Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6IjSp2FCWZZ8CvJkyrx2kBRE7gM.roa
File: 6IjSp2FCWZZ8CvJkyrx2kBRE7gM.roa (raw, json)
Hash identifier: vS1SS617R4Thl3HgGx3W5/eOVuzNZKfrh7eVJvCkX4Q=
Subject key identifier: E8:88:D2:A7:61:42:59:96:7C:0A:F2:64:CA:BC:76:90:14:44:EE:03
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A26C921D0E5A3893E7B3192A97E21CEE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6IjSp2FCWZZ8CvJkyrx2kBRE7gM.roa
Signing time: Thu 02 Mar 2023 13:04:29 +0000
ROA not before: Thu 02 Mar 2023 13:04:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:a26c:5e09/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a2:6c:92:1d:0e:5a:38:93:e7:b3:19:2a:97:e2:1c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 2 13:04:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e888d2a7614259967c0af264cabc76901444ee03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fa:dc:84:93:9f:28:81:82:5a:ac:ba:5e:10:
ca:1e:ad:a1:66:a5:9c:4d:48:cc:05:4f:5b:e0:26:
46:b7:7d:8b:13:35:cd:3c:f5:8f:18:81:c4:c7:28:
88:8b:85:3f:e3:f0:7d:f1:d4:1b:18:d7:65:ef:ee:
3e:94:95:40:af:21:8b:f5:a0:01:1b:13:83:21:0b:
10:45:a9:83:e4:19:9f:94:9e:cd:8a:33:f5:7c:05:
20:95:e4:e3:4a:8e:75:fc:0a:19:cb:8b:c0:ce:b0:
79:15:60:60:4a:aa:8a:7f:01:77:da:8d:5a:e4:7e:
ef:0b:ab:70:a3:6e:9d:9e:e3:c7:3a:89:bf:32:69:
a1:65:12:18:99:5a:09:10:65:1f:04:29:2c:39:a5:
2f:b6:5c:fa:b5:d5:23:e2:2c:ff:83:e6:45:cf:4a:
5f:55:3b:d4:3e:a1:a6:19:be:fc:ea:92:56:b3:6c:
71:ca:bc:fd:7b:e5:38:f9:e7:b7:64:d8:45:c8:ba:
2f:61:e5:77:e7:59:4f:78:e4:a1:87:d6:a6:9a:7d:
36:63:14:f5:ce:8a:7b:31:b9:ef:2d:1d:19:88:91:
30:79:d1:45:9d:e9:b7:2c:f7:0f:ae:2c:1b:ac:93:
0e:9a:64:bb:9d:88:3d:b3:fa:55:27:c2:90:fa:37:
e8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:88:D2:A7:61:42:59:96:7C:0A:F2:64:CA:BC:76:90:14:44:EE:03
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6IjSp2FCWZZ8CvJkyrx2kBRE7gM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:f9:21:ac:ec:f1:59:70:95:b8:16:2a:34:7b:87:bc:30:ec:
bd:76:cc:b3:5f:9b:49:a8:26:01:63:ec:ca:fd:56:2f:49:26:
6c:b0:0a:9b:75:7b:b5:19:a2:eb:e0:10:2b:61:0a:92:b1:47:
d9:76:e0:3f:6b:0e:e7:bf:27:ef:55:f6:df:28:66:ac:a2:6f:
a3:d8:31:c1:f1:16:ac:36:7d:5f:95:1c:40:2e:89:05:13:3a:
c1:1c:93:a2:79:0f:73:1d:77:50:c7:81:24:7f:c5:e4:2b:15:
ce:ae:a1:30:a9:61:9c:2c:7c:7f:6a:03:13:c5:d6:fa:e9:1d:
d0:a0:be:1e:e4:ad:e4:b5:e6:c8:54:e6:5d:32:04:f6:f5:ee:
21:d1:86:0a:d4:42:aa:46:9a:0e:7e:f3:13:14:db:d1:a8:38:
81:a4:81:71:5a:25:32:d8:ca:a5:09:ad:ae:9a:09:d4:4b:2d:
ad:f2:bd:b8:70:74:d2:1c:26:82:79:b1:19:22:36:2e:c6:e6:
fe:a6:cf:f4:1f:93:bb:bf:ce:51:1b:ef:ef:e3:ec:a8:36:8b:
3e:27:07:fb:98:0d:7a:b5:f1:47:ff:ba:b8:f3:a0:b4:ff:dd:
5a:ba:45:3f:90:d7:29:d3:ea:e3:1c:1d:0b:80:25:96:73:9d:
0d:d5:89:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:55:42 2025 by rpki-client