Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/27enItl-XHv0ISK-7iZJKiH-k9k.roa
File: 27enItl-XHv0ISK-7iZJKiH-k9k.roa (raw, json)
Hash identifier: gIugR3gxWu8LTr5616dX5DhhmwIBkm9hERWmilBpFGE=
Subject key identifier: DB:B7:A7:22:D9:7E:5C:7B:F4:21:22:BE:EE:26:49:2A:21:FE:93:D9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189CDC3F38D1729DAE3D574705597312B35
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/27enItl-XHv0ISK-7iZJKiH-k9k.roa
Signing time: Mon 07 Aug 2023 02:11:58 +0000
ROA not before: Mon 07 Aug 2023 02:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cd:c3:f3:8d:17:29:da:e3:d5:74:70:55:97:31:2b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 7 02:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbb7a722d97e5c7bf42122beee26492a21fe93d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:45:6a:e3:0e:4c:6d:64:a8:5f:35:93:74:06:
c0:0b:f0:7b:17:e3:48:82:0b:bb:21:9f:2b:2d:18:
56:23:94:67:82:f9:4a:55:9a:93:81:df:26:95:93:
11:7e:d8:e4:a5:f5:5b:9c:04:4a:e9:56:dc:f6:fd:
8b:ca:b8:f8:c7:e2:de:83:48:5f:cb:1d:5b:85:3c:
ea:24:ff:a7:7c:72:7e:df:a2:44:98:3a:22:7d:33:
1e:51:30:22:df:e3:51:15:ad:32:d9:42:70:f8:13:
af:4b:46:76:77:8c:91:f1:88:02:6b:e6:b7:3a:a4:
67:ee:5a:90:c5:3f:bc:93:2d:c2:40:bf:80:cd:0d:
47:d6:b7:59:9f:7d:f1:a6:a8:2e:4c:1b:2c:7f:69:
2c:bb:86:4a:1e:00:79:d6:c4:d6:f7:8a:25:6d:4a:
e8:29:5b:fc:cb:ca:9d:52:00:ef:05:8e:06:47:5b:
74:de:7a:37:5d:fe:2c:dc:74:b5:37:c2:f5:27:72:
df:20:cb:18:66:10:28:ce:91:55:b7:3e:03:bb:b0:
5a:14:a2:ba:4c:3a:04:62:c6:27:ab:47:43:4f:b7:
1d:74:f6:92:8b:9a:41:2f:5e:e5:19:80:db:05:79:
51:39:6a:a7:67:c0:db:1a:82:05:7d:b2:58:fb:13:
fa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B7:A7:22:D9:7E:5C:7B:F4:21:22:BE:EE:26:49:2A:21:FE:93:D9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/27enItl-XHv0ISK-7iZJKiH-k9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:a7:4d:7c:5b:aa:e9:25:d1:e2:45:57:37:0f:1e:6e:06:10:
7e:e5:9f:6f:ff:a7:8e:1a:14:6c:a4:d8:2e:2e:44:2d:85:1b:
3a:09:82:75:46:71:40:c4:1c:c1:e3:16:89:47:8d:ad:76:fc:
2b:1b:e9:25:61:cb:70:e8:88:d5:ec:d3:f9:20:d4:d7:4b:11:
7f:74:70:f6:67:1a:2e:77:69:63:8e:8c:d8:8c:be:5b:21:6d:
f8:fd:86:aa:40:69:b4:15:17:ec:94:91:fd:d8:8a:b7:0a:35:
f4:88:bc:49:ac:00:7c:60:8d:2a:53:82:28:4b:3f:bc:82:a2:
d8:8e:e9:cd:15:6e:e4:7c:5b:ab:07:fe:5a:79:1b:1a:db:51:
e3:80:6b:ba:f7:a4:4d:47:dc:c1:7e:96:78:74:fa:ae:c5:7e:
b2:27:d2:96:54:78:82:09:ff:32:75:2f:af:72:1a:e3:f5:57:
6a:f8:55:7f:c9:56:6d:17:68:48:8c:d4:84:8d:a0:4c:60:eb:
76:59:ce:66:8e:14:10:49:a5:a6:b6:3a:74:89:ec:7a:e7:50:
9a:f4:54:3b:06:46:27:c7:0e:4c:62:e9:5b:98:b8:85:4b:ed:
40:83:a3:8f:0c:f3:9d:dc:4b:36:be:63:07:46:72:a4:a2:c8:
94:7d:10:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:19:02 2025 by rpki-client