Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6uRAIxb8thLrNy8Fu2eOejyTRFo.roa
File: 6uRAIxb8thLrNy8Fu2eOejyTRFo.roa (raw, json)
Hash identifier: AyVu47FUkOKdRF/uZJEaMkXvxRwQvl/eNG4DVYGaF0k=
Subject key identifier: EA:E4:40:23:16:FC:B6:12:EB:37:2F:05:BB:67:8E:7A:3C:93:44:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A44D4B2ABDF06FA33E1A7891E7C75DB8F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6uRAIxb8thLrNy8Fu2eOejyTRFo.roa
Signing time: Wed 30 Aug 2023 05:05:04 +0000
ROA not before: Wed 30 Aug 2023 05:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:44d4:978d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:44:d4:b2:ab:df:06:fa:33:e1:a7:89:1e:7c:75:db:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 30 05:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eae4402316fcb612eb372f05bb678e7a3c93445a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7c:56:cc:62:0c:0f:91:1b:44:31:51:20:0d:
79:a9:52:a7:97:30:45:23:92:d5:46:2c:b8:ff:21:
75:0f:4f:4a:68:b8:1f:84:a7:5b:4f:20:0d:a6:9f:
44:6f:49:5e:73:c7:52:63:5a:42:77:12:b0:07:58:
a5:96:df:75:87:e6:57:f1:86:1a:03:3c:9b:e8:fa:
af:a5:5b:85:4d:31:6a:3d:00:5e:cf:62:60:00:e7:
35:55:83:66:e2:a1:3b:ec:47:ac:e8:21:e9:c2:a3:
e8:e1:a5:f8:c7:5c:3d:0f:b7:f9:7d:fe:dc:5a:8d:
c4:10:00:32:f5:94:8d:35:67:3b:04:a5:19:24:b9:
46:18:0b:6a:6a:09:69:3a:1d:36:20:22:8b:c9:38:
6b:f8:86:8e:50:4a:0c:69:5c:50:f8:aa:59:61:2a:
f5:07:f5:e1:73:d3:d4:e4:7e:ba:bc:54:c5:90:e0:
e8:49:7f:0d:bd:28:c0:60:02:9e:61:33:34:f5:4f:
1c:84:ba:ae:69:55:e9:23:49:33:15:a4:c5:f0:71:
42:dc:75:bd:ec:ac:5d:05:fb:7c:74:f0:ae:29:47:
80:24:84:5c:d8:4b:eb:ac:06:25:24:f6:e8:80:a9:
a6:70:af:7e:30:bb:91:d0:49:a1:6e:61:1b:30:19:
99:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E4:40:23:16:FC:B6:12:EB:37:2F:05:BB:67:8E:7A:3C:93:44:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6uRAIxb8thLrNy8Fu2eOejyTRFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:00:59:c4:75:99:c3:4d:80:45:ee:1c:9e:97:c0:60:7c:85:
7e:81:35:3d:f9:c1:62:4d:45:c1:80:c2:ea:ea:ff:97:c8:21:
12:ff:e8:ed:b0:73:71:e8:17:d5:91:03:c0:2b:57:1c:5e:ea:
f6:29:ce:6a:22:a5:60:44:5b:bd:3d:25:d5:c8:c5:19:44:58:
98:ac:e5:ea:d1:89:2e:ec:9a:38:30:c2:cb:d7:8d:3c:ba:17:
ed:10:61:bb:21:59:2b:10:b1:b8:b7:57:a2:03:a8:59:ea:f0:
dd:4c:3a:e1:ba:2d:fd:64:35:f7:43:ae:03:4e:1a:32:2d:2c:
5f:d5:2e:01:b2:84:ed:62:84:49:47:21:19:e8:39:bd:42:06:
83:4b:f2:cd:32:d4:0e:4d:0c:6a:6a:00:0f:6a:d5:ce:82:87:
8d:2b:3e:27:03:8d:cc:87:13:fe:a1:cf:da:cc:5b:f9:ed:54:
7c:e2:4a:a0:a9:9f:8e:a0:8f:bf:84:77:95:d6:c8:49:74:78:
07:b4:e8:e8:fa:a1:b3:e6:55:89:61:5f:55:7f:ad:28:6f:22:
05:f2:44:c2:46:ac:e3:81:36:70:4b:c5:c1:ed:bb:cf:eb:87:
5c:de:6f:39:35:da:29:4c:c7:12:b1:ed:b4:4c:31:de:55:f1:
39:54:75:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:29:10 2025 by rpki-client