Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0EiAZWvgBN_F9Ix29tYzUTfzS6w.roa
File: 0EiAZWvgBN_F9Ix29tYzUTfzS6w.roa (raw, json)
Hash identifier: vJyWvAn8BEwCDv8zCD0P3Gp9x+cS7mRJ3nCqU9brj6o=
Subject key identifier: D0:48:80:65:6B:E0:04:DF:C5:F4:8C:76:F6:D6:33:51:37:F3:4B:AC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188281DBC64BDD229D9AA4A3DB8B018D46A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0EiAZWvgBN_F9Ix29tYzUTfzS6w.roa
Signing time: Wed 17 May 2023 05:10:17 +0000
ROA not before: Wed 17 May 2023 05:10:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:28:1d:bc:64:bd:d2:29:d9:aa:4a:3d:b8:b0:18:d4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 17 05:10:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d04880656be004dfc5f48c76f6d6335137f34bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:36:86:86:8e:6a:a2:bc:68:7e:42:bb:ef:
92:23:7f:cd:c8:d1:54:19:59:86:01:0c:3e:d8:b8:
04:75:a0:78:37:cd:77:fe:bd:45:35:1c:50:35:c4:
0d:81:78:c7:55:02:a4:7d:9a:a8:8a:1a:a9:3e:b5:
3e:42:26:1b:4a:aa:04:2b:65:e1:4b:52:9d:ee:42:
72:5e:dc:85:98:e7:36:05:ae:c7:0d:2d:5a:d7:b4:
ae:7a:20:42:5a:91:5e:1b:ef:69:aa:12:f7:8a:c7:
10:fd:df:03:99:dd:67:c4:2c:91:97:65:bd:19:57:
43:eb:9a:21:44:e1:60:85:a9:e5:a3:1d:65:38:43:
11:33:18:c2:6b:8e:72:4a:4e:09:fa:7f:3b:d2:84:
78:c5:9f:d6:d1:c0:0b:90:9a:30:c7:ba:48:2b:1e:
b9:32:82:6e:f0:85:7c:13:2b:5c:36:b0:99:f9:2c:
f3:1d:d0:0c:07:41:da:8e:d9:35:85:4b:71:42:5d:
ed:5c:37:7a:fa:54:96:9d:b5:28:67:94:59:c8:0a:
37:4a:25:dc:ca:71:4b:11:30:d4:72:c9:19:c2:ca:
da:28:21:1b:a7:c2:c2:91:b3:81:75:31:c9:ec:8b:
08:fc:a6:30:5d:00:34:55:b7:55:87:2a:61:fb:fc:
97:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:48:80:65:6B:E0:04:DF:C5:F4:8C:76:F6:D6:33:51:37:F3:4B:AC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0EiAZWvgBN_F9Ix29tYzUTfzS6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:27:d4:17:09:6c:0b:df:e4:64:77:79:15:ba:e8:24:fb:f3:
e6:d5:da:c3:fa:88:d9:f4:83:04:bf:e0:fd:d6:6a:62:37:b8:
ed:61:8f:92:b6:66:c1:fa:e3:6a:f0:c2:2a:fa:07:bd:34:c0:
1b:2f:3c:89:92:2a:4f:84:e8:f5:ed:df:f8:7e:fa:1b:ff:bb:
a2:cb:09:1d:67:5d:0e:01:52:1e:72:ea:be:8c:95:9a:b9:72:
21:f1:59:1f:a3:29:4d:c8:f8:25:e1:e0:6a:38:b2:16:77:5a:
05:9d:5a:ce:bb:fc:6e:64:fc:c6:ed:d7:90:66:ec:3a:db:e0:
24:c9:5b:11:51:9e:ff:86:bd:ed:9b:90:32:2c:65:77:6b:dd:
72:ca:9b:ac:7d:bc:eb:58:bb:b1:11:b5:6e:80:0d:0f:2f:29:
3a:7a:9d:08:32:18:3e:99:c7:b9:77:38:c4:e5:d2:40:d4:e7:
54:4c:b8:a4:ff:30:66:07:cc:50:81:cc:a2:b8:13:c3:3b:de:
e0:46:61:6c:f4:6c:68:fd:5e:94:36:33:32:b1:53:7f:67:81:
5c:a2:23:66:be:23:91:d1:6b:ba:59:15:7e:9f:65:90:d6:92:
05:a9:2a:d7:52:94:1f:24:7b:3e:8f:af:ff:e7:df:3f:3e:3d:
0c:95:90:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 15:50:46 2025 by rpki-client