Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E9At7MbqHoiMOa2_4K3zmXiyG04.roa
File: E9At7MbqHoiMOa2_4K3zmXiyG04.roa (raw, json)
Hash identifier: hmdgSySL9LoWG64Egg/LR5qifQv5ngOWrllBZgvxMmk=
Subject key identifier: 13:D0:2D:EC:C6:EA:1E:88:8C:39:AD:BF:E0:AD:F3:99:78:B2:1B:4E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184718D19B687C488BD2F87F2B4D47F8300
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E9At7MbqHoiMOa2_4K3zmXiyG04.roa
Signing time: Sun 13 Nov 2022 15:13:03 +0000
ROA not before: Sun 13 Nov 2022 15:13:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:71:8d:19:b6:87:c4:88:bd:2f:87:f2:b4:d4:7f:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 13 15:13:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13d02decc6ea1e888c39adbfe0adf39978b21b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:38:47:1b:f4:a4:e4:37:df:45:98:30:fd:
24:b9:98:ff:b5:78:4d:40:2e:fa:8c:c0:1d:a7:b1:
e1:58:06:25:10:14:78:81:31:60:cb:b9:db:8d:f0:
cb:1f:49:e3:31:15:46:c7:78:a6:96:5d:69:d2:92:
d6:e6:88:3c:1a:f3:fa:96:91:01:a4:15:48:2d:ee:
1d:8a:2f:13:2b:20:0c:d0:34:39:80:dc:fa:58:fe:
45:0e:11:18:fb:7b:39:a5:fb:5b:11:85:b3:e3:13:
e6:fa:d9:c4:4b:c1:23:97:8f:a6:84:64:99:9c:29:
0a:75:05:77:55:a6:62:0b:ef:b6:97:fa:4e:9e:1a:
0c:e2:30:45:01:69:6a:a9:a2:2e:a0:1b:ad:a9:bf:
cc:74:94:42:9b:ae:c9:0c:42:46:2d:bb:b2:cd:d6:
d2:0d:d1:72:d4:f1:d8:c7:d8:e2:f8:cb:ce:a1:38:
5f:ae:48:81:af:18:3a:6a:6f:0a:7f:2b:4d:c7:5e:
2e:b5:5e:80:f3:29:2c:b3:13:96:28:ae:d8:fa:26:
02:ed:64:43:16:b7:fd:88:f7:01:71:4c:ca:51:22:
68:08:26:b2:e2:4a:a3:05:c6:92:b1:8c:36:0a:ce:
8a:8e:ca:4e:2d:1f:07:5d:ed:57:2b:7c:66:bb:7e:
4e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D0:2D:EC:C6:EA:1E:88:8C:39:AD:BF:E0:AD:F3:99:78:B2:1B:4E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E9At7MbqHoiMOa2_4K3zmXiyG04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:12:80:69:8a:7c:5a:53:af:ba:eb:89:3e:15:7c:51:06:4f:
2e:86:ff:40:d9:02:03:c1:28:de:2a:b4:f9:1f:56:6e:40:fe:
6d:1a:86:e7:3d:2c:b7:95:89:98:34:21:07:9c:3a:c0:9d:54:
6e:71:2c:c7:a2:1d:24:ba:3a:f2:2a:4a:51:42:f1:c5:69:66:
23:41:ef:f8:d6:ac:52:a5:33:0c:d9:04:4e:7b:68:8c:8d:2b:
62:67:09:52:59:83:bb:70:9e:87:0e:08:18:2a:ed:f9:8c:ff:
07:8d:7d:94:bc:79:fe:c3:0f:52:bc:7c:0a:7d:e0:51:10:61:
0c:72:df:8e:18:22:af:26:55:cd:3f:bd:a6:4a:29:68:11:aa:
94:2d:0b:f9:8b:e5:83:9b:91:34:c3:6b:f1:f3:07:c3:b0:45:
b0:6b:54:67:23:b7:39:7c:7b:ca:f0:b9:85:49:2e:de:ef:54:
75:7e:97:c8:61:48:e4:d6:48:b3:0d:c1:c4:a8:fa:c8:08:0d:
c9:48:c5:59:8f:2d:63:fe:9c:39:81:6a:e2:02:05:0f:3d:a7:
33:ce:03:e7:43:72:5c:9d:10:fd:99:1c:23:73:0f:a2:00:e9:
65:98:16:7c:85:cb:3b:35:b5:91:f7:79:3b:1c:7d:3c:84:50:
9d:4c:95:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:58:46 2025 by rpki-client