Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6M0tJSDr8zsxx-soZbMfbvXD40M.roa
File: 6M0tJSDr8zsxx-soZbMfbvXD40M.roa (raw, json)
Hash identifier: 5emBm5VWZ0cCvdBD0zJOhZV6h7hwKtj+uHDt/9rem6s=
Subject key identifier: E8:CD:2D:25:20:EB:F3:3B:31:C7:EB:28:65:B3:1F:6E:F5:C3:E3:43
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A17CD99AD0F4E4104F0638C9913A37772
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6M0tJSDr8zsxx-soZbMfbvXD40M.roa
Signing time: Mon 21 Aug 2023 11:14:24 +0000
ROA not before: Mon 21 Aug 2023 11:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:17:cd:99:ad:0f:4e:41:04:f0:63:8c:99:13:a3:77:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 21 11:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8cd2d2520ebf33b31c7eb2865b31f6ef5c3e343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:84:ea:c7:91:b3:08:1c:a0:cb:b1:89:f5:
a3:3b:40:89:83:d0:f9:9c:a9:74:80:a8:9a:17:5e:
b6:c0:85:2e:4a:1b:2d:50:47:49:3d:e2:ff:ee:95:
3a:d2:7d:5e:b2:54:c4:5a:ce:4c:12:c6:2a:8f:fa:
bb:31:d1:28:89:19:d9:99:20:6f:f9:86:ae:31:3e:
cc:8a:7b:11:a1:2d:85:de:92:ef:f5:c8:58:60:8f:
ee:57:b2:03:0b:45:7b:80:09:e1:bc:6a:90:55:26:
24:d9:2e:0f:70:68:24:75:ca:a0:74:fa:6c:fa:d8:
b3:69:69:86:76:21:7e:00:42:c7:45:7d:75:04:ce:
2a:62:2e:fe:8d:89:d5:f1:79:f4:e9:b1:ba:29:5d:
f1:18:c6:39:6f:72:57:bf:f2:24:c5:b8:39:f3:c6:
cf:fc:56:03:f9:d2:94:73:aa:a9:73:7c:bf:05:d3:
6a:55:d0:ea:dc:83:40:09:d2:46:ea:ff:7e:9e:65:
c2:c1:15:92:65:be:9c:84:d3:08:3e:61:1e:52:7f:
fe:66:0b:62:31:70:69:5d:6b:d3:cc:1a:2c:ea:32:
73:9e:d3:67:e4:30:67:c5:8e:ae:3d:b2:56:e7:bb:
f7:fe:39:b3:66:f5:50:83:20:d3:9f:b2:c0:79:f6:
fd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CD:2D:25:20:EB:F3:3B:31:C7:EB:28:65:B3:1F:6E:F5:C3:E3:43
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6M0tJSDr8zsxx-soZbMfbvXD40M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:8a:00:ae:04:94:fd:e7:3a:69:6b:96:3d:35:f9:43:63:e2:
4a:f9:73:50:c0:c2:e5:67:4f:93:e2:e5:91:3e:14:74:53:94:
91:84:67:1c:e9:83:b9:40:61:cd:8f:fa:17:58:08:b7:04:7e:
27:63:00:0b:bb:92:2d:33:10:aa:38:07:e8:1d:a7:ae:70:3f:
7c:41:d5:05:0c:09:7f:32:d9:a5:9b:bc:2c:1d:83:c3:17:53:
84:2e:37:89:e6:a4:3d:bc:e8:d7:9b:d4:43:3e:db:4f:7d:c9:
1b:82:40:6f:11:9a:9f:1a:53:b7:3e:69:b8:5a:34:80:d8:d8:
ca:a1:a7:b6:68:1e:c2:e0:1c:71:95:f9:63:3e:c2:71:94:21:
ed:96:a0:62:67:ce:02:5d:e1:52:46:99:f5:d4:ed:3f:83:83:
1d:ce:0d:9d:e1:52:e5:14:9e:4c:75:a0:48:80:a2:9c:65:0d:
eb:ad:b4:88:72:8a:50:a6:ad:83:8e:2b:a7:41:f1:79:d9:22:
a3:bd:80:8c:b6:0e:54:9a:e7:ae:23:7f:05:9a:31:75:41:b8:
1f:0d:10:c9:56:48:ee:c1:bf:41:4a:3c:8c:4a:d5:2b:52:c9:
65:e3:cb:ef:5d:69:2d:6b:eb:a6:00:62:d1:f1:89:69:7d:51:
53:18:28:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:31:41 2025 by rpki-client