Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E36imAKz3SeVHW7BJwgvfFumjQ4.roa
File: E36imAKz3SeVHW7BJwgvfFumjQ4.roa (raw, json)
Hash identifier: D09DhG7cfKd8V0af4lRj0FfuOVNDm1FQEG4QAW7dl/E=
Subject key identifier: 13:7E:A2:98:02:B3:DD:27:95:1D:6E:C1:27:08:2F:7C:5B:A6:8D:0E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01886E487F76259AB25DD967A950E2033266
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E36imAKz3SeVHW7BJwgvfFumjQ4.roa
Signing time: Tue 30 May 2023 20:10:24 +0000
ROA not before: Tue 30 May 2023 20:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6e:48:7f:76:25:9a:b2:5d:d9:67:a9:50:e2:03:32:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 30 20:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=137ea29802b3dd27951d6ec127082f7c5ba68d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7b:36:27:1b:ff:6c:ed:f5:22:74:cf:37:02:
fe:64:65:49:c6:f5:48:d5:bb:75:7a:38:47:24:cf:
fb:a6:18:03:7c:1e:6f:62:72:16:c2:67:81:02:f9:
53:bb:e2:6b:97:a2:d1:0e:62:93:98:f8:65:75:f3:
6a:4b:d3:3d:ab:2d:e4:3b:f4:9e:44:95:f5:29:cb:
92:bc:8f:1e:b8:8e:32:3d:ea:af:25:01:98:51:4f:
f6:58:02:db:98:ef:c8:4b:f2:ea:7c:f7:e0:92:b9:
0f:8a:87:96:f3:17:30:52:05:3e:17:3e:52:d7:78:
1e:df:56:cd:de:49:d0:2d:c8:b4:c2:e5:85:08:d3:
50:db:34:0a:59:9c:fe:2e:1a:b7:f8:c9:85:c6:b4:
d5:d0:d8:26:dc:d7:7b:de:1d:22:a9:b1:b5:9d:8b:
28:9f:b4:11:cb:09:23:24:38:2e:ba:34:f6:e1:94:
96:92:cf:69:11:50:23:e3:b5:e6:e6:de:a4:9b:f0:
f5:c6:47:e1:02:68:c4:8b:71:18:5d:a9:c3:86:00:
31:04:b4:09:1f:97:f7:f3:db:05:b6:cf:86:0b:01:
00:8a:a3:f9:85:9b:4a:53:89:d3:54:d0:2d:1f:ca:
c3:4a:79:99:79:76:65:4f:51:e7:6a:ac:6e:b7:6c:
a8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7E:A2:98:02:B3:DD:27:95:1D:6E:C1:27:08:2F:7C:5B:A6:8D:0E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E36imAKz3SeVHW7BJwgvfFumjQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:2b:e5:db:e2:75:5b:cf:8d:67:05:46:fa:ee:d2:48:ba:0d:
ad:69:ba:86:92:18:10:56:68:ef:72:9e:84:cd:c8:72:58:d5:
b5:b8:d6:e1:47:0e:90:a8:79:7b:66:40:3a:cb:2f:40:5e:c5:
96:c5:a4:13:0e:b1:0c:f0:d1:8d:88:31:a5:33:75:50:a0:83:
9c:4d:46:68:ca:e8:e4:3c:55:4a:3f:9a:9a:87:8a:a9:90:65:
71:2f:48:eb:7d:2e:59:8c:09:a8:ef:5e:7d:b2:38:cf:56:07:
2c:1e:af:03:a2:8c:66:15:ab:84:58:9c:15:85:d6:4c:a4:48:
51:57:7c:af:9c:7d:21:2c:4c:59:de:8b:60:a7:f1:17:7a:a4:
08:93:f7:7d:b1:50:12:37:fb:43:b9:83:30:e0:4d:32:2c:d5:
43:31:02:c1:3c:14:64:9f:62:e7:85:2a:31:68:73:84:df:12:
6b:0e:40:5e:64:d5:9c:50:93:73:1a:85:ee:fd:d2:92:94:69:
43:b0:95:71:de:dd:6d:7e:01:ab:f8:9a:24:fd:83:39:3a:15:
28:6f:b9:37:11:c8:6f:86:6f:f3:fd:26:84:b1:64:f1:5c:87:
08:25:7b:bf:ea:8e:95:93:db:a9:0b:ba:9c:45:12:34:ea:a6:
49:f0:ab:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:49 2025 by rpki-client