Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6tY6GG_LWfb7Vlo67Tmia2HqTi8.roa
File: 6tY6GG_LWfb7Vlo67Tmia2HqTi8.roa (raw, json)
Hash identifier: QxzWT71uGWrq5UjLVkqNq1ft5VBHebHAXAlwN3FBc9Y=
Subject key identifier: EA:D6:3A:18:6F:CB:59:F6:FB:56:5A:3A:ED:39:A2:6B:61:EA:4E:2F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01879D812DF0B879E6A3F7FFCCB5D53E0352
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6tY6GG_LWfb7Vlo67Tmia2HqTi8.roa
Signing time: Thu 20 Apr 2023 07:11:41 +0000
ROA not before: Thu 20 Apr 2023 07:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9d:81:2d:f0:b8:79:e6:a3:f7:ff:cc:b5:d5:3e:03:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 20 07:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ead63a186fcb59f6fb565a3aed39a26b61ea4e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:97:c5:d1:e9:bc:36:43:ee:68:97:69:bc:1b:
20:1e:5a:b9:c3:19:be:26:4a:ca:60:a7:84:78:26:
02:9f:36:58:01:00:85:ed:c5:8e:69:b7:ce:3c:bd:
2b:15:50:86:7e:44:f0:b2:6d:c0:18:77:63:dc:53:
87:3f:be:b6:ab:74:29:fb:05:00:56:9c:40:64:04:
78:05:b9:6f:26:c9:66:c7:32:3e:89:b5:14:32:25:
e7:1e:a9:a5:00:a9:54:af:cc:7b:7e:cc:58:5b:d7:
b2:9e:1f:f0:d3:90:8d:f3:d0:e5:9f:31:d1:cf:99:
f7:2e:04:7e:e1:0a:e8:69:cf:aa:78:b3:37:a2:72:
9c:0f:d6:03:87:f9:c3:47:b4:0c:8f:56:14:25:61:
0b:34:49:a9:25:fa:f1:4d:2a:0d:f4:5b:dd:41:96:
71:d9:67:9f:b5:c9:41:c7:80:45:9c:cf:b3:20:e4:
0f:66:83:6e:7c:64:ff:29:18:49:50:6f:f9:d0:65:
74:7b:d5:79:55:73:64:bb:35:4c:9f:e9:c9:9e:c8:
ec:39:5a:f6:06:e3:06:7c:0b:18:a3:08:41:6b:bc:
f1:cf:ac:d6:ce:ea:4c:d1:11:84:79:96:f6:1f:7e:
b6:c4:00:17:f7:99:d9:83:52:0f:aa:15:d7:3f:d4:
d5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D6:3A:18:6F:CB:59:F6:FB:56:5A:3A:ED:39:A2:6B:61:EA:4E:2F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6tY6GG_LWfb7Vlo67Tmia2HqTi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:74:9e:d8:e5:6f:d0:80:94:a4:81:15:2f:58:7c:d6:79:c8:
5d:42:50:e8:ca:2f:5a:a8:68:78:29:35:3f:31:d2:21:48:23:
ed:dc:10:f4:f7:09:46:c9:70:e5:73:bd:b7:2a:89:9b:6c:ff:
08:0f:2f:35:43:32:7a:dd:c0:21:4b:01:88:18:a2:a3:78:4d:
86:16:ff:09:06:cd:0c:35:c0:3b:72:29:bc:80:60:71:bb:17:
51:a0:cc:6b:8f:ab:69:5a:35:dc:e6:24:26:1c:55:4b:2f:3f:
c5:f2:5d:73:f8:e9:8d:87:28:3e:39:e1:f7:36:61:96:82:b1:
a7:7a:9e:8a:77:34:a8:2e:9c:9d:99:7f:2b:d5:f7:99:ad:2f:
37:e7:3f:32:f2:d2:71:0b:bf:0b:c8:a4:a8:28:80:dc:1c:97:
f8:2d:7f:46:5a:fb:59:7b:98:a7:2e:8c:e9:76:7f:01:0f:af:
fa:eb:54:37:c1:63:3d:9b:30:ed:dc:5c:f4:0a:16:32:a2:23:
ad:87:4b:38:18:20:66:9b:ec:68:ae:d3:df:a0:ce:c4:5e:43:
ad:3c:9a:a5:7c:03:24:2c:4a:aa:12:91:e8:19:19:84:45:05:
f0:15:e6:13:2f:a9:cc:cc:a6:1a:15:86:6b:49:19:15:38:d9:
1f:4b:e0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:57:01 2025 by rpki-client