Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E27qzQTipBHq1RYQ6qDf0zBs3sg.roa
File: E27qzQTipBHq1RYQ6qDf0zBs3sg.roa (raw, json)
Hash identifier: O/PzUV144EtSkasUxaOV+y28Xuv1mPr4GTVxjkOnDYM=
Subject key identifier: 13:6E:EA:CD:04:E2:A4:11:EA:D5:16:10:EA:A0:DF:D3:30:6C:DE:C8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018979026420359CC64198A7D61BB9098124
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E27qzQTipBHq1RYQ6qDf0zBs3sg.roa
Signing time: Fri 21 Jul 2023 15:12:27 +0000
ROA not before: Fri 21 Jul 2023 15:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:79:02:64:20:35:9c:c6:41:98:a7:d6:1b:b9:09:81:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 21 15:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=136eeacd04e2a411ead51610eaa0dfd3306cdec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dc:00:d0:ba:0d:73:a2:6f:a6:58:63:89:12:
19:eb:97:b3:bd:ee:a3:f5:c9:2c:73:4a:17:2c:34:
82:7a:fa:e6:2d:d2:40:ea:81:30:ba:a2:d7:36:bb:
f5:2e:3f:ce:c3:aa:bd:1b:a7:f9:65:01:1f:2c:11:
20:3c:4a:b4:89:3f:0b:64:d1:58:68:3e:02:4b:b5:
57:e3:69:95:e2:33:2c:b3:61:72:3d:42:3d:bc:f0:
f2:f9:94:b7:a0:2c:37:66:42:15:59:86:56:a5:cd:
bc:10:e1:0a:1f:1c:51:fa:c9:ea:c2:46:dc:9e:dc:
69:95:cc:42:c7:db:0b:42:25:68:86:cb:75:b2:d2:
fa:bd:33:af:08:9d:52:4b:48:b9:e0:db:f1:e6:ed:
07:bb:ec:52:41:49:b8:e5:5b:fa:c0:79:60:d4:7a:
aa:ad:13:47:04:0e:98:cd:37:fd:c5:8b:31:50:de:
cd:b0:41:16:b5:8a:ab:44:9c:6f:28:3c:62:40:da:
26:c9:31:8b:65:a1:b3:8a:c1:f6:d3:14:39:5a:22:
49:68:b2:cd:bf:14:43:04:53:14:56:ab:eb:41:88:
a2:4f:7e:63:7f:2b:90:c9:49:37:ed:9d:56:f8:87:
59:4d:f4:75:64:f8:00:bd:26:68:f6:ab:5f:3f:cd:
a0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6E:EA:CD:04:E2:A4:11:EA:D5:16:10:EA:A0:DF:D3:30:6C:DE:C8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E27qzQTipBHq1RYQ6qDf0zBs3sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:81:8e:94:64:d8:5a:e4:cf:5a:12:b8:c4:90:10:53:0f:1b:
e9:e8:a9:51:1f:83:76:36:d3:4c:b6:ab:5a:bc:52:6f:e6:0c:
c3:85:c3:7e:d2:77:ae:42:79:37:f2:1f:74:78:45:6a:c0:85:
73:53:1b:fd:0b:0e:2d:4f:ac:52:4f:1c:2c:24:23:49:b4:c9:
b3:c2:d2:c0:a9:12:52:49:f8:cd:d1:3f:30:3d:03:6d:43:8f:
27:c1:f1:33:df:dc:93:92:01:7a:27:be:eb:f3:19:1d:ba:9a:
c2:c9:f1:10:14:e8:6b:ea:00:64:48:2b:cc:90:3f:fb:32:92:
a4:ac:4b:3c:00:37:a2:8c:72:a4:c3:53:c6:f3:f8:0f:10:2e:
97:7a:b1:98:c4:5e:fe:64:96:90:d8:35:8a:21:4b:dc:f8:de:
72:75:0c:c6:28:46:d3:f9:1a:92:9e:be:b1:84:ad:f9:9c:ca:
97:23:e6:48:05:ea:c6:50:f5:3d:cf:8b:ae:4b:3a:4e:d1:ac:
54:54:87:05:9e:19:6c:73:d4:92:80:2a:c5:3f:4d:d1:54:bc:
4a:83:5e:43:83:03:31:95:43:73:fe:b3:8a:b6:cd:30:03:e2:
57:db:a8:90:d0:d4:5e:63:b3:56:33:49:2a:f3:4b:ba:68:6e:
5f:f2:6a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:55:51 2025 by rpki-client