Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E8WKXt6rDMpsaVpWx1rKLqB0d5o.roa
File: E8WKXt6rDMpsaVpWx1rKLqB0d5o.roa (raw, json)
Hash identifier: gTNpzZSExHRIcnRR506mOOyBh83a//6zfXjcKMATsSI=
Subject key identifier: 13:C5:8A:5E:DE:AB:0C:CA:6C:69:5A:56:C7:5A:CA:2E:A0:74:77:9A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018757C46870F2B0454AD193EB36669F4B67
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E8WKXt6rDMpsaVpWx1rKLqB0d5o.roa
Signing time: Thu 06 Apr 2023 18:11:42 +0000
ROA not before: Thu 06 Apr 2023 18:11:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:57:c4:68:70:f2:b0:45:4a:d1:93:eb:36:66:9f:4b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 6 18:11:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13c58a5edeab0cca6c695a56c75aca2ea074779a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:26:72:24:c9:04:65:3e:1d:ff:5f:a0:71:6e:
63:b7:58:3d:00:1e:f9:32:b3:01:07:b8:3c:79:28:
34:be:a8:bc:19:e2:fa:30:95:59:2b:e7:17:f7:1e:
eb:14:40:4e:df:fc:4b:55:aa:d7:a2:1b:a1:e8:d0:
00:a3:49:44:d1:c4:cf:0d:c0:7d:1b:ae:49:84:ff:
63:d5:f1:1d:f2:2d:a6:d7:fd:df:5c:0d:2d:0d:fb:
88:2d:c0:ac:85:aa:7a:6e:9d:76:81:73:4e:e3:5f:
c5:d6:c8:f4:da:af:f5:3d:2c:e8:e4:22:b7:6c:8b:
ef:3d:f9:69:d7:fe:1d:fa:6b:db:bd:7d:5c:aa:3b:
b1:e9:05:e5:cb:b4:dc:de:75:38:03:be:da:f1:3b:
47:81:b9:63:ec:5a:81:06:ce:3c:7f:65:4c:40:e3:
5b:e5:2a:a5:15:f0:05:ee:21:cb:7d:35:ac:f5:5b:
d1:39:7a:06:40:1f:4f:f9:e9:f5:06:cc:50:ef:c0:
7a:e9:ea:76:67:b2:43:6c:c7:68:f9:11:98:c9:7c:
4b:bf:c6:6b:0c:3a:22:ef:1d:f3:eb:cf:3b:b9:f6:
06:cf:0a:2f:e7:7e:6d:ab:e4:37:b4:a7:0f:de:43:
c8:3d:b1:c1:cd:c6:ba:a6:f2:a3:56:20:37:a0:73:
3a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C5:8A:5E:DE:AB:0C:CA:6C:69:5A:56:C7:5A:CA:2E:A0:74:77:9A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E8WKXt6rDMpsaVpWx1rKLqB0d5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:73:3f:dd:f7:fb:bf:1f:87:93:0b:96:37:0e:86:8b:4e:65:
a4:a7:77:29:b1:c2:6e:ec:1c:f1:72:ea:26:36:62:2d:a1:46:
93:76:e2:7d:6f:3a:64:6a:a6:54:34:44:ab:52:47:28:52:a5:
42:46:52:25:28:48:1c:a6:df:24:4d:0d:33:67:50:ed:f3:5c:
d6:b5:f4:dd:95:c3:b1:94:d5:ba:a4:ba:aa:d7:62:07:08:6a:
68:c1:10:63:d6:f4:fb:2e:8b:fa:5d:02:99:00:04:d7:bd:25:
90:34:25:53:76:68:9e:09:ab:99:49:58:e3:54:ed:76:1a:83:
b4:08:dc:20:99:d9:fb:a3:c1:9e:c5:82:99:e6:f0:34:3a:69:
ea:82:e2:1e:45:5d:c8:e4:9e:08:86:1a:9f:eb:4c:09:49:3a:
23:e3:fa:f8:13:b1:10:13:e3:2b:f1:1c:0f:4b:68:29:6e:2a:
d2:b5:2c:de:75:2c:b8:cb:52:a0:9c:ac:bc:96:71:9d:f1:f0:
80:7d:0b:dc:13:f7:e5:08:07:43:b7:d0:d9:1f:c6:8c:3c:0c:
e5:eb:b0:97:15:a1:43:8b:c0:1c:1a:30:d4:f3:4c:14:1b:de:
33:9c:68:66:7c:b4:65:70:ab:bc:56:b3:4a:10:c0:02:ac:1c:
1f:98:d7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:27 2025 by rpki-client