Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E5Pk7Vln23gp64Ewb0Eer5HsChk.roa
File: E5Pk7Vln23gp64Ewb0Eer5HsChk.roa (raw, json)
Hash identifier: pR34wCnXOGJBmTpRXSOusf/L4qPfRudDIQp/xhRk+ps=
Subject key identifier: 13:93:E4:ED:59:67:DB:78:29:EB:81:30:6F:41:1E:AF:91:EC:0A:19
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01822E67FD45CF7551FE1B05D909706565D6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E5Pk7Vln23gp64Ewb0Eer5HsChk.roa
Signing time: Sun 24 Jul 2022 04:12:23 +0000
ROA not before: Sun 24 Jul 2022 04:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:2e:67:fd:45:cf:75:51:fe:1b:05:d9:09:70:65:65:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 24 04:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1393e4ed5967db7829eb81306f411eaf91ec0a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3d:83:30:79:35:52:41:ba:88:3b:c5:46:ff:
a9:cd:02:7d:81:93:a5:18:ec:5d:4d:20:ac:b3:b8:
3b:25:d9:b4:44:80:78:ad:16:3e:4e:85:ca:ef:e9:
30:21:2b:84:36:45:54:28:e0:65:05:86:a6:9c:90:
9e:d8:2a:5f:67:2e:7c:3f:02:2e:80:bc:5a:a1:56:
25:6e:9e:b9:e7:3f:b4:a0:eb:82:f2:cd:b6:1e:86:
c1:f5:2e:7c:a5:cf:e4:7b:c8:58:db:f4:04:97:08:
23:f4:44:7e:52:04:d1:4a:8d:a7:72:83:43:b6:f8:
67:98:af:be:79:00:12:9c:37:fd:ea:4c:1f:2a:df:
7e:25:38:36:4b:b2:06:ed:84:fd:6f:9a:0e:a5:29:
b3:4d:cd:88:3a:73:90:f3:83:4f:7a:bc:8e:49:bf:
2d:52:eb:e7:b1:db:f7:32:ae:05:a3:59:70:77:07:
b7:9d:98:b3:5f:6f:45:47:dc:13:01:3a:7d:1b:ef:
84:df:3d:9d:45:58:d2:02:27:07:9d:37:30:a1:1a:
22:db:59:83:97:55:e6:3f:88:30:58:0d:bd:24:97:
7f:54:17:f3:53:01:45:9a:77:16:f8:6e:95:b6:15:
30:07:2f:67:51:bd:ae:42:f7:d5:df:22:5c:8f:7d:
bd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:93:E4:ED:59:67:DB:78:29:EB:81:30:6F:41:1E:AF:91:EC:0A:19
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E5Pk7Vln23gp64Ewb0Eer5HsChk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:9f:e7:f3:61:73:18:7b:a3:f3:fb:65:b6:29:bd:84:f9:91:
88:8e:51:f4:6d:34:7e:e3:3b:78:bc:00:26:29:30:b5:29:11:
f0:a5:dc:90:b0:dc:5a:34:c0:d8:6f:75:84:ee:b5:e9:1c:4f:
b0:6a:0b:64:2f:6d:c2:ee:91:bc:88:39:cc:28:dc:d5:5a:60:
fb:45:3c:b5:32:cb:91:25:16:23:aa:21:c7:9a:b8:6c:0b:21:
b0:a3:a2:1e:a3:b8:bf:5c:43:e3:64:7c:07:4e:82:0e:98:19:
07:06:70:5f:32:13:9c:2c:a7:98:a9:5f:e2:54:57:82:a9:21:
19:66:dc:74:dc:39:1d:f6:91:a5:01:4b:35:84:45:8c:0d:3e:
26:0c:d3:13:7f:44:2d:19:e2:94:51:e6:5a:19:ad:0f:73:2f:
03:c1:8e:2d:40:a1:11:8f:1a:db:4d:cb:2a:2e:1e:f5:43:50:
3c:41:d4:ab:bb:d9:b1:35:24:ac:41:c1:3e:6e:01:bd:2d:84:
d4:e3:66:80:e4:e2:8c:a3:60:76:1d:51:ef:88:fa:59:3a:8c:
72:c3:f0:f9:60:23:33:d7:f1:a1:12:62:ea:de:93:7e:3e:31:
de:3b:03:7c:ca:80:e8:87:0c:5d:9f:ac:99:ee:8f:77:fd:45:
46:fc:b1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:32:34 2025 by rpki-client