Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6GJyPWjppWgxMmhY6OMINqC2vCQ.roa
File: 6GJyPWjppWgxMmhY6OMINqC2vCQ.roa (raw, json)
Hash identifier: Rmo9mheq/WXZJjgqMA9niopi0Z/Eihn9fAuUNcw338E=
Subject key identifier: E8:62:72:3D:68:E9:A5:68:31:32:68:58:E8:E3:08:36:A0:B6:BC:24
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01837046C0DF7C707DDE0114C837B6DA6CDF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6GJyPWjppWgxMmhY6OMINqC2vCQ.roa
Signing time: Sat 24 Sep 2022 16:13:48 +0000
ROA not before: Sat 24 Sep 2022 16:13:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:70:46:c0:df:7c:70:7d:de:01:14:c8:37:b6:da:6c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 24 16:13:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e862723d68e9a56831326858e8e30836a0b6bc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7b:de:0a:c4:f0:5c:ed:35:4c:81:03:cc:7e:
52:ce:aa:53:28:21:7e:eb:b2:2d:4b:a8:b3:6f:32:
38:ec:db:8c:58:0b:e4:51:25:6e:73:9c:a8:4f:00:
88:bb:82:a7:eb:60:a0:36:bc:dc:fe:58:d7:c0:8d:
2a:1f:4f:ed:b0:68:37:19:b0:fe:34:0f:78:c6:26:
ce:e4:f7:f6:3a:3c:a9:03:f8:db:16:bd:02:21:ee:
cd:3a:74:14:b1:08:c8:8b:8d:1b:cd:df:3a:95:d2:
18:7a:c8:09:32:8f:38:ef:da:06:29:c3:8e:4a:11:
70:e0:3e:25:fc:f6:c3:04:d5:e3:94:78:8a:b7:d7:
b6:2e:14:fd:01:f3:de:3c:e9:5a:09:4c:b5:a8:4d:
a5:5b:b4:72:53:75:ae:61:a0:ec:e8:66:7c:4b:8c:
69:ee:e2:b1:42:50:f9:2e:77:70:c2:6e:16:00:4f:
62:39:37:4b:a3:ce:45:8e:18:aa:3d:fe:ff:a3:d4:
1a:6d:02:af:fe:f2:05:59:2c:2b:58:64:60:df:d9:
87:e5:f7:71:d4:9b:03:0f:78:e5:dc:06:cf:d6:af:
ef:2d:ff:1b:53:de:f2:0b:d3:eb:dd:01:c5:3b:21:
6e:4b:33:a8:c0:17:e5:a5:a3:57:a9:bb:a9:b2:75:
0c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:62:72:3D:68:E9:A5:68:31:32:68:58:E8:E3:08:36:A0:B6:BC:24
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6GJyPWjppWgxMmhY6OMINqC2vCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:35:fb:5c:d9:1e:4a:69:ff:bc:26:ac:cf:0a:48:e3:b8:18:
6c:f0:c6:7c:af:18:b1:69:50:ee:ec:45:4f:22:39:79:1a:82:
ef:91:35:64:74:7a:04:79:4f:dd:5f:b7:50:6a:e4:3a:5e:6b:
67:11:2f:f4:72:19:e4:86:9e:0a:76:4e:5f:84:8d:3c:71:cc:
0b:c2:16:12:ff:29:9a:ba:8a:93:29:6a:8a:bb:30:3d:89:48:
d9:95:bd:30:a1:24:47:b5:80:03:3f:fa:62:64:59:28:c2:5f:
df:8e:b5:b7:65:d2:d6:5e:41:6b:ff:77:ea:82:2a:5e:7b:d9:
a0:35:24:75:06:49:00:50:b7:fb:d1:eb:ba:c0:d1:fe:a5:47:
25:13:bf:28:96:fe:bc:8c:c0:f3:c4:d9:4d:73:a5:d3:b1:ef:
7a:9f:b7:c5:50:0a:64:c2:ef:25:be:4b:e6:9a:e5:25:ff:df:
1d:cd:0c:1c:64:7e:86:54:0f:0e:ca:74:3f:a7:4d:eb:0c:9f:
4c:6a:e5:cc:f0:1a:c2:3f:e2:c3:22:f5:8f:47:a5:53:46:03:
a2:e1:ca:c6:2d:09:c0:b8:3d:ca:cf:3b:44:d2:b7:24:9e:9b:
34:43:0c:29:0e:f3:cd:d3:49:47:8f:c9:94:23:02:d8:61:39:
69:49:db:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:42:43 2025 by rpki-client