Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x6YaT7VfhCVSiQwzTGnjIkjbcws.roa
File: x6YaT7VfhCVSiQwzTGnjIkjbcws.roa (raw, json)
Hash identifier: s9M7B+C6iQ7VAXp3tCH16fqHOPwZAmbmA79i7lXQ940=
Subject key identifier: C7:A6:1A:4F:B5:5F:84:25:52:89:0C:33:4C:69:E3:22:48:DB:73:0B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DFFABB4B2A5247DA828CD0D859086D86
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x6YaT7VfhCVSiQwzTGnjIkjbcws.roa
Signing time: Thu 10 Aug 2023 15:04:58 +0000
ROA not before: Thu 10 Aug 2023 15:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:dffa:2d4c/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:fa:bb:4b:2a:52:47:da:82:8c:d0:d8:59:08:6d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 15:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7a61a4fb55f842552890c334c69e32248db730b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b4:c7:6f:b1:67:e2:a0:54:2b:7f:89:db:3f:
a5:f8:54:f0:05:d3:f0:27:fe:c6:27:e2:cc:52:a2:
f0:54:5b:f8:94:cf:bc:8f:e7:6b:ac:c4:f0:bb:cd:
c1:7f:22:6e:41:d5:46:0b:db:ff:31:e5:8e:e2:a0:
c2:bc:7d:6e:5a:61:71:28:8d:2e:c2:75:35:39:d5:
7f:c2:f8:73:fb:57:fe:00:18:8d:26:82:33:01:63:
cf:97:f9:20:5b:cb:9c:70:e7:27:1d:d3:4a:7c:f7:
ea:0b:19:04:b6:52:32:1a:d9:37:aa:bb:89:92:c8:
89:76:27:8b:1a:ee:8b:0f:b8:e3:a5:c4:5c:ed:6c:
d3:d6:74:b2:6b:ad:0a:49:90:76:52:13:5c:9e:49:
03:17:aa:e8:c8:9d:fc:22:aa:27:f2:1b:95:04:52:
76:c0:12:88:73:92:67:a2:c2:17:b5:29:2b:cd:20:
1f:26:e9:57:53:77:97:c4:70:84:d6:31:c7:9b:24:
28:ac:cd:75:5e:a2:33:21:fd:31:61:6d:69:08:23:
e8:07:ab:ed:c0:b1:fc:9d:58:78:48:35:e0:60:5d:
8a:40:7b:f0:ab:1f:3c:89:7b:30:7e:40:ec:3b:cb:
ad:00:60:4c:28:be:8d:6a:c3:0e:6d:24:bd:73:0c:
34:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A6:1A:4F:B5:5F:84:25:52:89:0C:33:4C:69:E3:22:48:DB:73:0B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x6YaT7VfhCVSiQwzTGnjIkjbcws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:f9:52:9c:1d:4c:06:40:b0:21:3e:69:43:60:17:a7:d1:14:
10:ff:e7:3a:bc:42:80:c8:83:91:19:95:c1:bc:b5:e9:56:8e:
19:43:5e:2b:a9:b0:8b:2a:c0:9f:a4:4a:e0:87:ce:16:9e:9e:
57:80:2b:4f:a8:af:08:fc:e6:ad:3c:3e:8b:08:95:89:79:c6:
6b:a8:0f:dc:7e:a4:87:5d:ed:a5:b0:ac:51:88:b2:74:39:31:
77:49:73:4d:61:f1:8a:c2:f9:79:75:ed:df:85:68:5d:7f:ef:
c8:aa:6d:c8:d3:8c:8e:f3:6a:3f:e3:a6:4a:56:9f:38:bf:69:
ba:6b:eb:5f:6a:75:9f:f5:63:d0:73:0b:99:5f:ee:7d:48:8f:
e2:dd:d3:80:5c:00:36:bd:41:e7:1f:d1:0c:53:24:d0:af:77:
26:54:05:fc:c8:fb:fa:f4:4b:ea:10:6e:01:58:6a:03:66:7b:
80:9d:3d:d3:0d:db:33:c4:fb:e5:76:a0:90:cb:c6:9b:9c:fa:
2f:08:4d:06:24:24:e5:e2:9a:7f:91:6e:32:5d:96:81:db:90:
ee:d8:04:fd:fb:c2:8f:34:2c:a4:d7:ff:e5:19:1b:cc:07:dd:
ed:80:d2:19:41:57:cd:8c:43:01:21:9b:69:33:42:cb:bb:8b:
1c:ec:9c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:04:34 2025 by rpki-client