Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E0EG4y_DVd4O2B-1Nv4VWM26MHA.roa
File: E0EG4y_DVd4O2B-1Nv4VWM26MHA.roa (raw, json)
Hash identifier: WFQAs5DDYNqC0A4Hczf5auimfTlqnBGj42teWdFx05E=
Subject key identifier: 13:41:06:E3:2F:C3:55:DE:0E:D8:1F:B5:36:FE:15:58:CD:BA:30:70
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018733BCA7CA1F54C71D36CB9A6CAAFDDC47
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E0EG4y_DVd4O2B-1Nv4VWM26MHA.roa
Signing time: Thu 30 Mar 2023 18:16:54 +0000
ROA not before: Thu 30 Mar 2023 18:16:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:33:bc:a7:ca:1f:54:c7:1d:36:cb:9a:6c:aa:fd:dc:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 30 18:16:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=134106e32fc355de0ed81fb536fe1558cdba3070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bd:94:c3:08:90:e1:11:97:7d:e8:4c:b6:dc:
d8:53:5d:de:93:66:90:b9:c4:23:eb:0c:47:e2:2f:
8f:c6:73:a1:16:33:5d:10:30:c4:33:81:29:15:31:
8c:4f:15:ad:5c:b0:55:98:bf:01:53:90:1a:b1:b7:
03:4d:95:98:97:8f:da:21:fa:4e:36:e4:92:36:28:
32:f2:ce:5b:5f:e0:e8:57:b2:9f:e3:3c:67:f3:70:
92:40:51:86:25:c1:88:2f:31:ac:96:61:ce:35:0c:
1e:50:0d:9b:94:f9:dc:12:9f:51:aa:cf:bb:93:91:
b1:d4:cd:7d:5e:2c:aa:cd:8b:17:bc:2f:c1:1a:7e:
5a:f7:07:32:d0:3f:e1:b5:20:f5:44:48:06:67:a4:
0f:bc:04:42:c3:81:10:ee:d7:62:32:18:36:b3:2a:
ad:5d:86:ce:e8:56:c5:12:8c:aa:3e:c0:27:97:11:
e5:f8:7f:50:95:10:a8:55:6a:7d:d4:cd:06:cf:68:
41:6c:01:d8:2e:9f:1d:5a:74:8f:09:6e:da:8a:27:
4a:40:db:4c:f7:95:bb:73:3f:0e:ff:ab:c5:f3:03:
cc:6d:2c:d7:27:0a:c6:c0:d0:86:4d:23:d8:3d:60:
30:45:25:eb:f0:2a:e5:59:8e:7c:43:3b:77:18:b8:
22:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:41:06:E3:2F:C3:55:DE:0E:D8:1F:B5:36:FE:15:58:CD:BA:30:70
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E0EG4y_DVd4O2B-1Nv4VWM26MHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:27:db:88:4f:2b:a6:58:0b:50:b2:94:a1:85:0d:ec:18:2e:
ba:57:f9:3b:94:07:75:eb:5b:13:70:e2:1c:94:93:40:de:59:
25:8e:19:6e:20:68:a3:65:a0:41:ee:4d:97:e0:fc:33:08:2a:
65:fe:a4:05:e8:5b:71:a7:4e:c7:99:91:ae:e0:ec:db:db:77:
04:32:01:7b:91:4f:1a:cc:24:3d:3f:e9:d7:92:95:6e:2f:54:
ca:b5:cb:c9:91:83:4f:48:ef:96:30:f1:89:d9:19:59:3d:37:
39:6e:3e:4a:0a:84:c2:03:91:e6:8c:e4:8f:78:01:31:22:b6:
fa:35:e5:79:45:40:89:ca:5d:54:02:3a:ae:23:b1:a9:03:88:
1b:bf:58:d9:39:fe:35:6a:29:e9:9a:2f:0e:86:09:a5:22:35:
ee:ec:4c:16:bb:d7:f9:46:ef:b5:29:25:e1:c0:df:cc:45:4d:
59:21:bd:c6:1e:9f:8f:b7:70:4f:fe:a8:77:e6:fe:dd:fb:a9:
34:60:76:78:40:05:49:ab:31:22:f7:02:1a:52:3a:28:aa:a2:
f7:d4:50:ee:91:20:bf:0b:4a:5d:14:86:1a:59:65:53:3d:47:
40:c2:e5:ba:c4:2b:fe:68:ec:ef:02:41:97:aa:e7:74:2d:aa:
29:05:36:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:50:02 2025 by rpki-client