Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/52ee3Kx4Id9OaCWNI5nu88ErkSA.roa
File: 52ee3Kx4Id9OaCWNI5nu88ErkSA.roa (raw, json)
Hash identifier: vEjd7dnhuFSOheE9a59diBxzniMKbSNFteYx0/khNv8=
Subject key identifier: E7:67:9E:DC:AC:78:21:DF:4E:68:25:8D:23:99:EE:F3:C1:2B:91:20
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018865EA28A68C4A442C8D256BDA7FAD156B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/52ee3Kx4Id9OaCWNI5nu88ErkSA.roa
Signing time: Mon 29 May 2023 05:10:24 +0000
ROA not before: Mon 29 May 2023 05:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:65:ea:28:a6:8c:4a:44:2c:8d:25:6b:da:7f:ad:15:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 29 05:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7679edcac7821df4e68258d2399eef3c12b9120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a9:b4:a8:41:16:e3:81:8f:33:ed:3e:ac:ca:
5f:78:8b:40:07:7b:db:fd:55:18:1c:c0:37:c6:13:
cf:7c:04:cb:e8:15:e2:29:14:13:31:ab:1a:17:05:
6e:50:c4:34:6a:16:1e:85:1c:de:1f:01:c6:d7:cb:
35:74:33:34:e1:74:43:9d:88:fe:7e:d7:fb:c4:8f:
bf:dc:e8:ba:b5:c2:54:5e:a3:19:05:3a:29:f7:c1:
c3:e5:df:85:8b:c9:af:c6:d5:3e:f0:6e:7b:86:b7:
e2:bc:e6:b9:fb:6e:7f:65:8c:65:e1:c2:50:dc:ff:
58:12:85:7d:0d:4a:02:97:be:80:50:b7:4f:f7:f2:
3b:a2:b2:82:44:10:94:c4:8f:f5:66:01:d5:76:10:
e1:c0:55:55:dc:b0:cc:1f:6d:8f:2f:26:cc:86:af:
8f:00:0e:be:31:1d:92:98:35:01:24:b3:a0:23:b3:
7c:6b:07:d4:7f:77:6a:5f:f1:b2:a9:d4:4f:5c:29:
a9:e1:0e:92:40:81:a9:67:03:13:76:6e:82:22:a5:
2e:94:60:73:42:b3:05:25:03:f5:db:f7:38:24:d9:
32:7e:86:4b:2d:cb:b4:74:9c:cd:d9:81:71:a8:43:
3f:bf:42:2e:77:88:1d:5f:dd:74:8d:6c:2f:de:6d:
0f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:67:9E:DC:AC:78:21:DF:4E:68:25:8D:23:99:EE:F3:C1:2B:91:20
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/52ee3Kx4Id9OaCWNI5nu88ErkSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:90:20:36:dd:5d:dd:9c:ad:fa:10:66:17:08:c7:b3:85:54:
a3:16:a2:9a:7d:20:bc:e2:43:9f:91:e3:22:cf:91:ef:83:e8:
3b:8b:d2:fa:0f:a2:0c:4d:ab:83:a2:25:62:33:0c:b0:6f:7a:
97:f9:ad:77:87:b0:82:07:4e:0f:b7:84:aa:a0:fc:b9:99:86:
93:c4:e8:8c:67:bf:7e:6c:81:55:3d:fc:58:5e:c5:9d:72:90:
0f:9a:35:30:4a:ba:c7:72:0a:4e:28:ac:8c:90:95:b4:ca:1b:
28:f7:2c:4d:16:e8:9f:5e:c6:a2:5a:bf:22:93:31:64:74:45:
7d:ef:96:b2:16:9c:e5:28:71:c2:11:6c:22:57:87:44:03:99:
88:41:72:0c:6b:9d:14:5c:14:e3:d0:12:63:80:8a:0a:29:5d:
f4:09:70:fc:83:ae:73:cb:96:83:63:6d:18:4a:4b:02:bc:8c:
b7:93:83:24:fb:b2:55:45:eb:e1:27:28:2a:e1:38:95:8f:a3:
6c:c7:b3:ec:95:59:93:9d:50:0c:8e:5c:2e:c2:d9:a8:ae:05:
82:bb:98:e3:ed:e5:8f:1c:d7:88:84:1e:1b:24:59:4e:76:07:
1f:bd:04:e0:81:69:5f:a6:8b:d9:66:1e:df:b2:f3:67:0c:4f:
7b:3a:d5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 03:03:41 2025 by rpki-client