Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Epdw_x1YyMok5PlVzh6Lfd_HR8.roa
File: 0Epdw_x1YyMok5PlVzh6Lfd_HR8.roa (raw, json)
Hash identifier: oMPnhDIdxyb9j1YjsVHI8ajR4k0UOAgqCqmrVaValAg=
Subject key identifier: D0:4A:5D:C3:FC:75:63:23:28:93:93:E5:57:38:7A:2D:F7:7F:1D:1F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184C53B2EF2E58E9E8E2C2CBB9D35A362EF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Epdw_x1YyMok5PlVzh6Lfd_HR8.roa
Signing time: Tue 29 Nov 2022 21:11:40 +0000
ROA not before: Tue 29 Nov 2022 21:11:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
2001:67c:64:ffff:0:184:bdea:9abb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c5:3b:2e:f2:e5:8e:9e:8e:2c:2c:bb:9d:35:a3:62:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 29 21:11:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d04a5dc3fc756323289393e557387a2df77f1d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:c5:7b:b8:62:8a:0f:34:6b:6f:67:79:3f:
9b:5c:2a:e3:76:1c:15:af:e6:45:26:dc:19:2b:4e:
06:fd:f9:a0:d0:ad:25:89:05:17:87:62:35:32:c9:
22:b5:71:c3:67:5e:7d:8b:eb:9c:75:50:43:8a:81:
62:5a:aa:df:ca:1a:8a:1f:47:9e:5b:d1:65:f2:3d:
24:89:55:2a:96:e0:52:a1:1a:f8:dc:94:b5:7d:ec:
b4:09:56:b8:dc:a6:53:f3:fe:0a:bd:77:1a:ed:2a:
d4:ea:0e:fb:f7:fd:19:54:d3:15:06:fc:12:9b:b0:
60:3e:3e:46:16:92:ce:07:b4:0e:72:4b:00:e3:fd:
ad:7b:43:53:0a:cc:1a:91:bb:d9:bb:10:6d:b9:7e:
5e:d6:75:51:c5:d1:10:3d:71:89:3a:f0:97:ad:70:
ed:1d:5b:53:0d:60:c5:c8:7b:72:42:0c:90:8d:62:
14:f2:f9:ff:be:d7:d7:9a:96:05:41:ea:cd:53:fe:
cf:ad:20:d0:d2:41:17:98:ff:09:93:a2:f9:00:07:
bc:1a:34:c5:29:00:9c:a7:12:63:d0:9d:f7:fa:99:
7b:04:e6:31:8d:62:4f:0f:80:fb:c4:c7:fa:72:c5:
d0:50:dd:da:08:6a:25:90:85:49:60:76:51:f3:bd:
32:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4A:5D:C3:FC:75:63:23:28:93:93:E5:57:38:7A:2D:F7:7F:1D:1F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Epdw_x1YyMok5PlVzh6Lfd_HR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:46:d2:76:7c:79:82:92:1e:76:d9:18:46:48:90:94:bb:91:
7a:e2:a2:43:cf:5e:30:6c:60:8e:69:2b:a4:6d:76:0a:50:60:
29:2a:b5:20:d1:ff:65:dc:d6:7e:96:db:df:6e:ca:fa:3b:83:
48:4f:e4:94:bf:b7:b6:fc:15:74:a2:55:df:a2:f3:7e:58:8d:
00:55:7a:12:b8:cf:9d:75:66:78:ea:6c:88:44:f1:8b:55:67:
82:c0:e6:5e:9b:09:16:a7:11:0c:f8:34:db:af:5c:5e:2f:d7:
42:1c:34:65:9a:75:79:3b:93:8a:79:34:03:80:d4:d0:57:c1:
d3:f7:e2:b8:06:03:9c:a2:4a:cc:f1:65:8e:a7:7b:c7:3e:7c:
a8:84:c5:81:61:d6:01:3e:c4:c9:2b:37:73:29:da:99:c6:11:
11:61:e5:28:cb:c3:f7:66:3c:0d:76:ff:13:02:cc:9f:09:85:
09:a0:dd:c2:d5:d7:35:41:a6:93:02:30:75:81:c2:cb:f9:ee:
8f:5a:94:ae:44:c8:ae:18:14:a5:7c:4c:88:4d:60:49:88:31:
a6:1b:a1:08:ff:d1:35:ed:45:50:ab:b4:69:8b:12:aa:1d:78:
68:54:9b:be:2b:6c:f1:3e:7d:34:ca:90:79:f5:20:f6:2c:2f:
ee:cb:eb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:14:38 2025 by rpki-client