Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2-EhOHJrMxeyK-LIdwK1Oom3cf0.roa
File: 2-EhOHJrMxeyK-LIdwK1Oom3cf0.roa (raw, json)
Hash identifier: 76xO2v/C85DzGJLHIKwog5ZCzG7QD1GLoG8vu8bjjQg=
Subject key identifier: DB:E1:21:38:72:6B:33:17:B2:2B:E2:C8:77:02:B5:3A:89:B7:71:FD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184A61EA156ACE9ADDF55CE2ED267326C33
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2-EhOHJrMxeyK-LIdwK1Oom3cf0.roa
Signing time: Wed 23 Nov 2022 20:12:16 +0000
ROA not before: Wed 23 Nov 2022 20:12:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a6:1e:a1:56:ac:e9:ad:df:55:ce:2e:d2:67:32:6c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 23 20:12:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dbe12138726b3317b22be2c87702b53a89b771fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:d8:30:95:c1:9e:f9:84:4d:9b:11:0d:5e:
e9:3f:84:e6:ea:92:8c:31:81:49:fd:9c:51:11:bf:
f9:91:f7:50:59:a2:dc:27:d3:ea:e0:d5:8e:ce:f5:
67:7e:d5:ed:2d:e7:ae:e7:2a:f9:f5:73:ae:39:d0:
63:71:76:96:10:ae:38:0d:3d:c3:89:47:74:dd:5f:
38:59:39:0c:06:11:eb:ef:dd:00:ba:ed:95:94:e7:
e9:ea:8d:66:ad:80:a6:fa:a3:bc:5e:31:c5:bc:c6:
6a:62:00:a7:a4:39:8d:2d:55:6d:4a:4f:d9:ec:a2:
3b:5d:3e:0c:11:89:d9:fc:1f:dd:bb:41:ab:31:98:
b1:32:ac:a0:02:fa:fc:bf:9f:70:cc:c4:ec:20:e0:
d5:84:ce:45:c0:94:71:bd:99:c9:16:26:f3:81:26:
c3:c0:64:19:51:d5:77:c6:e9:05:f1:cc:5d:e8:5c:
02:f3:e1:46:56:bf:61:95:36:a7:8f:1c:3d:6c:28:
76:4f:9a:94:48:ed:05:ca:02:69:ea:5b:92:15:79:
22:e1:87:f0:1b:52:e5:8e:e1:41:cb:44:43:58:a5:
78:d9:81:ac:8b:14:e6:4c:3e:0a:b4:19:aa:17:ff:
ab:2f:02:99:2b:27:9d:32:48:63:07:a3:e2:90:87:
00:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E1:21:38:72:6B:33:17:B2:2B:E2:C8:77:02:B5:3A:89:B7:71:FD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2-EhOHJrMxeyK-LIdwK1Oom3cf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:b8:40:e7:36:2c:fb:ef:6e:45:e0:aa:4e:7f:b2:bb:2f:97:
b9:71:76:6a:ec:03:d8:cc:dd:d5:4a:d0:e2:cf:84:78:d2:7a:
10:fe:a1:eb:7e:7f:af:7c:e2:10:a5:e6:2d:2c:8d:80:b8:cf:
fd:cc:e5:65:77:64:77:a8:8a:d9:66:20:85:86:01:4f:0e:28:
e3:cd:7d:61:0f:de:5b:e4:38:8a:a4:b9:90:1b:84:10:47:ef:
e5:d5:35:7c:16:e8:c4:14:3e:2f:25:e2:c3:3c:c8:f5:55:fa:
38:c8:52:aa:6a:1e:c0:ee:c0:2a:d1:c4:a9:2d:54:55:ab:1e:
69:e3:aa:da:74:6a:ce:40:8f:f4:01:b4:5c:a6:c7:bb:b9:09:
d8:55:a2:9e:a0:14:a0:06:be:25:8d:66:3a:8b:92:df:ad:56:
66:c5:e8:ca:54:35:8d:2f:61:21:fe:fc:cd:57:e0:c3:d9:4b:
f0:c3:72:b6:ee:b4:fe:8b:4e:fb:53:0f:48:7c:a1:d2:79:a5:
ff:97:ac:77:88:7a:2d:d5:90:44:9d:df:9e:91:2f:05:9e:af:
3f:29:7c:48:c1:c9:9f:f0:e9:27:5a:7c:4f:9a:43:e4:b8:00:
60:38:81:c9:1d:5f:46:55:38:1b:34:16:bb:d5:88:36:ec:27:
d5:fb:0b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:51:49 2025 by rpki-client