Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6c5jxZAz6_t1mRbzRuwbvjgkBWs.roa
File: 6c5jxZAz6_t1mRbzRuwbvjgkBWs.roa (raw, json)
Hash identifier: xnxUk2HPBCJJX3Nw9MdHAZtjo+qSfSIOkkei9Vwvrtg=
Subject key identifier: E9:CE:63:C5:90:33:EB:FB:75:99:16:F3:46:EC:1B:BE:38:24:05:6B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182997C1424142237C8D2B1F8EF47330047
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6c5jxZAz6_t1mRbzRuwbvjgkBWs.roa
Signing time: Sat 13 Aug 2022 23:13:41 +0000
ROA not before: Sat 13 Aug 2022 23:13:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:99:7c:14:24:14:22:37:c8:d2:b1:f8:ef:47:33:00:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 13 23:13:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9ce63c59033ebfb759916f346ec1bbe3824056b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4d:bb:97:87:7b:1c:63:d2:68:9a:1a:73:c7:
58:2c:5d:94:e3:68:76:b0:c8:d5:a2:62:f4:c7:b9:
da:77:d0:79:a2:9a:80:2f:15:b2:dc:06:06:f3:eb:
86:8b:54:04:e7:1c:ab:3e:48:50:26:84:be:c2:a1:
3f:ef:1a:ab:17:c1:49:0e:47:13:fe:70:e6:b3:a2:
55:69:f0:7f:28:8c:3f:c9:dc:c3:46:18:41:da:e9:
82:b8:d4:7d:43:9f:be:75:e2:28:45:08:5d:a7:b3:
fd:1d:7c:9b:bf:22:4d:9a:bb:f3:92:82:2e:ef:5f:
a6:ce:47:35:62:f6:97:9a:98:ec:b8:e2:61:83:33:
4f:8a:b7:35:17:fe:2e:13:0c:f8:d5:da:95:67:99:
32:b4:88:07:fc:5e:11:8b:3c:bf:a9:a8:2e:ba:3d:
1a:11:b8:c6:6f:59:ef:9a:79:67:c8:e7:f0:fd:7b:
23:12:a1:ef:c9:fd:7f:1e:af:08:d6:bc:46:56:34:
48:02:9b:9d:24:f3:09:27:c8:07:69:88:b3:57:30:
30:c6:d6:56:98:7f:43:72:07:e9:f5:86:7f:b4:71:
ba:06:99:4f:34:79:b6:19:71:4f:6f:f2:81:6f:b0:
e0:b8:40:5a:25:7a:41:ca:e2:78:b7:ac:0f:d8:8b:
31:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CE:63:C5:90:33:EB:FB:75:99:16:F3:46:EC:1B:BE:38:24:05:6B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6c5jxZAz6_t1mRbzRuwbvjgkBWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:9e:a9:b4:82:57:10:70:ad:7f:55:c2:af:25:0a:45:1f:db:
f3:7c:1a:e1:92:4c:9c:c6:b5:17:dd:ca:ae:df:7f:e0:78:04:
8b:7c:5d:ee:78:91:b0:e6:19:8b:22:2f:21:97:39:f5:9a:3e:
14:ff:c1:14:22:7a:a7:ad:c1:0b:d3:53:d0:eb:e3:dc:ef:e6:
a7:5a:d3:8f:c1:92:ae:80:9b:fd:73:6a:0c:13:9e:4f:c3:f8:
ee:55:c5:9f:b5:19:de:f3:6f:6d:b4:62:99:b0:a0:69:90:3c:
77:30:63:bc:07:2a:f2:76:1d:2f:c9:2b:a6:7f:51:53:df:b5:
43:88:c7:fc:0f:69:25:22:77:aa:e1:b6:96:f8:34:ba:b7:c5:
b0:11:9e:34:9f:29:5c:b4:e0:d8:bc:54:c6:61:84:d1:a9:c5:
d1:11:9e:ea:3a:bc:2c:bf:aa:92:5a:6c:27:00:c6:99:bc:5e:
98:ea:4f:26:69:eb:4d:ae:f1:6b:d7:fb:bd:a9:a7:f9:f0:24:
55:bd:f0:00:1d:52:f4:a2:91:d3:71:2e:9e:79:39:95:23:38:
7a:fd:ea:76:1e:a4:7e:65:e4:42:a0:e0:b4:5e:0f:28:44:92:
b9:c7:a7:a1:81:44:25:be:6d:e6:40:40:59:55:d3:8f:37:5b:
ed:fa:ff:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:08:33 2025 by rpki-client