Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E3T05Axjc33UEXB8PG7tqYrK7NY.roa
File: E3T05Axjc33UEXB8PG7tqYrK7NY.roa (raw, json)
Hash identifier: 5bJIKaQRA2uY++2KxC00VZ1TUQEMjrPM2OCUPUNsB6E=
Subject key identifier: 13:74:F4:E4:0C:63:73:7D:D4:11:70:7C:3C:6E:ED:A9:8A:CA:EC:D6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01856AE180F6B8E9FB4F36F366BD5EF980DB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E3T05Axjc33UEXB8PG7tqYrK7NY.roa
Signing time: Sun 01 Jan 2023 01:10:41 +0000
ROA not before: Sun 01 Jan 2023 01:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:e1:80:f6:b8:e9:fb:4f:36:f3:66:bd:5e:f9:80:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 1 01:10:41 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1374f4e40c63737dd411707c3c6eeda98acaecd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a6:58:6a:40:16:1a:1d:38:59:69:44:6b:08:
cb:d3:2a:b3:a3:6a:f2:33:0f:95:51:0f:d6:eb:3e:
5a:58:0f:de:67:c3:e9:dc:b3:9c:93:79:2e:09:f3:
0f:7d:0a:74:8f:f4:60:ca:ec:aa:f8:0d:1f:1c:aa:
45:77:f7:b1:26:a8:61:b0:5f:7f:0a:c7:47:f1:0f:
f5:30:06:56:8b:e6:a7:e1:67:70:3f:ea:6b:20:69:
a1:66:88:70:06:60:2b:dc:43:68:01:e1:2e:7f:3d:
26:f5:89:af:42:e9:11:86:d2:7d:56:ff:92:57:14:
d4:3a:ec:ea:b4:30:4c:bb:0a:46:fb:46:21:d3:17:
bf:a7:d0:ef:cd:1f:40:10:6a:be:e8:e0:44:c8:fc:
c7:38:1e:8e:79:05:15:77:b0:9c:a5:0a:53:bc:7b:
ff:36:2c:35:c9:bc:24:e4:cd:2b:0f:3a:c8:3b:7e:
03:6c:5e:08:9c:27:de:ac:7b:d8:84:29:bf:6b:65:
95:56:c1:53:38:94:f2:7c:f4:29:9a:b5:61:0a:94:
96:39:4b:52:2e:bc:8c:4f:c6:ba:94:e1:20:47:fb:
f7:8a:d2:e0:b7:0a:4a:65:9f:6f:08:c6:45:4e:d1:
18:0e:4d:87:f9:4d:1f:e9:d3:27:b7:7a:2c:c7:42:
33:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:74:F4:E4:0C:63:73:7D:D4:11:70:7C:3C:6E:ED:A9:8A:CA:EC:D6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E3T05Axjc33UEXB8PG7tqYrK7NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:53:6f:f4:36:5e:64:c1:ae:e9:ef:06:02:a3:1f:0d:a1:97:
9c:71:25:02:ea:c5:20:5b:21:78:26:eb:47:01:3c:cb:2a:bc:
5d:99:51:78:31:51:95:eb:a2:57:cf:f1:57:e9:ce:1c:41:a4:
b2:3d:87:6d:92:f3:90:93:6e:8a:d7:ec:9c:65:5c:4a:ac:ad:
dc:ea:08:c0:d4:0d:36:7d:23:41:45:17:8c:95:1c:02:08:68:
ae:fd:8e:3d:8f:5e:25:10:d9:a4:65:0b:e6:bf:b4:09:00:04:
df:83:18:3d:e5:4f:1d:e3:22:be:4e:55:11:7e:8f:6d:19:c7:
50:b3:60:16:fc:c9:69:71:15:4a:a1:d0:fe:4c:90:a8:d1:be:
6c:f7:f0:ae:b9:2f:70:22:c1:e7:1b:35:7f:69:5b:e8:5c:78:
73:81:fc:a2:87:fe:11:84:02:35:d5:55:39:ad:0b:50:7a:20:
34:ed:49:55:19:25:e4:80:e7:bd:24:95:7a:7b:a7:f5:45:c2:
de:93:d8:b4:22:f0:94:53:f4:23:a0:d5:42:72:14:9a:0a:45:
e5:07:99:2c:7d:d8:86:57:36:6d:7c:cb:25:43:27:22:14:8e:
29:2a:13:e5:5c:05:3c:8f:7c:9d:76:ac:a0:61:67:09:65:10:
08:64:31:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 07:17:10 2025 by rpki-client