Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6qqR86vu__6_2WI_1f1rSQyij0Y.roa
File: 6qqR86vu__6_2WI_1f1rSQyij0Y.roa (raw, json)
Hash identifier: 4x6Z1ywr2v9H+mqVCGgVQwgGyTkDYyp+zs8KyuJQYx0=
Subject key identifier: EA:AA:91:F3:AB:EE:FF:FE:BF:D9:62:3F:D5:FD:6B:49:0C:A2:8F:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181FC31C8BB4A579CBC5B2D7F1594DD2EC3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6qqR86vu__6_2WI_1f1rSQyij0Y.roa
Signing time: Thu 14 Jul 2022 10:12:09 +0000
ROA not before: Thu 14 Jul 2022 10:12:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fc:31:c8:bb:4a:57:9c:bc:5b:2d:7f:15:94:dd:2e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 14 10:12:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eaaa91f3abeefffebfd9623fd5fd6b490ca28f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:98:cf:04:c1:cd:af:22:77:59:af:6e:17:be:
c2:87:e9:15:ed:dd:7d:77:ee:b6:5b:4f:6f:7e:78:
31:db:51:00:eb:d3:36:7a:67:f0:f6:16:90:34:8e:
16:35:b9:5e:d4:8a:58:b4:bc:39:09:4d:63:35:1d:
7c:dc:b3:0f:9a:d9:9c:8d:21:96:b6:9d:3c:2b:98:
2f:e2:80:75:94:20:fc:97:2f:ad:a9:b5:af:91:3f:
e0:d2:0f:45:19:60:b0:7d:7a:47:3e:db:07:a3:51:
9b:94:be:e6:cc:ee:d8:28:48:be:24:a5:94:25:ad:
54:ba:12:b0:a6:3f:c6:ac:3c:1d:78:2c:f6:be:58:
39:e8:db:86:84:1f:17:de:39:3f:c8:ae:8c:e5:b3:
bc:eb:0e:40:12:c1:fa:83:21:8c:72:eb:49:c3:27:
34:2c:f2:d4:85:a6:05:72:5c:f7:fe:97:d4:99:b0:
98:bb:6f:6a:7a:b5:51:d5:79:c7:dc:6f:46:12:90:
3e:e6:60:c4:95:06:1b:14:13:13:ff:e4:33:a8:d3:
73:1f:5a:b9:e2:b3:22:85:36:02:96:10:d4:8f:c2:
0a:fe:68:3b:e2:f5:b0:3e:32:85:a8:d1:8a:73:02:
27:17:95:4b:15:a9:4a:a6:8f:2c:f3:e0:bd:58:21:
12:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AA:91:F3:AB:EE:FF:FE:BF:D9:62:3F:D5:FD:6B:49:0C:A2:8F:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6qqR86vu__6_2WI_1f1rSQyij0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:df:13:62:71:ba:f9:52:b7:e3:2d:c9:9f:00:d2:14:1c:a4:
1e:14:df:d0:60:ed:b8:b5:19:de:00:0d:79:bb:cf:67:43:83:
a4:51:f7:ec:47:c3:4e:45:e2:16:12:c9:0b:66:ef:e6:d4:90:
29:90:40:25:81:d6:7d:17:a2:62:19:85:bb:2e:f4:ea:58:bb:
8b:75:ec:75:69:be:eb:ea:f9:bd:25:0d:99:44:d8:d2:09:20:
72:33:51:b2:19:2a:cb:4e:5e:7a:1f:05:7a:5c:21:44:3a:ba:
b9:3f:ff:be:54:c4:48:c7:ee:56:a8:b4:ab:e3:32:09:c8:94:
7f:c4:fe:41:6b:76:2c:ef:d4:90:56:43:6e:55:09:d5:55:e0:
fc:f1:92:07:f3:6d:29:3d:96:f0:4d:d0:d4:a5:4d:fe:39:07:
fd:00:cb:b6:4f:0a:83:33:37:b6:2e:87:7c:c0:0e:0d:f9:d2:
19:c8:1f:b7:6b:53:b3:53:31:d7:9c:0f:47:4b:80:70:c0:a2:
25:0a:70:b5:62:6c:f4:63:c1:e7:47:b7:ad:28:25:da:2e:76:
90:cb:92:af:3e:cf:f6:ec:4a:9a:15:d1:e1:2d:a4:96:f1:ce:
2e:68:6f:51:70:f5:73:0f:dd:4d:c8:e5:7a:c4:fb:d1:d5:05:
53:c1:5e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:19:42 2025 by rpki-client