Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6D8wyTPc3wgbXMeT6tw1af6Ts_Y.roa
File: 6D8wyTPc3wgbXMeT6tw1af6Ts_Y.roa (raw, json)
Hash identifier: e/W04webNORYdtlbPhSGboeDEaJa6fmDLNn/NdzxRtI=
Subject key identifier: E8:3F:30:C9:33:DC:DF:08:1B:5C:C7:93:EA:DC:35:69:FE:93:B3:F6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018747ADA24BE964085D5B5CAE47370B4451
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6D8wyTPc3wgbXMeT6tw1af6Ts_Y.roa
Signing time: Mon 03 Apr 2023 15:12:54 +0000
ROA not before: Mon 03 Apr 2023 15:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:47:ad:a2:4b:e9:64:08:5d:5b:5c:ae:47:37:0b:44:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 3 15:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e83f30c933dcdf081b5cc793eadc3569fe93b3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fd:8b:dd:6f:7a:12:c6:dd:dd:af:44:53:ba:
f4:53:d1:8a:1d:7b:df:8d:2a:4a:8f:2e:ce:54:4e:
d4:4c:43:39:4e:7b:5b:87:09:30:02:15:96:46:4c:
06:80:49:b3:53:8f:14:6c:91:f8:4a:27:af:cc:db:
1f:0f:df:de:93:db:d1:97:1f:a2:17:47:a5:f9:1e:
d4:50:99:59:39:b7:58:e9:cc:06:41:bb:5b:3b:f8:
74:cc:2b:f8:50:c4:9d:3d:4c:a5:74:be:7f:2b:b1:
28:0f:88:b6:2c:0a:9a:a8:83:db:45:c7:0b:ad:ac:
82:1b:9f:d8:1d:55:af:e7:47:4b:6d:c8:94:ff:1d:
09:49:cf:a6:13:f7:cc:77:e4:90:41:3e:b3:82:b9:
2c:0e:07:a9:36:d4:e7:94:4a:0f:e9:46:6a:50:aa:
e7:08:fa:9f:e0:81:d0:21:99:e3:33:48:06:5c:18:
e0:a3:44:06:b3:8e:a7:63:29:4f:9f:b9:ee:0f:ac:
87:9f:18:3c:46:d8:28:1d:c8:66:c5:1f:bd:24:e1:
d6:d7:45:d6:ff:b1:ca:b0:ea:f0:06:af:6e:b8:04:
a9:5f:a0:19:26:0b:c5:1c:e7:ff:c2:6c:51:ca:d6:
84:85:a6:0d:07:82:54:e3:5c:8a:17:4a:43:32:21:
84:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3F:30:C9:33:DC:DF:08:1B:5C:C7:93:EA:DC:35:69:FE:93:B3:F6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6D8wyTPc3wgbXMeT6tw1af6Ts_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:e4:bf:18:f0:93:e1:87:70:ac:b4:4a:8d:89:c1:ee:51:53:
fd:0e:2d:af:b3:62:41:43:26:7e:43:df:0a:e2:be:a0:cc:cf:
12:6e:84:1d:17:50:9c:ea:40:55:5f:1f:ad:c1:22:5e:74:4c:
73:22:c6:c6:07:d8:7a:c7:ae:81:81:38:c2:f9:d5:c8:9c:ce:
05:0a:83:72:35:3a:6b:79:6c:57:8a:e3:25:93:54:77:ec:27:
f0:bb:b9:51:88:52:9e:c0:a0:cd:18:0a:7b:d8:1d:c6:7a:f5:
c7:57:a4:21:ca:f1:a9:e8:c2:c6:43:4b:6b:af:e6:dd:14:ed:
dd:19:af:64:a3:19:2f:9f:55:e8:e5:ea:29:25:31:da:12:6f:
57:a0:0f:41:12:8b:97:ef:49:be:10:12:9f:15:1e:3a:dc:79:
ad:d5:49:87:e3:31:b6:cb:01:29:ad:a3:00:78:92:ee:0b:54:
1f:41:85:63:20:af:e4:54:07:0e:9c:cb:29:23:d6:23:06:dd:
a6:d8:0a:ac:b6:28:d8:6e:c8:2a:d6:8a:c2:53:05:51:bb:80:
ad:16:a0:66:5a:6f:98:42:86:3b:24:de:f0:bf:6a:a7:1b:6b:
d7:54:ad:28:45:61:ab:5e:ca:1e:54:f6:e5:de:c0:62:7a:21:
a8:78:7c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:12:44 2025 by rpki-client