Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E7c8VajnU3YBdH7V4fcP-y8zo8w.roa
File: E7c8VajnU3YBdH7V4fcP-y8zo8w.roa (raw, json)
Hash identifier: LXG0PjK4JLP+ubr74TZT4PHf8H/wzEG+WRX3Dufu5TI=
Subject key identifier: 13:B7:3C:55:A8:E7:53:76:01:74:7E:D5:E1:F7:0F:FB:2F:33:A3:CC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185EA1EECDAF5A655198EDEA9807A741DD7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E7c8VajnU3YBdH7V4fcP-y8zo8w.roa
Signing time: Wed 25 Jan 2023 18:09:33 +0000
ROA not before: Wed 25 Jan 2023 18:09:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ea:1e:ec:da:f5:a6:55:19:8e:de:a9:80:7a:74:1d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 25 18:09:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13b73c55a8e7537601747ed5e1f70ffb2f33a3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:84:52:bf:5a:27:b1:12:f5:fa:53:dd:8b:43:
c3:c8:81:2f:d7:3d:13:51:f6:d6:41:49:a2:4f:cf:
3e:df:df:01:fd:d0:1d:a4:05:72:42:3e:67:bb:3a:
75:df:96:89:5c:a3:fc:67:15:58:86:be:ca:29:e0:
9d:96:b0:70:a8:e0:bb:05:97:a6:ca:68:58:a8:38:
c8:25:e4:b0:89:97:01:33:6f:0d:c6:fa:54:5b:a3:
d4:e9:e7:bc:5b:5f:b4:58:a4:c3:42:d4:76:19:3a:
53:e8:e5:51:30:35:1e:90:ae:41:b8:d2:67:b4:26:
2d:48:37:4d:c9:6f:e9:a8:f4:bf:e9:bb:3f:3e:48:
5c:8b:79:55:eb:86:5e:7d:e4:07:bd:ad:1c:4a:5d:
11:e9:b7:7b:04:92:41:e5:fa:8a:cc:2e:76:dc:c6:
04:2b:76:5a:75:4a:e1:0c:50:45:a1:38:37:dd:6c:
db:6d:86:9a:8f:88:a3:51:76:96:19:f1:50:72:fc:
48:4a:c6:97:2b:80:b5:8f:97:15:d7:20:ca:21:47:
d2:f2:47:0b:d6:cf:b8:6f:61:26:d5:5f:34:31:4f:
86:cd:e5:b4:94:11:16:b8:c2:79:03:60:77:7c:5a:
05:c7:94:42:92:33:c0:44:1e:9d:87:4d:81:bb:3b:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B7:3C:55:A8:E7:53:76:01:74:7E:D5:E1:F7:0F:FB:2F:33:A3:CC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E7c8VajnU3YBdH7V4fcP-y8zo8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:18:e3:8f:a8:fe:1e:0b:ec:b1:cb:55:e3:48:01:a7:fd:56:
0c:f4:61:54:27:1e:b1:7f:1c:80:b6:a6:a2:6b:01:33:7e:29:
a9:af:86:53:7e:76:25:77:29:54:d0:1a:42:1d:56:5e:d5:ea:
2b:e2:8e:3e:bb:90:cd:8a:4b:87:34:63:55:c4:3b:4e:a1:81:
97:1d:46:a1:31:a9:33:98:6d:d0:22:34:7b:1a:2c:7c:40:2c:
e6:3d:2c:b7:2b:60:7a:06:18:70:fe:cb:1b:52:40:28:98:33:
a2:0d:38:e8:28:ad:39:63:41:ed:75:68:05:b0:c5:43:12:ee:
47:e7:45:97:73:3c:3c:96:c8:d6:85:22:f2:bc:3a:e7:98:0f:
46:2c:6d:11:8d:36:b9:53:88:76:01:cc:aa:43:8a:4a:d4:a4:
39:22:a4:70:24:4e:d0:19:8e:ef:74:ab:ef:9c:7f:83:5c:d5:
e0:d2:07:33:b6:69:5c:a4:1a:8e:56:04:57:e8:73:13:7f:ff:
82:85:04:33:08:28:39:6d:5f:0a:e8:2b:d5:6f:ca:91:ef:a3:
a9:d3:24:3b:d1:a0:24:8a:54:cb:33:e2:d3:bb:db:c6:c4:46:
1b:5c:be:09:93:8d:21:06:6f:0d:47:51:d1:04:08:d0:b6:38:
01:70:4d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:26:49 2025 by rpki-client