Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E4vXIbw2A8f71UZoV-9LwfH5jPM.roa
File: E4vXIbw2A8f71UZoV-9LwfH5jPM.roa (raw, json)
Hash identifier: Mj2lPCBy35DpAHWLhfo3h/7ZPCW97eLPRyPi79pGh74=
Subject key identifier: 13:8B:D7:21:BC:36:03:C7:FB:D5:46:68:57:EF:4B:C1:F1:F9:8C:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018990D5A02D4C875B7E7383BC884401426B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E4vXIbw2A8f71UZoV-9LwfH5jPM.roa
Signing time: Wed 26 Jul 2023 06:14:26 +0000
ROA not before: Wed 26 Jul 2023 06:14:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:90:d5:a0:2d:4c:87:5b:7e:73:83:bc:88:44:01:42:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 06:14:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=138bd721bc3603c7fbd5466857ef4bc1f1f98cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a2:0c:4d:97:e7:80:b0:ff:ae:77:c9:d2:0b:
ac:e1:29:3e:3d:63:5f:bb:2c:0b:ec:c8:25:3c:2a:
f1:ae:6c:bf:95:2c:be:7a:48:56:f6:31:92:1f:2b:
8a:46:e0:39:cb:77:c3:2a:5a:49:20:cd:c6:c2:41:
00:5d:7b:1b:2b:c1:8c:d6:44:e8:64:eb:51:39:6d:
ba:91:d7:3e:0a:86:2f:03:23:0b:f5:41:66:b0:23:
75:e3:86:eb:5e:a5:3b:10:7d:8d:7b:41:61:5c:7c:
fd:8f:09:37:f1:f9:14:a8:7c:67:16:84:bf:c6:15:
e4:42:1d:04:d0:86:26:d6:73:0b:57:da:91:03:ba:
87:84:25:e7:2f:96:c1:89:b1:f3:12:27:3c:06:11:
50:0c:71:d0:1c:25:58:22:ba:da:0e:de:13:68:35:
8d:63:65:8f:b7:04:90:f1:41:bd:1b:89:3e:58:32:
2e:8d:8c:77:29:42:af:80:51:8f:3e:f4:c5:41:f0:
8c:40:9c:07:f5:aa:61:6e:0f:c8:02:6e:d0:99:c6:
ab:06:42:e1:d3:29:8d:e7:ac:95:fb:a9:9c:df:38:
71:d5:03:d0:a1:1b:91:ad:18:a9:0b:5b:65:cb:5e:
27:b3:34:8b:c7:d4:5d:c1:0d:3e:9f:25:05:c0:81:
37:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8B:D7:21:BC:36:03:C7:FB:D5:46:68:57:EF:4B:C1:F1:F9:8C:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E4vXIbw2A8f71UZoV-9LwfH5jPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:e2:d8:e3:32:8c:5e:b3:a0:95:7a:2b:29:cb:fd:3d:ae:d2:
8e:87:7e:8f:f6:20:19:c7:4c:dc:15:5f:ad:77:d0:63:00:fe:
56:65:6c:70:a2:e3:20:fb:a4:0b:6a:24:a8:fd:04:e8:da:fc:
1f:5c:ab:ad:f8:c9:88:ba:06:38:b4:3a:e2:a5:79:19:23:8c:
1c:61:29:df:71:f1:1a:3a:d5:a3:00:21:31:46:28:a9:69:a9:
9e:4b:06:5f:a8:21:08:9e:02:20:f4:11:0a:17:7a:eb:d1:35:
d8:d5:2e:62:ae:01:d6:f0:b4:1c:85:96:f8:e2:c2:67:95:6b:
a4:02:90:24:17:e7:09:1c:42:a0:fa:06:41:32:b0:e4:bf:f6:
d9:b5:0d:b9:43:02:c3:e4:ac:24:36:ab:7d:06:bc:a0:de:57:
81:3c:99:08:b1:f0:b2:aa:32:bf:f5:88:4b:9a:33:0d:03:f1:
02:19:18:78:4b:29:dd:82:f7:04:44:e2:19:7e:ff:10:2e:4d:
fe:a0:e8:c0:21:46:6a:2e:01:c2:8b:2d:93:34:63:8e:b9:25:
fd:6b:33:ce:98:14:d6:35:50:49:c9:f9:a0:f7:27:1f:e1:76:
54:d6:1e:2e:5f:da:e3:93:2e:df:b3:81:b9:44:d8:17:ac:7a:
cb:03:21:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:59:58 2025 by rpki-client