Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6vGdcYwNG6wyLSbVDYIy3sBWxtw.roa
File: 6vGdcYwNG6wyLSbVDYIy3sBWxtw.roa (raw, json)
Hash identifier: 7Nu3EMsMjR878bIRuq8PRX2X2JyHTp/pMaEFqH0uY68=
Subject key identifier: EA:F1:9D:71:8C:0D:1B:AC:32:2D:26:D5:0D:82:32:DE:C0:56:C6:DC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185E00A1CC986E50F31CE69591B07FE154D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6vGdcYwNG6wyLSbVDYIy3sBWxtw.roa
Signing time: Mon 23 Jan 2023 19:10:37 +0000
ROA not before: Mon 23 Jan 2023 19:10:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e0:0a:1c:c9:86:e5:0f:31:ce:69:59:1b:07:fe:15:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 23 19:10:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eaf19d718c0d1bac322d26d50d8232dec056c6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:06:f5:c9:1e:dc:23:ce:c5:ce:b3:e4:e5:da:
38:12:40:d5:4f:a1:79:13:46:8d:28:a2:4e:64:38:
95:70:21:c2:be:5d:f7:d6:4f:3c:a0:01:a7:69:5b:
ba:80:e4:cf:48:75:d1:d1:44:8d:89:30:10:49:1f:
df:44:b2:72:8c:b3:07:3b:c3:03:e5:b2:3b:83:b0:
55:51:15:f6:77:65:6e:61:1c:6d:f5:86:f9:46:ce:
ca:52:1c:b1:69:df:27:48:ca:38:ad:e6:95:1f:46:
07:98:f9:c7:66:37:82:65:f1:42:8b:40:c2:81:89:
d7:61:46:f4:5d:20:6c:b6:c3:66:fd:7f:78:24:20:
b2:5c:58:89:7c:7e:bd:b7:30:bd:4a:35:68:77:0f:
ae:2d:8f:dd:d7:09:4d:5a:4a:f2:5a:cb:2d:fe:bd:
e0:52:e2:ca:1e:5a:51:80:90:4e:d5:07:e5:a2:69:
13:a8:26:61:b0:60:c8:05:1d:e5:55:65:22:8d:f4:
ff:11:ca:66:f0:68:ac:7d:4f:ef:64:96:96:d1:5c:
75:68:78:78:44:39:2f:94:c9:89:05:47:02:8a:15:
47:fc:76:5d:4b:c1:e3:7f:4d:79:44:69:dd:cb:46:
58:86:d5:aa:42:d6:97:aa:54:3c:01:5e:14:af:e3:
7a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F1:9D:71:8C:0D:1B:AC:32:2D:26:D5:0D:82:32:DE:C0:56:C6:DC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6vGdcYwNG6wyLSbVDYIy3sBWxtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:3e:2f:e3:18:94:e4:3a:34:0f:f3:82:c4:0f:e7:fb:a9:ce:
91:77:90:ad:e1:10:71:c1:27:8d:08:57:63:ec:db:cf:a8:9b:
49:13:f1:29:24:6f:2b:59:35:3b:52:a1:b1:b8:87:55:fe:76:
21:ad:46:47:d2:d7:74:e7:b9:cb:cf:3b:37:28:86:63:a2:d2:
50:a6:c9:5d:9e:6f:d0:a8:6f:2d:7f:ea:13:41:dd:cd:66:8d:
51:3e:e2:bb:70:7b:52:46:af:cb:9d:4f:a8:d2:f0:0b:c2:e7:
77:85:82:58:4a:f3:bc:b5:71:5c:ef:9c:2c:14:59:69:63:8c:
65:01:c2:b1:a5:d4:0d:f3:9b:00:12:d7:25:4b:4c:67:1b:da:
43:1b:d3:69:a7:2c:2c:1a:fa:18:b6:6b:b1:73:6f:43:80:86:
0e:bf:e2:00:02:d0:48:ad:c8:46:3d:65:4c:99:1c:e7:d4:f6:
0f:30:f6:2c:d4:4c:16:9f:90:5f:ea:72:2b:09:53:69:2e:3b:
22:f7:38:88:42:ec:d5:ae:26:6e:ce:b5:16:1f:12:da:8b:7b:
7a:37:77:35:b4:d5:62:bb:98:55:6e:1c:1b:c8:24:f9:63:3d:
5e:c7:65:87:c3:7c:22:4b:bd:b9:b1:13:05:4c:de:c0:b2:21:
15:c9:5b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:38:03 2025 by rpki-client