Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2EZBFCZUeCjuWNRaCu5aO7kE20k.roa
File: 2EZBFCZUeCjuWNRaCu5aO7kE20k.roa (raw, json)
Hash identifier: 2KMT6kGamkjWGZFppYKm9Ayt1F/QqhYxINaF4SJ+OQ4=
Subject key identifier: D8:46:41:14:26:54:78:28:EE:58:D4:5A:0A:EE:5A:3B:B9:04:DB:49
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865C48247C1154DD13C287989269C35D78
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2EZBFCZUeCjuWNRaCu5aO7kE20k.roa
Signing time: Thu 16 Feb 2023 22:11:17 +0000
ROA not before: Thu 16 Feb 2023 22:11:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5c:48:24:7c:11:54:dd:13:c2:87:98:92:69:c3:5d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 16 22:11:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d846411426547828ee58d45a0aee5a3bb904db49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:75:60:c8:81:5f:5b:2e:76:0e:0c:7e:12:
59:c3:0a:35:88:af:61:f7:e0:36:a3:ea:b5:ec:c7:
3c:c1:33:74:8e:f1:ca:f0:2a:2f:6b:82:c4:71:07:
d5:de:19:75:fa:8a:37:2e:6d:00:4b:7b:87:c3:86:
0e:ea:89:de:91:ad:5b:39:77:66:2d:5c:e5:4b:b2:
09:c2:db:d3:7e:c6:d0:7a:9c:7e:2c:4a:86:8f:5e:
76:2d:9d:02:d7:55:7d:59:c7:cb:c6:0b:0f:fd:af:
7b:c5:a4:ff:b7:aa:61:21:11:e1:a4:c6:76:48:ef:
0e:41:f7:d0:e4:af:80:0d:0d:7e:8f:20:2c:b7:95:
0c:a1:fd:93:2a:a8:16:35:1c:2c:31:32:8a:a3:e8:
c4:68:1b:e4:c3:fd:44:de:e1:50:42:18:4a:25:e7:
26:98:e6:da:55:82:7e:18:3e:da:c6:51:85:27:d6:
7a:bc:5f:46:e6:2a:98:30:74:cc:34:99:24:31:ce:
3b:46:f6:2b:7d:b2:39:33:a4:6e:f9:2d:78:5f:fb:
e3:a2:08:0f:61:a8:78:c2:be:b2:6e:4d:72:e0:13:
e5:f4:c4:c9:2c:d0:c2:1f:23:0e:da:15:fe:36:2b:
82:1c:16:ef:69:12:67:a4:69:02:58:16:8d:a5:c9:
2b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:46:41:14:26:54:78:28:EE:58:D4:5A:0A:EE:5A:3B:B9:04:DB:49
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2EZBFCZUeCjuWNRaCu5aO7kE20k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:65:13:91:51:85:7c:8f:85:85:58:ce:3e:da:a0:1e:b3:a9:
4f:74:92:13:34:42:9f:b5:bb:17:0e:fe:27:a9:b2:69:81:4e:
21:f2:a8:60:6f:bb:d7:24:28:75:04:57:61:72:8c:f0:ca:dc:
f8:4c:29:47:7e:14:f9:77:48:fb:c8:64:72:22:10:e4:88:bc:
54:c4:7b:fa:9c:42:08:7f:3d:82:66:6b:15:cf:ee:83:c6:ca:
83:17:81:9f:8d:a6:45:02:d1:50:13:3b:14:46:78:67:4e:5c:
94:9a:a0:9f:a1:08:6a:b1:45:cd:44:fe:d1:29:99:7d:4d:4b:
27:4c:db:84:5e:bd:c3:63:83:92:c7:7d:3a:3b:8e:0a:c0:24:
ab:2e:71:50:39:6e:e2:cf:ae:86:bb:a0:45:3a:27:64:16:50:
23:ca:57:9c:14:cc:95:e2:44:22:03:cf:b3:e9:55:d6:e1:85:
9d:fb:54:e3:a0:e3:bd:76:f6:7f:ec:2d:62:62:19:67:82:b1:
d8:35:b3:c1:f7:a8:20:23:9b:34:39:a8:35:4c:96:20:80:e6:
e4:18:39:e2:44:ab:69:cc:de:a3:52:63:76:70:4c:55:13:91:
0e:3f:db:97:a7:cd:7f:15:8b:7b:1d:c1:6a:01:b7:16:0f:9e:
fa:ab:29:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:58:33 2025 by rpki-client