Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E2IvHCkXH8QpTXHC1yrIFVKnJkw.roa
File: E2IvHCkXH8QpTXHC1yrIFVKnJkw.roa (raw, json)
Hash identifier: FxQPalXg+e7JXFx6yIj6ReCNk6ZniKI19VkF5yy0S1w=
Subject key identifier: 13:62:2F:1C:29:17:1F:C4:29:4D:71:C2:D7:2A:C8:15:52:A7:26:4C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01880110F899D3B0D9E1D7E29DDF9C3AE859
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E2IvHCkXH8QpTXHC1yrIFVKnJkw.roa
Signing time: Tue 09 May 2023 15:11:09 +0000
ROA not before: Tue 09 May 2023 15:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:01:10:f8:99:d3:b0:d9:e1:d7:e2:9d:df:9c:3a:e8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 9 15:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13622f1c29171fc4294d71c2d72ac81552a7264c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:de:84:be:7b:6c:b2:09:ba:57:0a:f7:48:62:
ab:96:18:d5:71:66:46:5d:86:7c:e7:f7:2d:62:b5:
dc:32:fe:8c:ab:b4:11:7b:01:5c:ca:fd:06:80:6e:
5c:5d:ad:79:43:9b:58:9c:a6:39:56:3f:ee:15:a2:
ee:31:45:d9:6f:e0:ba:a8:61:a4:ee:a8:a7:5d:c5:
91:77:47:7a:f0:c4:0e:cb:90:98:92:20:5b:b4:df:
34:5d:1d:14:ff:57:1c:08:81:ca:0d:c4:05:ba:5b:
6b:29:8d:52:e0:43:4e:de:9f:36:ba:ae:fe:af:71:
b6:3c:2e:fb:17:48:cc:f9:3d:e1:4c:e3:fe:9d:5a:
e8:8b:78:c0:79:92:05:f5:e2:ae:fd:20:1c:b0:9a:
41:6d:29:3c:84:be:eb:0e:cc:2b:22:60:ed:19:d3:
4b:05:4c:36:39:0f:a7:07:b9:8e:40:0b:e5:97:0c:
31:f3:95:04:02:ea:03:8e:0f:1c:51:4c:90:6a:f0:
77:12:16:ec:70:55:c9:eb:b8:32:3a:89:7f:c2:8a:
ce:f2:2a:1f:c9:07:2a:2a:b5:e6:9c:c1:b5:50:00:
fe:3d:16:b5:f0:83:50:04:b5:cf:2e:b7:6c:96:72:
73:18:32:0c:58:a0:b9:fd:6e:c4:f1:c8:8f:da:2e:
cf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:62:2F:1C:29:17:1F:C4:29:4D:71:C2:D7:2A:C8:15:52:A7:26:4C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E2IvHCkXH8QpTXHC1yrIFVKnJkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:24:59:16:f1:38:31:32:2c:68:93:32:7a:fe:e9:dc:47:5d:
44:95:e8:69:c3:51:aa:b2:33:36:e3:1c:a8:ef:09:1e:ef:56:
0f:eb:a1:ba:28:b2:5d:0b:36:b8:e9:02:43:1b:3f:18:15:c4:
39:41:5b:cb:2e:c5:ad:1d:b4:07:fb:44:ef:ab:59:47:3b:e7:
a9:42:b8:89:6a:3d:dc:28:9a:61:e0:5e:a2:42:2a:22:d9:45:
b1:85:55:75:a2:ae:df:dd:54:aa:ae:b2:48:df:20:46:a0:6d:
98:ab:9d:74:4d:40:58:68:45:a0:23:b2:ac:7f:a5:c9:7e:c1:
4c:13:25:c0:bd:eb:36:1e:1f:6e:14:2c:8b:21:d8:c3:8e:b4:
8b:f9:ec:e8:03:49:5c:ae:6d:2b:45:af:7a:39:33:85:65:d7:
35:8a:a3:12:1a:be:d4:bc:29:4f:da:ac:f8:f2:4e:6c:16:f0:
ed:9a:e2:a5:8b:92:59:d3:85:0d:d2:80:ca:bf:a6:71:a4:49:
b5:2c:2f:aa:19:2f:4c:04:70:a1:3d:cb:8b:12:76:da:06:b5:
3b:f8:e3:19:10:be:bc:55:87:7b:e2:bd:de:30:46:d0:94:e3:
eb:7f:d8:4c:cb:10:9c:74:93:c5:5c:28:3c:be:b2:80:c3:55:
29:3e:ed:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:16:50 2025 by rpki-client