b0:bb:04:
a9:23:5c:96:d5:44:d8:30:a8:a6:83:b1:1c:2e:db:bb:b7:45:
e4:73:02:5d:a9:8f:35:85:82:55:1f:0e:c9:41:c9:d7:2e:04:
26:cd:87:a1:23:ff:8c:64:a4:96:2f:8d:27:f7:a4:05:36:0e:
3f:63:e2:6b:ba:b0:3b:59:3e:73:d5:0b:30:43:da:48:a4:94:
29:fc:c3:9f:b6:75:95:ab:a6:c6:da:23:40:e3:d9:e5:c8:22:
4a:3f:06:cb:26:03:dc:f3:e8:df:3b:fd:a4:3c:1e:32:e5:7b:
56:aa:1b:bf:0a:a3:2d:fa:b5:90:dc:e8:b7:37:1d:87:5e:0b:
80:ab:f8:bd:6a:c8:42:74:b4:57:37:b9:13:67:17:bd:14:38:
93:25:21:55:c0:29:60:0b:ec:64:5f:d0:6b:d0:f2:b9:32:c7:
0f:5c:21:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:03:20 2025 by rpki-client