Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6dDQjcm1bJINyr6rKAZViMXz7cw.roa
File: 6dDQjcm1bJINyr6rKAZViMXz7cw.roa (raw, json)
Hash identifier: RIPrNXd96EDR/wEi7OVJRB62RicSg7jv/4AcMrz1ts8=
Subject key identifier: E9:D0:D0:8D:C9:B5:6C:92:0D:CA:BE:AB:28:06:55:88:C5:F3:ED:CC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01842E685114204ADE2533A6E25CD5595DD0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6dDQjcm1bJINyr6rKAZViMXz7cw.roa
Signing time: Mon 31 Oct 2022 14:18:19 +0000
ROA not before: Mon 31 Oct 2022 14:18:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2e:68:51:14:20:4a:de:25:33:a6:e2:5c:d5:59:5d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 31 14:18:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9d0d08dc9b56c920dcabeab28065588c5f3edcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d4:ba:10:86:fb:75:40:df:46:b0:88:d0:01:
4a:9f:d8:9a:c6:0a:cb:3a:e3:0e:f9:3a:b1:83:cd:
38:76:5b:b1:75:10:db:ae:60:b5:06:3b:dd:c7:02:
82:18:b2:11:aa:49:12:2f:85:19:48:87:b9:e0:2a:
9e:ec:6d:c9:0b:fe:08:a7:b7:c2:bc:e1:9e:f9:4e:
dc:68:fa:ad:b0:df:fe:9d:cc:ce:de:0f:d3:b0:f2:
98:7c:20:d4:01:d4:7a:a9:bc:c1:ff:57:59:39:3f:
3e:46:f9:48:ba:76:43:24:6f:cd:7d:e9:22:0b:c0:
35:e4:12:1e:f6:75:58:75:62:1f:bb:ed:ff:43:81:
e5:b8:eb:2c:47:eb:38:d1:51:87:cf:ee:69:3a:08:
61:25:f1:b9:fc:b7:44:ae:5b:bf:eb:d4:c7:d3:a4:
d4:97:3c:91:63:bb:de:b2:11:60:7d:6b:0a:d1:98:
22:c3:72:d6:2e:99:6c:6e:f4:66:df:b0:23:28:6e:
17:01:b4:28:27:33:5f:91:be:4a:37:44:4e:15:ce:
57:54:eb:46:e4:f0:0e:76:ee:44:f8:0b:d8:1c:a2:
98:a3:8a:50:0d:aa:11:54:39:f8:18:94:5b:98:ff:
3c:38:50:b0:b7:5c:9c:7e:b1:ab:91:b6:10:c8:0c:
81:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D0:D0:8D:C9:B5:6C:92:0D:CA:BE:AB:28:06:55:88:C5:F3:ED:CC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6dDQjcm1bJINyr6rKAZViMXz7cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:38:cf:e1:1e:de:3d:86:c8:ff:a3:bf:62:3e:8c:dd:d6:45:
e8:57:28:f6:ef:05:aa:50:13:5f:c7:e0:f9:7c:57:6e:49:98:
8f:75:4c:c0:e1:a8:d2:bd:77:eb:ad:74:e5:39:9a:b8:0e:57:
03:59:14:14:48:bc:04:87:ff:96:2f:85:0d:d5:84:f2:a2:47:
31:a3:2e:7d:58:e1:c4:d0:d0:f1:ea:0a:b6:fb:37:0b:27:33:
4e:e6:7e:44:17:d5:9f:f5:96:83:45:4c:7f:18:d2:94:80:7c:
3d:40:8a:d6:14:72:d5:b1:39:94:bf:0a:94:e0:fd:99:b1:0c:
10:08:f1:ba:dd:59:8c:08:03:95:79:c4:15:5d:37:f5:5c:b1:
0a:e3:e0:85:6e:be:7a:20:ef:25:6b:ec:1d:c0:f6:f1:95:03:
87:52:73:ed:fa:95:40:44:84:c8:a2:f2:9a:af:15:fd:da:cf:
8c:14:20:e8:ce:57:e7:1c:97:bf:ea:2e:6a:99:02:80:79:cc:
aa:77:30:dc:d6:48:b9:24:e2:13:03:fa:73:89:48:14:6f:56:
8e:66:ad:fe:97:c9:44:89:e3:5a:f1:51:a0:bd:a3:4f:aa:34:
76:9f:6f:3a:4d:0f:f4:cb:2c:f9:f6:66:77:36:e8:8f:30:de:
79:c0:8d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:39:08 2025 by rpki-client