Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4EJJL383XbIQk0PUbMUZ9fTeiaE.roa
File: 4EJJL383XbIQk0PUbMUZ9fTeiaE.roa (raw, json)
Hash identifier: p7YbnEQPgKxe5yJIOq+bUqgaJR8jnO9Itn7YTTJS1hA=
Subject key identifier: E0:42:49:2F:7F:37:5D:B2:10:93:43:D4:6C:C5:19:F5:F4:DE:89:A1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183EA5EEF9C4C0F7DA95AA9EA4F36F42916
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4EJJL383XbIQk0PUbMUZ9fTeiaE.roa
Signing time: Tue 18 Oct 2022 09:13:53 +0000
ROA not before: Tue 18 Oct 2022 09:13:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ea:5e:ef:9c:4c:0f:7d:a9:5a:a9:ea:4f:36:f4:29:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 18 09:13:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e042492f7f375db2109343d46cc519f5f4de89a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:72:9b:86:cc:30:b3:dc:7f:c6:5a:da:98:28:
a9:9d:7c:25:1c:d9:25:bc:4a:04:bf:cc:e9:94:da:
6a:ce:aa:e0:1b:ff:2e:65:9f:26:d4:2b:6a:f7:ad:
72:2a:c2:74:3e:e0:93:e1:5a:03:c5:30:e8:3e:cb:
ae:bc:f8:b1:43:8a:e8:b6:c6:46:be:d0:b0:c1:f5:
a2:c1:5a:5c:07:f2:ab:6f:6b:b9:5e:ce:4a:cd:af:
a1:3c:a4:8a:be:12:58:83:d9:17:ce:35:fc:ca:86:
90:7a:09:c6:95:8d:65:37:c7:aa:19:52:79:27:f7:
bf:e0:39:09:7a:a7:13:1d:58:70:b3:72:c9:7f:b5:
71:f6:0f:f7:d6:67:ab:54:6b:02:c8:65:8c:ff:98:
15:51:dc:39:02:5a:27:64:92:77:bc:eb:28:a9:0e:
7a:09:5f:b2:d0:1d:aa:97:e3:a5:a3:2c:19:c8:25:
f4:0a:ec:c1:ae:be:c0:f5:bd:a3:b1:9a:72:22:af:
2f:5d:da:39:e2:d7:f3:2e:f2:d6:ea:8a:ae:37:70:
ae:0d:3f:65:33:66:4b:06:dd:f6:60:3d:de:aa:f9:
b0:71:8a:aa:c1:d1:ff:a0:da:39:95:45:e1:8a:ec:
ad:89:06:27:6c:35:0e:23:20:16:11:1d:65:51:83:
d7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:42:49:2F:7F:37:5D:B2:10:93:43:D4:6C:C5:19:F5:F4:DE:89:A1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4EJJL383XbIQk0PUbMUZ9fTeiaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:db:5f:8f:61:8c:82:60:05:fb:42:df:65:6d:fb:a6:82:50:
9a:de:ac:6e:71:d1:bc:d9:2e:32:a3:80:11:ba:f1:e1:d1:43:
57:bd:00:a0:5b:66:e4:bc:67:ab:e3:b0:7a:cb:e8:5c:cd:35:
1b:9a:9a:6d:34:19:74:30:91:3e:0e:1a:28:f1:64:23:f6:a8:
28:49:af:d5:ba:a8:88:b8:bb:d3:f1:73:e9:a0:37:bf:43:c5:
29:5d:3b:ae:b5:73:ed:62:73:f9:60:4f:37:06:71:db:df:4d:
fd:54:d3:82:94:1c:e5:c3:77:0d:e6:3b:b6:2d:88:6d:01:e0:
eb:c1:8a:16:56:ec:57:4e:db:04:fb:b2:3c:dc:4e:9d:dc:44:
ee:dd:b3:92:e1:a1:ce:d1:0d:d7:e0:cb:f3:0e:da:27:87:85:
cc:a8:47:8f:39:a8:c7:79:0c:53:16:ec:e7:1b:a1:79:ae:79:
6a:fd:94:40:0b:4f:4e:9c:af:da:73:c6:10:0d:70:c9:72:78:
58:25:69:32:78:fb:82:f4:00:32:32:41:2c:fd:26:7f:23:5f:
d9:9e:59:49:35:73:f7:6d:ed:e4:0c:0f:77:a2:4a:47:12:c0:
ff:ee:02:df:09:05:bb:01:d3:71:f3:4a:ff:b1:29:a6:6c:0c:
23:f6:41:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:46:19 2025 by rpki-client