Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2EmjKi7krILcAMXQav-QpGexHrE.roa
File: 2EmjKi7krILcAMXQav-QpGexHrE.roa (raw, json)
Hash identifier: od/K3Um7xu6nNhrmn3DsWEjgrTxVapy2vmZk0h+PECI=
Subject key identifier: D8:49:A3:2A:2E:E4:AC:82:DC:00:C5:D0:6A:FF:90:A4:67:B1:1E:B1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E85912FCEC3B7A0716F7F1A4554CBA23
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2EmjKi7krILcAMXQav-QpGexHrE.roa
Signing time: Sat 12 Aug 2023 06:04:58 +0000
ROA not before: Sat 12 Aug 2023 06:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:e858:68e7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e8:59:12:fc:ec:3b:7a:07:16:f7:f1:a4:55:4c:ba:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 06:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d849a32a2ee4ac82dc00c5d06aff90a467b11eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:af:e8:b3:73:86:75:f7:42:2c:50:71:b3:27:
33:c6:57:02:1b:c1:24:27:e8:63:33:97:4a:93:5d:
e7:5f:6e:df:0a:f0:a7:37:e1:41:19:4c:15:cf:35:
3f:b6:41:07:64:fc:45:45:aa:15:8d:d6:ae:e0:5c:
fd:83:02:35:0c:b2:b7:a2:3b:b9:a7:1b:85:93:36:
9e:35:89:5e:2e:3e:b1:4b:2a:45:2f:44:c2:67:dd:
e4:66:d1:84:ee:3b:0b:ec:31:9f:ca:0c:23:ac:0b:
82:05:16:63:89:9c:d3:51:8f:e8:27:11:7f:c9:3b:
12:9c:2d:ea:99:7d:49:a3:14:4a:9b:c1:21:39:eb:
06:64:7f:af:b6:de:54:47:4e:3a:b3:25:b4:3a:f6:
cd:7d:aa:6d:30:f8:7e:89:4e:8c:c6:e7:91:62:70:
28:3d:0b:26:41:28:0d:33:e5:53:7a:bd:cc:34:6d:
44:f6:e7:33:9b:22:16:39:ac:5e:77:47:da:9f:31:
c2:2f:c7:56:c1:ab:b9:12:ea:ea:3c:2f:a0:66:4b:
5b:6d:dd:94:55:a3:a0:05:b3:7b:d9:55:56:ba:54:
04:d2:56:5e:42:f4:be:27:c8:b9:15:fb:09:2f:fd:
ee:7d:31:c6:8d:59:23:07:1f:84:c8:ed:60:fc:c3:
a6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:49:A3:2A:2E:E4:AC:82:DC:00:C5:D0:6A:FF:90:A4:67:B1:1E:B1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2EmjKi7krILcAMXQav-QpGexHrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:d1:2d:e1:65:5b:fa:b3:58:e0:cc:99:78:43:6e:0b:51:60:
3a:79:76:75:3e:e4:04:a8:17:ec:08:f4:c5:54:1b:ff:48:b5:
22:f3:3c:b8:ad:06:71:e4:10:9f:77:e8:27:3b:de:7e:9f:6d:
4a:13:8d:c2:0d:32:15:dc:e0:f4:52:9d:16:0a:38:6a:d2:9e:
49:95:33:26:81:0e:de:f2:b0:de:86:19:a5:d6:8a:91:d4:1c:
1c:d3:0a:db:70:58:da:cf:0f:ed:e4:89:a3:38:19:cb:1c:a6:
7a:3f:7c:a7:6c:8c:ba:6d:c1:a9:ff:63:16:b7:d4:60:b1:34:
90:1e:a9:34:e0:11:73:f8:da:07:d2:74:59:0d:91:1e:70:4f:
f7:8b:54:22:f0:1a:b1:61:eb:0c:75:64:0f:00:80:66:3e:7a:
34:bf:4f:c6:67:33:b2:5e:97:d2:66:bd:2d:d0:55:3e:46:dc:
c2:5e:8a:13:e2:e3:57:09:32:5c:38:72:58:72:63:2e:09:cd:
34:14:2c:0b:db:a4:63:fe:3d:9f:99:7a:f6:9f:ed:31:c4:00:
c6:b5:51:80:46:de:0b:36:ce:d4:32:4c:c7:7a:a5:b7:76:40:
b7:3a:0e:28:96:4f:dc:c9:96:09:ce:f3:79:61:f3:f5:62:a7:
a5:1f:16:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:35:20 2025 by rpki-client